What Personal Data We Collect

We collect and process the following types of information:

Information you provide directly

• Name
• Email address
• Phone number (if provided)
• Booking information
• Coaching intake information
• Written coaching notes taken during sessions
• Any information you choose to share with us during coaching conversations

Information collected automatically

• IP address
• Browser type
• Cookies (see section below)
• Website usage data

Information collected through third‑party tools

• Booking details via TidyCal
• Payment information via Stripe (we do not see or store your card details)
• Email interactions via Mailchimp
• Video call information via Zoom or Microsoft Teams or GoogleMeet

We do not collect wellbeing‑related or sensitive information through forms. Any wellbeing information shared verbally during coaching is handled confidentially and stored securely.

 

Why We Collect Your Data (Lawful Basis)

Under UK GDPR, we rely on the following lawful bases:

Contract

To deliver coaching services, manage bookings, take payments, and communicate with you.

Legitimate Interests

For:

• Business administration
• Improving our services
• Responding to enquiries
• Sending essential service updates

Consent

For:

• Email marketing via Mailchimp
• Optional communications

You can withdraw consent at any time.

Legal Obligation

For accounting, tax, and record‑keeping requirements.

 

How We Use Your Data

We use your information to:

• Provide coaching services
• Manage bookings and scheduling
• Process payments
• Communicate with you about sessions
• Send resources or follow‑up materials
• Maintain coaching notes
• Improve our website and services
• Send marketing emails (only if you opt in)

We do not sell or share your data for advertising purposes.

 

Who We Share Your Data With

We only share your personal data with trusted third‑party service providers who help us run our business. These providers process data on our behalf and have their own privacy and security measures in place.

TidyCal

Used for booking and scheduling sessions.

Data location: United States.

Stripe

Used for secure payment processing. We do not see or store your card details.

Data location: United States.

Zoom

Used for online video sessions.

Data location: United States.

Microsoft Teams

Used for online video sessions and communication.

Data location: Global (including EU and UK‑aligned data centres).

Google Drive

Used for securely storing coaching notes and documents.

Data location: Global (data may be stored outside the UK).

Mailchimp

Used for email marketing and newsletters (only if you opt in).

Data location: United States.

These providers may transfer data outside the UK. They all use appropriate safeguards such as Standard Contractual Clauses to protect your information.

 

How Long We Keep Your Data

We keep your data only for as long as necessary:

• Coaching notes: up to 7 years (standard professional practice)
• Booking information: 2 years
• Emails: until you unsubscribe
• Financial records: 6 years (legal requirement)
• Website analytics: up to 26 months
• Comments on the website: indefinitely unless you request deletion

How We Store and Protect Your Data

We take data security seriously. Your information is stored using:

• Password‑protected accounts
• Encrypted cloud storage (Google Drive)
• Secure devices
• Limited access only to those who need it
• Secure third‑party platforms

Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Withdraw consent at any time
• Object to certain types of processing
• Request a copy of your data in a portable format
• Complain to the ICO (Information Commissioner’s Office)

To exercise any of these rights, email us at info@andwhataboutyou.com

 

Cookies

Our website uses cookies to improve your experience. You can control cookies through your browser settings. For more detail, see the cookie section in the WordPress template (which you can keep as is).

 

Comments and Media Uploads

If you leave comments or upload images, WordPress may collect additional technical data (IP address, browser information). This is standard and helps with spam detection.

 

Embedded Content

Articles on this site may include embedded content (videos, images, articles). Embedded content behaves as if you visited the external site directly and may collect data about you.

 

Changes to This Policy

We may update this policy occasionally. The latest version will always be available on our website.