Privacy Policy

 This policy explains what personal information I collect through coachingwithyiota.com and through my coaching practice, why I hold it, and what rights you have over it. 

I do not use your information for automated decision-making or profiling, and I do not sell it to anyone. 

What you say in session stays between us.

There are two exceptions, both of which I will always try to discuss with you first where it is safe and possible to do so: where I am required to disclose by law, and where there is a genuine risk of serious harm to you or to another person.

Anonymised material may be discussed in my coaching supervision. Supervision is a professional practice that keeps the quality of my work high, and my supervisor is bound by their own duty of confidentiality.

Where an employer or organisation is funding your coaching, they receive confirmation that sessions took place and nothing else. No content, no themes, no summaries, unless you choose to share those yourself.

 Enquiry information. Your name, email address, phone number if you give one, your preferred language, how you heard about me, and whatever you write in your message. Collected through the contact form on this website or by email.

Booking information. Your name, email address, appointment time and time zone. Collected through Calendly when you book a discovery call or a session.

Client information. If we go on to work together: the contents of your coaching agreement, brief notes I keep between sessions, and records of payments and invoices. Coaching conversations themselves are not recorded or transcribed.

Website information. Anonymised, aggregated statistics about how people use this site, such as which pages are visited and roughly where visitors are located. This comes from the analytics built into GoDaddy Websites + Marketing, and is only collected if you accept analytics cookies. See the Cookies section below.

What for: Responding to your enquiry and arranging a call

Lawful basis: Consent, and steps taken at your request before entering a contract

What for: Delivering coaching and managing our engagement

Lawful basis: Performance of a contract

What for:  Keeping accounts and meeting tax obligations

Lawful basis: Legal obligation

What for: Keeping brief professional notes, and discussing anonymised material in coaching supervision

Lawful basis: Legitimate interests, specifically maintaining professional standards under the ICF Code of Ethics

What for: Understanding how this website is used

Lawful basis: Consent, given through the cookie banner 

A cookie is a small file a website stores on your device. This site uses very few.

Essential cookies keep the site working, remember your cookie choice, and keep the contact form secure. These are set without asking, because the site cannot function without them and the law does not require consent for them.

Analytics cookies tell me which pages people visit and how they found the site. Nothing in this is used to identify you individually. These are only set if you choose Accept on the cookie banner.

Booking cookies. The booking calendar on my Contact page is provided by Calendly. When you use it, Calendly sets its own cookies under its own privacy policy.

When you first arrive, a cookie banner asks whether you accept. If you decline, close the banner, or click outside it, non-essential tracking is not loaded. You can change your mind at any time by clearing this site's cookies in your browser and choosing again, or by using your browser's privacy settings to block cookies altogether.

Further reading: GoDaddy Cookie Policy and Calendly's privacy notice.

I share your information only with the service providers I need to run the practice, each under a data processing agreement, and only to the extent they need it:

• GoDaddy, who host this website and provide my email. See the GoDaddy Privacy Policy.
• Calendly, who provide the booking calendar.
• My accountant, for bookkeeping and tax returns.
• My coaching supervisor, for anonymised discussion only.

I never sell your information, and I never share it for anyone else's marketing.

Some of my providers are based outside the UK, principally in the United States.

Where that is the case, transfers are covered by the safeguards UK data protection law requires. GoDaddy's data processing terms incorporate the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, and my other providers operate under equivalent protections.

Information: Enquiries that do not become clients

Kept for: 12 months

Information: Client notes and coaching agreements

Kept for: 7 years after our work ends, then securely deleted

Information: Invoices and financial records

Kept for: 7 years, as tax law requires

Information: Website analytics

Kept for: 26 months 

 The 7 year period for client records reflects the time limits within which a legal claim could be brought, and professional record-keeping expectations under the ICF Code of Ethics. 

 Your information is held on password protected systems with two factor authentication enabled. Session notes are kept separately from identifying details and are not stored on paper.

Please be aware that ordinary email is not a fully secure medium. If there is something you would rather not put in writing, say so and we will find another way.

You have the right to:

• ask for a copy of the information I hold about you
• have inaccurate information corrected
• ask me to delete it, where I am not required to keep it
• restrict or object to how I use it
• receive it in a portable format
• withdraw consent at any time, where consent is the basis I am relying on

Email me and I will respond within one calendar month. There is no charge.

 My services are for adults. I do not knowingly collect information from anyone under 18. 

 If my practices change, I will update this page and change the date at the top.