Privacy Policy – How I Manage Your Data
General Data Protection Regulations (GDPR 2018) classify me as a data controller and require me to tell you how I protect your data. In the process of undertaking Coaching sessions, some of your personal data will be stored and processed. This document is provided to make as transparent as possible how I use it, where I keep it and what I do with it.
Information Collected & Stored:
- In my role as a Coach, I complete a ‘Coaching Assessment’ document in the first session, capturing information which could identify you, e.g. your name, phone number, email address, home address.. This is so I have methods of contacting you. This contact information is in paper form and is stored securely in a locked filing cabinet.
Your signed ‘Coaching Agreement’ document is stored on paper in a secure locked filing cabinet with
your contact information.
- I also keep a record of the date of each Coaching session and if required, notes regarding the theme of a session, identified only by your initials. I use this to keep a record of our work as it progresses. This information is stored electronically on my computer, and is password protected. Only I have access to this password.
- Your phone number is stored by first name only on my phone which has a lock-screen and finger-print security.
Data Retention / Deletion:
- I delete ‘administrative’ type texts or emails that you send me once they have been acted upon, e.g. arranging sessions. If I receive a more in-depth email relating to session content, then I will store this electronically and password protect the document.
- As advised by my Coaching insurance any Coaching records will be kept for 7 years before they are deleted securely.
Data Sharing:
- As stated in my ‘Coaching Agreement’ document there are limited situations where I may share your information, such as if I believe you or someone else is at risk of significant harm. I would always inform you first that I need to share my concerns with another professional, e.g. GP.
- In rare cases I may be obliged by law to share any content of our sessions – this would be if you disclosed matters relating to terrorism or money laundering. In this unlikely event I would always inform you before doing so.
Access to Information:
- You can request access to personal information (Subject Access Request) that I hold on you, except in limited circumstances when I am not permitted to do so for legal reasons. I will provide this information to you within 30 days. If you feel any information, I hold about you is inaccurate, then you are able to ask me to update your information.
- If you want me to delete information, then please do so in writing and I will endeavour to do so unless I need to keep it for legal or internal business purposes.