Privacy Policy

1. Who We Are

This Privacy Policy applies to Mindset + Mastery Ltd, a company registered in England and Wales (Company No. 16890773), registered office at 20 Wenlock Road, London, England, N1 7GU.

We provide trauma-informed coaching and chronic illness coaching programmes for professional women through our website at mindsetplusmastery.com.

For UK data protection purposes, Mindset + Mastery Ltd is the data controller in respect of personal data collected through this website and through our coaching programmes.

You can contact us at: [email protected]  ·  0208 058 4508

2. What Data We Collect

Through this website and our coaching services, we may collect:

• Name, email address, and telephone number submitted via enquiry, booking, or discovery call forms
• Information you share about your circumstances, goals, or health background when completing programme intake forms or during coaching sessions
• Payment information (processed securely through our payment provider — we do not store card details)
• Communications between us by email, messaging, or within our programme platform
• Technical data including IP address, browser type, and pages visited via website analytics

We may also collect special category data (including information about your health) in the context of delivering coaching services. We collect this only where you have provided explicit consent and where it is necessary to deliver the service you have requested.

3. How We Use Your Data

• To respond to your enquiry or arrange a discovery call
• To deliver your coaching programme and provide ongoing support
• To send programme materials, resources, and communications relevant to your programme
• To process payments and manage your account
• To comply with our legal and safeguarding obligations
• To improve our website and services through analytics

We do not use your personal data for automated decision-making or profiling. We do not sell your data to third parties.

4. Lawful Basis for Processing

• Contract: processing necessary to deliver your coaching programme
• Legitimate interests: responding to enquiries, managing business operations, and communicating with prospective and current clients
• Legal obligation: where we are required to process data by law
• Explicit consent: for special category data such as health information

5. Data Retention

• Enquiry data: up to 24 months from last contact where no programme is purchased
• Client coaching records: for the duration of your programme plus 7 years
• Payment records: 7 years in line with HMRC requirements
• Safeguarding records: minimum 7 years

6. Third Parties and Data Sharing

We do not sell personal data. We may share data with technology providers (website, booking, payment, and programme platforms) acting as data processors under appropriate agreements, and with statutory bodies where legally required.

7. Your Rights

Under UK GDPR you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. Contact us at [email protected] to exercise any right. You may also complain to the ICO at www.ico.org.uk or 0303 123 1113.

8. Cookies

This website uses essential and analytics cookies. You can manage preferences through your browser settings. Disabling cookies may affect site functionality.

9. Changes

We may update this policy periodically. The current version will always be published on our website with the date of last update shown above.