In line with the GDPR legislation, this notice tells you what personal information I hold and why, and what your rights are. 

Ways I collect your data:

​

• If you are a coaching client, I collect information via client questionnaires. This may be completed online, by emailed document or in person on paper and then scanned into a digital format. 

• You may have signed up to my newsletter either online or via a paper form.

• You may have attended a webinar, workshop or other event run by me.

• You may have emailed me directly or using an online contact form.

Processing your Data:

Your data may be used in the following ways:

• To enable me to provide you with a professional service.

• In keeping with the International Coaching Federation’s (ICF) Code of Ethics, I am required to maintain a client coaching log. By booking a coaching call (complementary or paid), you agree for me to list your information on the coaching log. Such information can include your name, contact details, start and end date of coaching, number of coaching hours, other relevant information. It does not include any confidential information you share during our coaching sessions. I hold this information confidential and will only disclose it to the ICF upon their reasonable request. 

• To contact you about services I offer.

• With your consent/request, information may be shared with other specialists, eg to make referrals.

• To enable me to involve the relevant services if I feel you are in danger of harming yourself or others.

• Except as specified, I will never share your personal information with third parties without your express written permission or request.

​

Retaining your data:

​

• I have a legal obligation to retain your client records for the following reasons:

  • Insurance and accounts records for 7 years.

  • Children’s records until they are 25 (26 if treated at age 17).

• In addition, information collected about you in relation to the coaching programme is for me to fulfil my role as your coach under my contractual obligation to you, for the English law limitation period of 6 years under a simple contract.

Data Security: 

​

• My database is registered with the ICO under the Data Protection Act and is stored on passcode protected computers. It is also backed up on a cloud server which is GDPR compliant.

• Emails are stored by a passcode-protected account and are deleted on a regular basis unless required for legal purposes. The email provider is GDPR compliant.

• Any data accessible via my smartphone is also protected by a passcode and is GDPR compliant.

• My mailing list is held via Mailchimp in a passcode-protected account which is GDPR compliant.

• Paper client notes are filed with the same level of protection as my own papers or carried by me personally.

• Your digital information will always be stored in GDPR compliant systems or services.

Your Rights:

​

• You are entitled to request access to the data I hold about you, to verify it is lawfully processed. I will respond to any such request within 30 days.

• You also have the right to request correction of any data that you feel is inaccurate or incomplete.

• At any time you may unsubscribe/be removed from my newsletter and other marketing.

• You may ask to be deleted from my database and have your notes destroyed once the legal timeframe outlined above has lapsed.