Privacy Policy

Effective Date: 12.12.2024

Courage Over Comfort Coaching respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use and safeguard your information when you visit our website, www.courageovercomfortcoaching.co.uk, or engage with our services.

If you have any questions about this policy or our data protection practices, please contact us at:

Diane Thompson
Founder and Data Controller
Email: dpo@courageovercomfortcoaching.co.uk

1. Data We Collect

We collect and process the following categories of personal data:

1.1. Information You Provide Voluntarily

Contact Information: Name, email address, phone number, and job title (if applicable) when you fill out a contact form, subscribe to our newsletter, or request our services.
Payment Information: Billing address, payment card details, and transaction data when you purchase services.
Coaching Information: Any personal data you share during coaching sessions, questionnaires, or forms related to our services.

1.2. Information We Collect Automatically

Technical Data: IP address, browser type, operating system, and other technical details when you access our Website.
Usage Data: Information about how you use our Website, such as pages viewed and time spent on the Website.

1.3. Third-Party Data

We may receive data from third-party services such as LinkedIn, CRM tools, or payment processors when you interact with us via those platforms.

2. How We Use Your Data

We use your personal data for the following purposes:

2.1. Service Delivery

To provide coaching, training, and consultancy services.
To process payments and deliver purchased services.

2.2. Communication

To respond to inquiries, provide support and send requested information.
To send promotional materials, updates and newsletters, where you have opted in.
To contact individuals or organisations under the "legitimate interest" lawful basis when we believe our services may support their goals in personal, professional and organisational development. These communications comply with the General Data Protection Regulation (GDPR) and recipients may opt out at any time by contacting us or using the unsubscribe link provided in our communications.

2.3. Website Functionality

To improve the Website’s functionality, analyse trends and monitor Website usage.

2.4. Legal and Compliance

To comply with legal obligations, resolve disputes, and enforce agreements.

3. Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

Consent: When you opt in to receive marketing communications.
Contract: When processing is necessary to fulfil a contract with you.
Legal Obligation: To comply with laws such as tax reporting.
Legitimate Interests: For business purposes such as service improvement, fraud prevention and Website analytics, provided these interests do not override your rights and freedoms.

4. Data Sharing

We do not sell your personal data. However, we may share your data with:

Service Providers: Trusted third parties who assist with payment processing, email communication, analytics, or Website hosting.
Legal Authorities: When required by law or to protect our rights.
Business Transfers: In the event of a merger, sale, or acquisition of assets, your data may be transferred to the new owner.

5. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or to comply with legal and regulatory obligations.

Retention Periods:

Client information: Retained for seven years following the last engagement, unless longer retention is required for legal or regulatory reasons.
Marketing data: Retained until you unsubscribe.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Access: Request access to your personal data.
Correction: Request corrections to inaccurate or incomplete data.
Erasure: Request deletion of your personal data, subject to legal obligations.
Restriction: Restrict the processing of your data.
Portability: Request transfer of your data to another organisation.
Objection: Object to data processing based on legitimate interests or for direct marketing.
Withdraw Consent: Withdraw consent where processing is based on it.

To exercise these rights, please contact us at dpo@courageovercomfortcoaching.co.uk We aim to respond within one month of receiving your request.

7. Data Security

We implement robust security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

SSL encryption for data transmitted through our Website.
Restricted access to personal data.
Regular security audits and updates.

8. Cookies

Our Website uses cookies to enhance your experience. Cookies are small files stored on your device that allow us to remember your preferences and analyse Website performance.

Types of Cookies:

Essential Cookies: Necessary for Website functionality.
Analytics Cookies: Help us understand how visitors use our Website.
Marketing Cookies: Enable personalised advertising.

You can manage or disable cookies through your browser settings.

9. International Data Transfers

If we transfer your data outside the UK or EEA, we ensure it is protected by:

Transferring to countries with adequate protection standards.
Using contracts with standard contractual clauses approved by the European Commission.

10. Updates to this Policy

We may update this policy from time to time. The latest version will always be available on our Website. We recommend reviewing this policy periodically.

11. Complaints

If you believe we have violated your rights under GDPR, you have the right to file a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Phone: 0303 123 1113

12. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us at:

Diane Thompson
Founder and Data Controller
Email: dpo@courageovercomfortcoaching.co.uk