GDPR & Privacy Policy
Updated April 2025 by Iona Meadows
I care about your privacy and am committed to keeping your personal information safe.
This Privacy Policy explains how I collect, use, and protect your personal data, in line with the UK General Data Protection Regulation (UK GDPR) and EU GDPR.
What Personal Data I Collect
I only collect the following personal data, and only when you voluntarily provide it:
Your name and email address, if you:
Join my mailing list
Book a coaching session
Fill in a waiting list form
How Your Data Is Collected and Stored
If you subscribe to the newsletter, your name and email are securely stored in Squarespace’s mailing list system.
If you book a coaching session, your details are stored through Acuity Scheduling (also powered by Squarespace).
Payment details are processed securely via Stripe. I do not store or have access to your card details.
If you contact me via a form, your information is stored within my website platform and not downloaded or saved locally.
I do not sell, rent, or share your data with third parties for marketing.
Analytics
This website uses basic analytics through Squarespace. These provide general insights such as:
Number of visitors
Pages visited
Country or region
Type of device used
These statistics are anonymous and cannot be used to identify you personally.
How Long I Keep Your Data
Newsletter subscribers: until you unsubscribe (you can do this at any time via a link in the email).
Booking or contact forms: I may retain your details for up to 12 months unless you request deletion sooner.
Client notes (see below): stored securely for up to 7 years, as recommended by UK coaching standards.
Confidentiality in Coaching
Client sessions are fully confidential. I may take notes to support my professional practice, and these are stored securely either:
On a password-protected computer
In a locked physical file, accessible only by me
I also receive regular professional supervision, which is a confidential space to support ethical practice. I may share relevant session insights (anonymised) with my supervisor to ensure quality and safety.
No identifiable client information is ever shared.
Your Rights Under GDPR
You have the right to:
Access the personal data I hold about you
Request corrections to inaccurate data
Request deletion of your data
Withdraw consent at any time
Object to or restrict how your data is used
Lodge a complaint with the ICO (UK) or relevant supervisory authority
To exercise your rights, contact me by email.
Cookies
Squarespace may use essential cookies to support site functionality. You can control cookies via your browser settings. I do not use any additional tracking or advertising cookies.
Third-Party Providers
Your data may be processed by the following secure services, all of which are GDPR-compliant:
Squarespace – website, forms, analytics, and mailing list
Acuity Scheduling – appointment booking
Stripe – secure payments
Google Workspace – email
Each has its own privacy policy that outlines how your data is handled.