Privacy Policy

Privacy Notice & Data Retention Policy
for Life Coaching Services

1. Introduction
This Privacy Notice explains how I collect, use, store, and protect personal data in the
course of providing freelance coaching services. I am committed to complying with the
General Data Protection Regulation (GDPR) and ensuring all client information is handled
lawfully, fairly, and transparently.

2. Data Controller
For the purposes of GDPR, I am the Data Controller responsible for your personal data.

3. Types of Personal Data Collected
In the course of coaching services, I may collect and process the following personal data:
● Contact details (name, email address, phone number)
● Coaching session notes and summaries
● Goals, action plans, and progress notes
● Relevant information shared during coaching sessions
● Administrative information (session dates, attendance, invoicing details if applicable)

4. Purpose of Processing
Your data is collected and used for the following purposes:
● To deliver coaching services effectively
● To track progress and support coaching outcomes
● To maintain professional records of sessions
● To manage administration, scheduling, and communication
● To comply with legal, insurance, and professional obligations

5. Lawful Basis for Processing
Under GDPR, the lawful bases for processing your data include:
● Contractual necessity (to provide coaching services you have requested)
● Legitimate interests (to maintain appropriate professional records)
● Legal and insurance compliance (where applicable)

6. Data Storage & Security
All personal data is stored securely using password-protected and/or encrypted systems.
Physical records, if used, are stored securely and accessed only by the coach.
Access to client data is strictly limited to authorised use only.

7. Data Retention Policy
Client coaching records are retained for five (5) years after the final coaching session, in
line with professional indemnity insurance requirements.
This retention period applies to all coaching records unless a longer period is required by law
or to resolve disputes.
After the retention period has expired:
● Digital records will be permanently deleted from all storage systems
● Physical records will be securely shredded or destroyed