Privacy & Cookies

Last updated: September 2026

Theresa Cheung respects your privacy and is committed to protecting your personal information.

This Privacy & Cookies Policy explains what information may be collected when you visit www.theresacheung.com, contact Theresa, subscribe to the newsletter or otherwise interact with the website, how that information is used and the choices you have.

Who we are

For the purposes of UK data protection law, Theresa Cheung is the data controller for personal information collected through this website.

Website: www.theresacheung.com

Email: theresa@theresacheung.com

Information we may collect

The information we collect depends on how you use the website.

It may include:

• your name;
• your email address;
• information you provide when contacting Theresa;
• information you provide when subscribing to the newsletter;
• correspondence and communications you send to us;
• technical information about your device, browser and how you use the website;
• your cookie and privacy preferences; and
• information collected through analytics or similar technologies where you have consented to their use.

Please avoid sending sensitive personal information unless it is genuinely necessary for your enquiry.

How we use your information

We may use your personal information to:

• respond to enquiries and messages;
• send newsletters and updates where you have chosen to receive them;
• manage communications relating to media, publishing, speaking or other professional enquiries;
• operate, maintain and protect the website;
• understand how visitors use the website and improve its content and performance;
• remember your privacy and cookie preferences;
• prevent misuse, fraud or security incidents;
• comply with legal or regulatory obligations; and
• establish, exercise or defend legal rights where necessary.

We will only use personal information for purposes that are compatible with the reason it was collected, unless the law allows or requires otherwise.

Our lawful bases for using personal information

Under UK data protection law, we need a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Consent

We rely on your consent where you choose to:

• subscribe to marketing or newsletter communications; or
• allow optional cookies or similar technologies.

You can withdraw your consent at any time.

Legitimate interests

We may process information where it is reasonably necessary for our legitimate interests, provided those interests are not overridden by your rights.

This may include:

• responding to general enquiries;
• operating and improving the website;
• maintaining website security;
• understanding how the website is used; and
• managing professional correspondence.

Contract

Where you ask us to take steps before entering into an agreement, or where processing is necessary to perform an agreement with you, we may rely on contractual necessity.

Legal obligation

We may process information where necessary to comply with a legal or regulatory requirement.

Newsletter and marketing communications

If you subscribe to Theresa's newsletter, we will use the information you provide to send you news, articles, book updates, media appearances, events and other relevant updates.

We only send these communications where we have an appropriate lawful basis to do so.

You can unsubscribe at any time by using the unsubscribe link included in marketing emails or by contacting us.

Unsubscribing will not necessarily delete every record we hold about you. We may retain a minimal record of your preference where necessary to ensure that we respect your request not to receive further marketing.

Contacting Theresa

If you contact Theresa by email, through the website or through another communication channel, we may retain your message and contact details for as long as reasonably necessary to deal with your enquiry and any subsequent correspondence.

Messages sent to Theresa may contain personal stories or information. Please only provide information you are comfortable sharing and that is relevant to your enquiry.

Sharing your information

We do not sell your personal information.

We may share or allow access to information where reasonably necessary with trusted organisations that help operate the website or provide services on our behalf.

These may include:

• website hosting and technical support providers;
• email and newsletter providers;
• website analytics providers;
• website security and spam-prevention services;
• professional advisers where necessary; and
• other suppliers who provide services connected with the operation of the website.

These organisations may only use personal information as permitted by applicable law and, where they process information on our behalf, in accordance with appropriate contractual obligations.

We may also disclose information where required by law, regulation, court order or another lawful authority.

International transfers

Some of the technology providers used by this website may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard is in place, such as an adequacy regulation or approved contractual protections, where required by law.

How long we keep your information

We do not keep personal information for longer than reasonably necessary.

Retention periods depend on the type of information and why it was collected.

Generally:

• newsletter subscription information is retained while you remain subscribed;
• general enquiries and correspondence may be retained for up to 24 months after the last meaningful contact unless there is a reason to retain them for longer;
• records needed to demonstrate marketing or cookie preferences may be kept for as long as reasonably necessary;
• technical and analytics information is retained according to the settings of the relevant service; and
• information may be retained for longer where required for legal, accounting, security or dispute-resolution purposes.

When information is no longer required, it will be deleted, anonymised or securely disposed of where reasonably practicable.

Cookies

What are cookies?

Cookies are small text files or similar technologies stored on your computer, phone or other device when you visit a website.

They can help websites function correctly, remember choices, understand how people use a website and, in some cases, measure advertising or marketing activity.

How we use cookies

This website may use the following categories of cookies:

Essential cookies

These cookies are required for the website to operate properly.

They may be used for purposes such as:

• website security;
• maintaining essential functionality; and
• remembering your cookie and privacy choices.

Because these cookies are necessary for the website to function, they do not require your consent.

Functional cookies

These cookies support additional functionality or third-party features.

For example, they may be associated with embedded media or other enhanced website features.

Where consent is required, these cookies will not be activated unless you choose to allow them.

Analytics cookies

Analytics technologies help us understand how people use the website, such as which pages are visited and how visitors move around the site.

This information helps improve the website and its content.

Analytics cookies or similar technologies will only be used where permitted by your cookie preferences and applicable law.

Advertising and measurement cookies

These technologies may be used to understand whether someone has interacted with advertising or promotional activity and to measure its effectiveness.

Where these technologies are used, they will only be activated where the required consent has been provided.

Third-party content

Some pages may contain content or links from third-party services, such as:

• YouTube;
• podcast and audio platforms;
• social media networks;
• book retailers; and
• other external websites.

Third-party services may use their own cookies or similar technologies when you interact with their content.

Their use of information is governed by their own privacy policies.

Where appropriate, non-essential third-party technologies will be controlled through the website's cookie consent system.

Managing your cookie preferences

When you first visit the website, you can choose whether to allow optional cookies.

You can:

• accept optional cookies;
• reject optional cookies;
• select individual cookie categories; and
• change your preferences later using the Privacy choices or cookie settings control available on the website.

Essential cookies cannot normally be switched off because they are necessary for the website to work.

You can also manage cookies through your web browser. Most browsers allow you to view, delete or block cookies, although doing so may affect how some website features work.

Cookie settings

Your data protection rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

• ask for access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your personal information;
• ask us to restrict how information is used;
• object to certain uses of your information;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• complain about how your information has been handled.

Not every right applies in every situation.

You have the right to object to processing based on legitimate interests and to object at any time to the use of your personal information for direct marketing.

To exercise your rights, please contact:

theresa@theresacheung.com

We may need to verify your identity before responding to certain requests.

Complaints

If you have concerns about how your personal information has been used, please contact us first so that we have the opportunity to address them.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
www.ico.org.uk

Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

However, no website or internet transmission can be guaranteed to be completely secure.

Children's privacy

This website is intended for a general audience and is not specifically directed at children under the age of 13.

If we become aware that personal information relating to a child has been collected in circumstances where appropriate consent or another lawful basis was required but was not obtained, we will take appropriate steps.

Links to other websites

This website contains links to third-party websites.

Once you leave www.theresacheung.com, the way your information is handled is governed by the privacy practices of the website you visit. We are not responsible for the privacy practices or content of third-party websites.

Changes to this policy

We may update this Privacy & Cookies Policy from time to time to reflect changes to the website, the services we use or applicable law.

The latest version will always be published on this page and the Last updated date will be amended accordingly.

Contact

If you have any questions about this Privacy & Cookies Policy or how your information is used, please contact:

Theresa Cheung
Email: theresa@theresacheung.com