Privacy Policy

1. INTRODUCTION

This privacy notice explains how Tamsin Acheson Coaching & Consulting collects, uses and protects your personal information when you visit www.tamsinacheson.com, contact us, request information or resources, book an appointment, purchase services, or otherwise interact with us.

Tamsin Acheson Coaching & Consulting is the data controller responsible for your personal information and is referred to in this notice as “we”, “us” or “our”.

Contact details

Tamsin Acheson Coaching & Consulting
Email: [email protected]
Postal address: 1046 Waters Edge, Lower Burlington Road, Portishead, BS20 7AS

Please let us know if the personal information we hold about you changes so that we can keep our records accurate.

2. WHAT PERSONAL INFORMATION WE COLLECT

Personal information means information that identifies you, or could reasonably be used to identify you. It does not include information that has been anonymised so that you can no longer be identified from it.

Depending on how you interact with us, we may collect and process the following categories of personal information:

Identity and contact information may include your name, business or organisation, job title, email address, telephone number and postal or billing address.
Communication information includes information you provide when you contact us by email, website form, telephone, video call, social media or other means.
Client and service information may include information relating to services you enquire about or purchase, appointments, contracts, invoices, correspondence, feedback and other information reasonably required to provide and manage our services.
Financial and transaction information may include information relating to payments, invoices and transactions. Payment-card information is generally processed by payment providers such as Stripe rather than stored directly by us.
Technical and usage information may include information about how you use our website, such as your IP address, browser type, device information, pages visited, navigation patterns and other technical information collected through analytics, server logs, cookies and similar technologies.
Marketing and communications information includes your preferences about receiving communications from us and your interactions with those communications.

Special category information

We do not routinely request or intentionally collect special category personal information through this website or our standard client processes.

However, you may choose to disclose information of this kind to us during communications or while receiving services. If this occurs, we will only process that information where we have both a lawful basis and an appropriate additional condition for processing it under applicable data protection law.

We do not routinely collect information about criminal convictions or offences.

Where we are required to collect personal information by law or under the terms of a contract, and you do not provide that information when requested, we may not be able to perform the contract or provide the relevant service. If this happens, we will let you know.

We may process personal information without your knowledge or consent where this is required or permitted by law.

We do not carry out automated decision-making that produces legal or similarly significant effects on you.

3. HOW WE COLLECT YOUR PERSONAL INFORMATION

We may collect personal information:

Directly from you, for example when you complete a contact or enquiry form, email, telephone or message us, book an appointment, request a resource, enter into a contract with us, purchase a service, provide feedback or a testimonial, or communicate with us through social media or another platform.
Automatically through our website, including through cookies, analytics tools, server logs and similar technologies. Please see our Cookie Policy for more information.
Through service providers and platforms that support our business, where relevant to your interaction with us.

We may also obtain business contact information from publicly available professional sources, such as company websites, LinkedIn or Companies House, where it is appropriate and lawful to do so.

4. HOW AND WHY WE USE YOUR PERSONAL INFORMATION

We only use personal information where we have a lawful basis for doing so.

We may process your information for the following purposes:

Purpose/Activity	Type of data	Lawful basis for processing
Responding to enquiries and communicating with you	Identity, contact and communication information	Legitimate interests in responding to enquiries and managing our business; or taking steps at your request before entering into a contract
Providing leadership coaching, advisory, facilitation or other services	Identity, contact, client and communication information	Performance of a contract
Managing bookings and appointments	Identity and contact information	Performance of a contract or taking steps at your request before entering into a contract
Managing contracts, invoices and payments	Identity, contact, financial and transaction information	Performance of a contract; compliance with legal obligations; and legitimate interests in managing payments and recovering sums due
Managing our relationship with clients and contacts	Identity, contact, communication and client information	Performance of a contract and legitimate interests in running and managing our business
Operating, protecting and maintaining our website and systems	Technical and usage information	Legitimate interests in operating, administering and securing our business and website
Understanding how our website is used and improving it	Technical and usage information	Legitimate interests in understanding and improving our website and, where required, consent under applicable cookie and electronic communications rules
Sending marketing or other business communications	Identity, contact and marketing information	Consent or legitimate interests, where permitted by law
Maintaining financial, tax and business records	Identity, contact, financial and transaction information	Compliance with legal obligations and legitimate interests in maintaining appropriate business records
Establishing, exercising or defending legal claims	Relevant personal information	Legitimate interests and compliance with legal obligations

We may use information for more than one lawful purpose depending on the circumstances.

Where we need to use personal information for a materially different purpose from the one for which it was originally collected, we will consider whether the new use is compatible with the original purpose and, where required, provide further information to you.

5. MARKETING COMMUNICATIONS

We may send you relevant information about our services, resources or work where we have a lawful basis to do so.

Depending on the circumstances, this may be because:

you have expressly asked to receive communications from us;
you have given your consent;
you are an existing customer and the electronic-marketing rules permit us to contact you about similar services; or
another lawful basis applies to business-to-business communications.

You can opt out of marketing communications at any time by using the unsubscribe link included in an email or by contacting us at [email protected].

Opting out of marketing does not prevent us from contacting you where necessary in connection with a service, contract, transaction or other non-marketing matter.

We will not share your personal information with third parties for their own marketing purposes unless we have an appropriate lawful basis to do so.

6. WHO WE SHARE PERSONAL INFORMATION WITH

We use third-party service providers to help us operate our business and deliver our services.

Depending on the nature of your interaction with us, these may include providers of:

website hosting, domain and website technology, including WordPress, Elementor and GoDaddy;
CRM, forms and marketing systems, including GoHighLevel;
email and productivity services, including Google;
booking and scheduling systems, including Acuity;
video-conferencing services, including Zoom;
payment processing, including Stripe;
accounting services, including Xero;
electronic signature services, including Signable;
transcription services, including Happy Scribe;
video and audio production services, including Riverside;
design and content-production services, including Canva;
website analytics, including Google Analytics;
legal, accounting, insurance and other professional advisers; and
regulators, tax authorities or other public bodies where required by law.

We do not sell personal information to advertisers or other third parties.

We expect service providers that process personal information on our behalf to protect it appropriately and to process it only for the purposes for which it has been provided.

7. INTERNATIONAL TRANSFERS

Some of the service providers we use operate internationally or may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we take reasonable steps to ensure that the transfer complies with applicable UK data protection law.

Depending on the destination and provider, this may include relying on:

UK adequacy regulations;
the UK Extension to the EU-US Data Privacy Framework where the US recipient is eligible and appropriately certified; or
approved contractual safeguards or other lawful transfer mechanisms.

You can contact us at [email protected] if you would like further information about the safeguards used for a particular transfer.

8. DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

Access to personal information is limited to those people and service providers who reasonably need it for business purposes.

Where third parties process personal information on our behalf, we expect them to apply appropriate confidentiality and security measures.

We also have procedures for responding to suspected personal-data breaches and will notify affected individuals and regulators where the law requires us to do so.

9. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, tax, accounting, contractual and reporting requirements.

Different information may therefore be retained for different periods.

For example, certain financial and transaction records may need to be retained for up to six years for tax, accounting or legal purposes.

When determining an appropriate retention period, we consider:

why the information is held;
its nature and sensitivity;
legal and regulatory requirements;
the risk associated with retaining it; and
whether the purpose can be achieved without continuing to identify the individual.

Where appropriate, information may instead be anonymised so that it can no longer identify you.

10. YOUR LEGAL RIGHTS

Depending on the circumstances, UK data protection law gives you rights in relation to your personal information, including the right to:

request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your information in certain circumstances;
request restriction of processing;
object to certain types of processing;
request transfer of your information where applicable; and
withdraw consent where processing is based on consent.

You will not normally have to pay to exercise these rights. We may ask for information to confirm your identity before responding to a request.

We aim to respond to valid requests within the timescales required by law.

If you wish to exercise any of these rights, please email [email protected].

You can find more information about your rights on the Information Commissioner’s Office website at ico.org.uk.

11. DATA PROTECTION COMPLAINTS

If you have concerns about how we have used your personal information, please contact us at [email protected].

We will acknowledge a data-protection complaint within 30 days, investigate it appropriately and provide you with information about the outcome.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

12. THIRD-PARTY LINKS

Our website may contain links to third-party websites, services or applications.

We do not control those third parties and are not responsible for their privacy practices. We recommend reviewing the relevant privacy information when using third-party websites or services.

13. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies for purposes including website functionality, consent management and, where applicable, analytics.

For more information about the technologies we use and the choices available to you, please see our Cookie Policy.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business, the services and technologies we use, or applicable law.