Legal
Privacy policy
Who we are
This website, mchandco.com, is run by McH & Co Ltd, a company registered in England and Wales (company number [company number]), whose registered office is at [registered office address]. In this policy, “we” and “us” mean McH & Co Ltd.
We are the controller of the personal information described here. If you have any questions about it, email david@mchandco.com. Our registration number with the Information Commissioner’s Office is [ICO registration number].
What we collect and why
When you apply or enquire. If you use the form on this website, we collect your name, email address, phone number if you give it, the service you are interested in, where you are on your journey and anything you choose to tell us. We use it to reply to you and to talk with you about working together. Our lawful basis is taking steps at your request before entering into a contract and, otherwise, our legitimate interest in responding to people who contact us.
When you email or call us. We keep what you send us so we can reply and keep a record of our conversations. Our lawful basis is our legitimate interest in running our business.
When you buy a digital product. Our guides and prompt packs are sold through Payhip, with payments handled by Stripe or PayPal. Payhip shares your name, email address and what you bought with us so we can support you. We never see your full card details. Our lawful basis is performing our contract with you, and keeping records we are required to keep by law.
When you work with us. If you join the SA CEO Programme or become a Turnkey, coaching or design client, we hold the information needed to deliver the service, invoice you and keep proper business records. Our lawful basis is performing our contract with you and meeting our legal obligations.
The SA Paradigm newsletter. If you subscribe, you do so on Substack, which runs the sign-up and sends the emails. Substack shares your email address with us as the publisher. You can unsubscribe from any email. Substack’s own privacy policy applies to its service.
Cookies and tracking
This website does not use advertising or analytics cookies, and it does not track you across other websites. Our fonts and images are hosted on our own website, so loading a page does not share your details with font or image providers.
Our hosting provider keeps short-term technical logs, such as IP addresses, to keep the website secure and running. Third-party sites we link to, such as Substack and Payhip, set their own cookies when you visit them.
Who we share it with
We do not sell your information. We share it only with the providers who help us run the business, under contracts that require them to protect it: our website host (Netlify, which also receives the form submissions), our email provider, Payhip, Stripe and PayPal for purchases, Substack for the newsletter, and our accountants.
We may also share information where the law requires it.
Some of these providers are based in, or store data in, the United States. Where information leaves the UK, it is protected by the safeguards UK data protection law requires, such as the UK’s adequacy arrangements or approved contract terms.
How long we keep it
We keep enquiries for up to two years from our last contact, unless you become a client. We keep client and purchase records for six years after the end of the tax year they relate to, because the law requires it. After that we delete them securely.
Your rights
You have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. To use any of these rights, email david@mchandco.com. We will reply within one month.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this policy if the way we handle information changes. The date below shows when it was last updated. Last updated 30 October 2026.