Data protection & privacy notice
In line with the GDPR legislation, this notice tells you what personal information I hold and why, and what your rights are.
Ways I collect your data:
If you are a coaching client, I collect information via client questionnaires. This may be completed online, by emailed document or in person on paper and then scanned into a digital format.
You may have signed up to my newsletter either online or via a paper form.
You may have attended a webinar, workshop or other event run by me.
You may have emailed me directly or using an online contact form.
Processing your Data:
Your data may be used in the following ways:
To enable me to provide you with a professional service.
To contact you about the services I offer.
With your consent/request, information may be shared with other specialists, e.g. to make referrals.
To enable me to involve the relevant services if I feel you are in danger of harming yourself or others.
Except as specified, I will never share your personal information with third parties without your express written permission or request.
Retaining your data:
I have a legal obligation to retain your client records for the following reasons:
Insurance and accounts records for 7 years.
Children’s records until they are 25 (26 if treated at age 17).
In addition, information collected about you in relation to the coaching programme is for me to fulfil my role as your coach under my contractual obligation to you, for the English law limitation period of 6 years under a simple contract.
Data Security:
My database is stored on a passcode protected computer and backed up on a cloud server which is GDPR compliant (in accordance with the ICO guidelines and the Data Protection Act).
Emails are stored by a passcode-protected account and are deleted on a regular basis unless required for legal purposes. The email provider is GDPR compliant.
Any data accessible via my smartphone is also protected by a passcode and is GDPR compliant.
My mailing list is held via Brevo in a passcode-protected account which is GDPR compliant.
Paper client notes are filed with the same level of protection as my own papers or carried by me personally.
Your digital information will always be stored in GDPR compliant systems or services.
Your Rights:
You are entitled to request access to the data I hold about you, to verify it is lawfully processed. I will respond to any such request within 30 days.
You also have the right to request correction of any data that you feel is inaccurate or incomplete.
At any time you may unsubscribe/be removed from my newsletter and other marketing.
You may ask to be deleted from my database and have your notes destroyed once the legal timeframe outlined above has lapsed.