Privacy Notice
Last updated: 10 September 2026
This Privacy Notice explains how we collect, use, store, and protect personal data when you use our website or contact us about our coaching services.
1. Who we are
Data controller: Confidently Autistic Confidence Coach
Contact email: admin@confidentlyautisticconfidencecoach.com
Business address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom
Website: www.confidentlyautisticconfidencecoach.com
We provide confidence coaching and related one-to-one support services, including online coaching sessions and support for autistic clients. If you have any questions about this Privacy Notice or how your personal data is used, please contact us using the details above.
2. Personal data we collect
Depending on how you interact with us, we may collect and use the following personal data:
· your name
· your email address
· your phone number, if you choose to share it
· details you provide when you contact us about coaching, appointments, or availability
· payment and billing information
· records of services you have asked about or purchased
· support needs
· information you choose to share about your goals, confidence, support needs, wellbeing, neurodivergence, or accessibility needs
· technical information about how you use our website, such as IP address, browser type, device data, and cookies where applicable
· marketing preferences, including whether you want to hear from us.
We only collect personal data that is relevant to the services we provide.
3. Special category data
Because coaching may involve discussions about health, neurodivergence, wellbeing, or accessibility needs, some information you voluntarily choose to share may be special category data under UK data protection law. We will only process special category data where it is necessary for the relevant purpose and where we have both a lawful basis under UK GDPR Article 6 and a separate condition under UK GDPR Article 9.
· your explicit consent
· where processing is necessary for the establishment, exercise, or defence of legal claims
· another lawful condition permitted by data protection law.
We do not ask you to provide sensitive information unless it is relevant to the support you are seeking. If you do not want to share sensitive information, please only provide the information you are comfortable sharing. Where required, we will document our special category data condition and consider whether further safeguards are needed.
4. How we collect your data
· you contact us by email
· you ask about coaching or other services
· you book or attend a session
· you make a payment
· you subscribe to updates or marketing emails
· you browse our website
5. Why we use your data
We may use your personal data to:
· respond to your enquiries
· assess whether our services are right for you
· provide coaching sessions and related support
· manage bookings, administration, and client communication
· process payments and keep financial records
· send service-related communications
· send marketing communications where permitted by law
· improve our website, services, and client experience
· protect our business and prevent misuse of our website or services
· comply with legal and regulatory obligations.
6. Our lawful bases for processing
Under UK data protection law, we rely on one or more of the following lawful bases, depending on how and why we use your personal data. We identify and document the appropriate lawful basis before using personal data for each purpose.
· Contract – where we need to process your data to respond to enquiries about services, provide coaching you have asked for, manage bookings, or take steps before entering into a contract with you.
· Consent – where you have clearly agreed, for example to receive marketing emails or where explicit consent is required for special category data.
· Legitimate interests – where we use data in a way you would reasonably expect for running, securing, administering, and improving our business, provided your rights and freedoms do not override those interests.
· Legal obligation – where we must process data to comply with the law, for example for tax or accounting purposes.
7. Marketing
We may send you marketing emails if:
· you have given consent to receive them; or
· the UK soft opt-in rules apply because you have bought, or negotiated to buy, similar services from us, we gave you a clear opportunity to opt out when we collected your details, and we give you a clear opportunity to opt out in every marketing message.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or by contacting us directly. We will not send you marketing messages if you have asked us not to.
8. Sharing your data
We do not sell your personal data. We may share your data with trusted third parties where necessary to run our business, for example:
· website hosting providers
· email providers
· payment processors
· scheduling or booking providers
· CRM and client management tools
· accountants, professional advisers, or insurers
· regulators, courts, or law enforcement where required by law.
We require third parties who handle personal data for us to respect its security and to process it only in line with the law.
9. International transfers
Some of our service providers may store or process personal data outside the UK. Where this happens, we will take appropriate steps to make sure your personal data remains protected, such as using providers covered by UK adequacy regulations or appropriate safeguards, including the UK International Data Transfer Agreement or other lawful transfer mechanisms where required.
10. Data retention
We keep personal data only for as long as necessary for the purposes set out in this Privacy Notice, including where we need it for legal, complaint, safeguarding, insurance, tax, accounting, or dispute reasons. As a general guide:
· enquiry data may be kept for up to 12 months after our last contact with you, unless we need to keep it for longer to deal with a complaint, legal issue, or ongoing enquiry.
· client records may be kept for up to 6 years after services end, where needed for administration, legal, insurance, or safeguarding reasons.
· financial records may be kept for up to 6 years after the end of the relevant tax or accounting period where required for tax, accounting, or legal purposes.
· marketing consent and suppression records may be kept for as long as needed to respect your preferences.
We may keep personal data for longer where required for legal, complaint, safeguarding, insurance, tax, accounting, or dispute reasons. When we no longer need personal data, we will securely delete it or anonymise it.
11. How we protect your data
We take appropriate technical and organisational measures to protect personal data from accidental loss, unauthorised access, misuse, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
12. Your rights
Under data protection law, you have rights in relation to your personal data. You may:
· request access to your personal data
· request correction of inaccurate or incomplete data
· request erasure of your data
· object to processing
· request restriction of processing
· request transfer of your data to you or another organisation
· withdraw consent at any time where we rely on consent
· complain to the Information Commissioner’s Office (ICO).
To exercise any of these rights, please contact us using the details above. We may need to verify your identity before responding to a request.
To exercise any of these rights, please contact us using the details above. We may need to verify your identity before responding to a request.
13. Complaints
If you have concerns about how we use your personal data, please contact us first and we will do our best to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO).
ICO website: https://ico.org.uk
ICO telephone: 0303 123 1113
14. Cookies and website tracking
Our website may use essential cookies that are needed for the site to work properly. If we use analytics, advertising, embedded content, or similar tracking tools, we will provide further information in a cookie notice and ask for consent where required by law. You should make sure this section matches the cookies and tracking tools actually used on the website.
15. Children
Our services are intended for adults only and are not directed at children. We do not knowingly collect personal data from children where this is not permitted by law. If you believe a child has provided personal data to us inappropriately, please contact us so we can review and remove it where appropriate.