Privacy Policy
Introduction
Growth Coach Georgia ("we", "us", or "our") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the steps we take to keep it secure, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Business Name: Growth Coach Georgia
Email: georgia@growthcoachgeorgia.com
Website: https://stan.store/growthcoachgeorgia
For any privacy-related enquiries, please contact us via the details above.
What Personal Data We Collect
We may collect and process:
- Names and contact details (email, phone, postal address)
- Payment and billing details
- Purchase or account history
- Photographs, videos, and call recordings (where relevant to coaching sessions)
- Records of meetings, decisions, and feedback
- Information relating to compliments or complaints
We do not intentionally collect special-category or children's data.
Purposes of Processing
We collect and use personal information to:
- Deliver coaching sessions and digital products
- Administer bookings, payments, and account management
- Provide follow-up support and client communications
- Manage marketing and service updates (where consented)
- Comply with legal, tax, and accounting requirements
- Improve services based on feedback and analytics
Lawful Bases for Processing
We rely on the following lawful bases under UK GDPR:
- Contract (Article 6(1)(b)) — to enter into or perform a coaching or product-supply contract.
- Legitimate Interests (Article 6(1)(f)) — to operate and improve our services efficiently, maintain client relationships, and protect business assets.
- Legal Obligation (Article 6(1)(c)) — to meet financial, tax, and legal record-keeping duties.
- Consent (Article 6(1)(a)) — for optional marketing emails or sharing testimonials.
Legitimate Interest Assessment
We have carried out a balancing test confirming that our legitimate interests — such as securely managing coaching materials, protecting our intellectual property, and analysing anonymised usage trends — do not override your rights or freedoms.
Where We Get Your Data
We may collect data:
- Directly from you through sign-up forms, emails, video calls, or payment checkout pages.
- From social-media platforms (e.g. LinkedIn, Instagram) if you message or interact with us there.
We do not purchase personal-data lists or receive data from unrelated third parties.
Systems and Sub-Processors
We use trusted third-party systems to manage services securely:
- Stan Store — for initial data collection, order forms, and digital-product delivery
- Outlook (Microsoft 365) — for email communication
- iCloud (Apple) — for storage of session videos, photos, and documents
- Wix — for website hosting and analytics
All processors are contractually required to handle data safely and in line with UK GDPR standards.
Data Sharing
We will never sell personal data. Information may be shared only with:
- Professional advisers (e.g. accountants or legal representatives) where required
- Payment providers and banks to complete transactions
- Regulators or authorities if we are legally obliged to do so
Data Retention
We keep personal information only for as long as necessary:
- Client and financial records — normally up to six years (after final interaction) to comply with tax laws.
- Marketing records — until you withdraw consent.
- Multimedia materials — until no longer needed for coaching or you request deletion.
International Data Transfers
Some systems we use (e.g. Stan Store, iCloud, Wix, Microsoft) store data outside the UK. When this occurs, transfers are protected by Standard Contractual Clauses (SCCs) or an adequacy decision approved by the UK Information Commissioner's Office (ICO). These mechanisms ensure your data remains secure and lawful.
Data Security
We apply appropriate technical and organisational measures, including:
- Encrypted devices and cloud storage
- Password and multi-factor authentication controls
- Regular system updates and restricted access
- Deletion of data when no longer required
Your Rights
Under UK GDPR, you have the right to:
- Access a copy of your data we hold
- Request correction of inaccurate information
- Request erasure (where lawfully possible)
- Withdraw consent for marketing at any time
- Object to or restrict processing in certain cases
- Request data portability to another provider
To exercise any rights, contact us using the details above.
How to Complain
If you have concerns about our use of your data, please contact us first so we can resolve the issue. If you remain unhappy, you can contact the UK Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Helpline: +44 303 123 1113