THIS IS A RESET customer privacy notice
This privacy notice explains how I collect, use, and protect your personal information, and what rights you have.
Topics:
Contact details
What information I collect, use, and why
Lawful bases and data protection rights
Where I get personal information from
How long I keep information
Who I share information with
How to complain
Contact details
Email: info@thisisareset.life
What information I collect, use, and why
I collect or use the following information to provide and improve products and services for clients:
Names and contact details
Addresses
Gender
Pronoun preferences
Third party information (such as family members or other relevant parties)
Payment details (including card or bank information for transfers and direct debits)
I collect or use the following personal information for the operation of client or customer accounts:
Names and contact details
Addresses
Purchase or service history
Account information, including registration details
I collect or use the following personal information for information updates or marketing purposes:
Names and contact details
Addresses
Purchase or account history
I collect or use the following personal information to protect client welfare:
Names and contact information
Client account information
Emergency contact details
On the rare occasion a serious safeguarding concern arises during coaching, brief notes relevant to that concern
I collect or use the following personal information for dealing with queries, complaints or claims:
Names and contact details
Addresses
Payment details
Purchase or service history
Correspondence
Lawful bases and data protection rights
Under UK data protection law, I must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis I rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
Your right of access - You have the right to ask me for copies of your personal information. You can request other information such as details about where I get personal information from and who I share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
Your right to rectification - You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
Your right to erasure - You have the right to ask me to delete your personal information. Read more about the right to erasure.
Your right to restriction of processing - You have the right to ask me to limit how I can use your personal information. Read more about the right to restriction of processing.
Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.
Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you. Read more about the right to data portability.
Your right to withdraw consent – When I use consent as my lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
If you make a request, I must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact me using the contact details at the top of this privacy notice.
My lawful bases for the collection and use of your data
Where I rely on legitimate interests as a lawful basis, here is what that means in practice:
I collect and use personal information where it is necessary to provide a safe, effective and professional coaching service. This includes communicating with clients, arranging appointments, maintaining appropriate coaching records, understanding clients' goals and progress, and ensuring continuity between coaching sessions. Using this information benefits both my clients and my coaching practice. It enables me to tailor coaching to each individual's needs, provide an effective and consistent service, maintain accurate records, and meet my professional and ethical responsibilities as a coach. I only collect information that is relevant and necessary for these purposes. Personal information is stored securely, access is restricted, and information is retained only for as long as necessary. Clients remain in control of the information they choose to share during coaching, and I do not use personal information in ways that would be unexpected or unfair. Information shared within the coaching relationship will be treated as confidential. However, there are limited circumstances where confidentiality may need to be broken, including where there is a legal obligation to do so, where there is a serious concern about the safety or wellbeing of the client or another person, or where the client has provided their written consent for information to be shared. Any decision to share information will be made carefully, proportionately and, wherever appropriate, discussed with the client first. I have carefully considered the potential impact on individuals' privacy and believe that the benefits of processing this information are proportionate and outweigh any minimal risks. These risks are reduced through appropriate confidentiality, safeguarding practices, secure data handling and compliance with UK data protection legislation.
For more information on my use of legitimate interests as a lawful basis you can contact me using the contact details set out above.
My lawful bases for collecting or using personal information to provide and improve products and services for clients are:
Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Legitimate interests - In some circumstances, I process your personal information because it is necessary to provide and improve my coaching services, communicate with you, maintain appropriate records, and operate my business effectively. Whenever I rely on legitimate interests as the legal basis for processing, I carefully consider the impact on your privacy and only do so where I believe the processing is fair, necessary and does not override your rights or interests.
Your rights - You have a number of rights under UK data protection law, including the right to access, correct or erase your personal information in certain circumstances. Some rights depend on the legal basis for processing. For example, the right to data portability generally does not apply where personal information is processed on the basis of legitimate interests.
My lawful bases for collecting or using personal information for the operation of client or customer accounts are:
Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legitimate interests - In some circumstances, I process your personal information because it is necessary to provide and improve my coaching services, communicate with you, maintain appropriate records, and operate my business effectively. Whenever I rely on legitimate interests as the legal basis for processing, I carefully consider the impact on your privacy and only do so where I believe the processing is fair, necessary and does not override your rights or interests.
Your rights - You have a number of rights under UK data protection law, including the right to access, correct or erase your personal information in certain circumstances. Some rights depend on the legal basis for processing. For example, the right to data portability generally does not apply where personal information is processed on the basis of legitimate interests.
My lawful bases for collecting or using personal information for information updates or marketing purposes are:
Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
My lawful bases for collecting or using personal information to protect client welfare are:
Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Vital interests - where a serious and urgent safeguarding concern arises, I may need to record or share limited relevant information to protect the safety of a client or another person. This applies only in exceptional circumstances, is limited to what’s strictly necessary, and is treated with care and discretion.
My lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
Consent - I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Where I get personal information from
Directly from you
How long I keep information
My retention schedule for data is a maximum of 6 years. For more information on how long we store your personal information or the criteria we use to determine this please contact me using the details provided at the top of this Privacy Policy section.
Who I share information with
Data processors
Google Workspace
This data processor provides cloud-based services and online workspace tools that I use to operate my business. These include email, calendars, Google Meet for online coaching sessions, Google Forms, Google Contacts, Google Docs, Google Sheets, Google Slides and Google Drive. These services enable me to communicate with clients, schedule and conduct coaching sessions, collect information through forms, create and manage documents, and securely store and manage business and client information. Please see more about Google Workspace and Google's approach to privacy here.
Sharing information outside the UK:
Where necessary, data processors may transfer personal information outside of the UK. When doing so, they comply with the UK GDPR and ensure that appropriate safeguards are in place.For further information or to obtain a copy of the appropriate safeguard for any of these transfers, please contact me using the contact information provided at the beginning of this Policy.
Category of recipient:
Data processor and cloud platform
Country the personal information is sent to:
Personal information may be processed in the UK, European Economic Area and other countries where Google or its service providers operate. Google Workspace's data-processing terms provide mechanisms for lawful international transfers where required under UK data protection law.
How the transfer complies with UK data protection law:
Where personal information is transferred outside the UK, Google states that it uses appropriate safeguards in accordance with applicable data protection law. These include transfers to countries recognised as providing adequate protection and, where required, appropriate contractual safeguards such as the Standard Contractual Clauses together with the UK International Data Transfer Addendum.
Squarespace
This data processor provides the platform I use to build, host and maintain my website. Depending on how I use the platform, this includes website hosting, domain management, website analytics, search engine optimisation (SEO), contact forms and other tools that support the operation of my coaching services. Please see more about Squarespace and its approach to data protection here.
Sharing information outside the UK:
Where necessary, data processors may transfer personal information outside of the UK. When doing so, they comply with the UK GDPR and ensure that appropriate safeguards are in place. For further information or to obtain a copy of the appropriate safeguard for any of these transfers, please contact me using the contact information provided above.
Category of recipient:
Website builder and hosting provider
Country the personal information is sent to:
Personal information may be transferred to or accessed from countries outside the UK, including the United States of America and other countries where Squarespace or its sub-processors operate, where necessary to provide its services. Squarespace's current Data Processing Addendum specifically permits transfers to countries globally, including the United States.
How the transfer complies with UK data protection law:
Where personal information is transferred outside the UK, Squarespace states that it uses appropriate safeguards in accordance with applicable data protection law. These include the UK Extension to the EU-US Data Privacy Framework, where applicable, and Standard Contractual Clauses together with the UK International Data Transfer Addendum where required. Squarespace also states that it maintains appropriate technical and organisational security measures to protect personal information.
Appointment scheduling
Calendly
This data processor carries out the following activities for me:
Provides an online appointment scheduling system, enabling clients to book, reschedule and cancel coaching sessions. Calendly also sends appointment confirmations and reminders, securely stores booking information, and helps me manage my coaching calendar and client appointments. Please see more about Calendly here.
Sharing information outside the UK:
Where necessary, data processors may transfer personal information outside of the UK. When doing so, they comply with the UK GDPR and ensure that appropriate safeguards are in place.For further information or to obtain a copy of the appropriate safeguard for any of these transfers, please contact me using the contact information provided above.
Category of recipient:
Appointment scheduling provider.
Country the personal information is sent to:
Calendly states that user and invitee data is stored in data centres located in the United States of America. Personal information may also be processed or accessed in other countries where Calendly and its service providers operate, where necessary to provide their services.
How the transfer complies with UK data protection law:
Where personal information is transferred outside the UK, Calendly states that it uses appropriate safeguards in accordance with applicable data protection law. For transfers of personal data from the UK to the United States, Calendly currently relies on the UK Extension to the EU-US Data Privacy Framework where applicable. Its Data Processing Addendum also provides for the use of Standard Contractual Clauses (SCCs) together with the UK International Data Transfer Addendum where required.Calendly also states that it maintains appropriate technical and organisational measures to protect personal data, including encryption when data is transferred and when it is stored.
Online communications and video calling provider
This data processor provides an alternative means of communication if Google Meet is unavailable or unsuitable, and may also be used where necessary for practical communication with clients. Where needed, I may use WhatsApp for coaching sessions using the client's telephone number, video and audio, and for occasional messages or calls relating to coaching, such as arranging or confirming sessions. I do not routinely use WhatsApp for coaching communication or encourage clients to use it as their primary means of contacting me. WhatsApp provides end-to-end encryption for personal messages and calls. Please see more about WhatsApp and its approach to privacyhere.
Sharing information outside the UK: Where necessary, data processors may transfer personal information outside of the UK. When doing so, they comply with the UK GDPR and ensure that appropriate safeguards are in place. For further information or to obtain a copy of the appropriate safeguard for any of these transfers, please contact me using the contact information provided above.
Category of recipient: Online communications and video calling provider
Country the personal information is sent to: Personal information may be transferred to or accessed from countries outside the UK, including the United States and other countries where WhatsApp, Meta and their service providers operate, where necessary to provide their services.
How the transfer complies with UK data protection law: Where personal information is transferred outside the UK, WhatsApp/Meta states that it uses appropriate safeguards in accordance with applicable data protection law. These may include transfers to countries recognised as providing adequate protection and appropriate contractual safeguards, such as Standard Contractual Clauses and other legally recognised transfer mechanisms where required.
How to complain
If you have any concerns about my use of your personal information, you can make a data protection complaint to me:
Email: info@thisisareset.life
If you remain unhappy with how I’ve used your data after raising a complaint with me, you can also complain to the ICO.The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
This policy was last updated: 11th August 2026