Privacy Policy

This Privacy Policy explains how Hansard Coaching (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit hansardcoaching.com, read our blog, or enquire about our coaching services. Please read it carefully.

This policy has been updated from a previous version to reflect UK GDPR (the retained EU law version of the General Data Protection Regulation as it applies in the United Kingdom following the end of the EU-UK transition period) and the Data Protection Act 2018.

1. Who We Are

Hansard Coaching provides one-to-one and group executive and professional coaching services. We are the data controller responsible for your personal data.

Website: hansardcoaching.com

Operated by: Oliver Hansard

Email: oliver@hansardcoaching.com

For any questions about this policy or to exercise your data protection rights, please contact us using the details above or via our website contact form.

2. What Personal Data We Collect

2.1 Identity & Contact Data

Collected only if you actively contact us via the enquiry form, email, or telephone:

  • Full name
  • Email address
  • Telephone number (where provided)
  • Job title and employer/organisation (where provided)

2.2 Coaching & Service Data

  • Information you share during the coaching enquiry process
  • Professional background and goals relevant to coaching engagement
  • Notes and correspondence relating to coaching sessions (held offline)

2.3 Technical & Usage Data

  • IP address (anonymised via GA4 — your full IP address is never stored)
  • Browser type and version
  • Device type and operating system
  • Pages visited, session duration, and referring URL
  • Blog content interactions
  • Cookie identifiers (see our Cookie Policy below)

2.4 Communications & Enquiry Data

  • Enquiries submitted via our website contact form
  • Email and telephone correspondence
  • Any other information you voluntarily provide when contacting us

We do not collect sensitive or special category personal data through this website. Coaching engagements may involve discussing personal or professional matters; any sensitive information shared in the context of coaching is handled with strict confidentiality in accordance with professional coaching ethics and not stored through this website.

3. How We Collect Your Personal Data

  • Directly from you — when you submit an enquiry via our contact form, email us, or telephone us
  • Automatically — when you visit our website or read our blog, Google Analytics 4 collects anonymised usage data (subject to your cookie consent)
  • Via Divi — our website page builder which includes built-in contact form functionality

4. How We Use Your Personal Data & Our Lawful Basis

We process your personal data only where we have a valid lawful basis under UK GDPR:

 

Purpose Lawful Basis Data Used
Responding to coaching enquiries Legitimate interests / pre-contract steps (Art. 6(1)(b)(f)) Identity, contact, communications data
Providing one-to-one and group coaching services Performance of a contract (Art. 6(1)(b)) Identity, contact, coaching data
Managing client relationships and communications Legitimate interests (Art. 6(1)(f)) Identity, contact, correspondence data
Analysing website and blog usage Consent (Art. 6(1)(a)) via Complianz cookie banner Anonymised technical and usage data
Maintaining website security Legitimate interests (Art. 6(1)(f)) Technical data, IP address
Compliance with legal obligations Legal obligation (Art. 6(1)(c)) As required by applicable law
Protection and assertion of legal rights Legitimate interests (Art. 6(1)(f)) Any relevant personal data

 

We do not carry out email marketing or send newsletters. We do not use your personal data for profiling or automated decision-making.

5. Website Contact Form & Divi

Our website contact form is built using Divi (by Elegant Themes). When you submit an enquiry, your name, email address, and message are stored in our WordPress database and delivered to us by email. This data is used solely to respond to your enquiry and is retained for 3 years from the date of last contact, after which it is securely deleted.

Please do not include sensitive personal information in your enquiry messages.

6. Coaching Services — One-to-One & Group Programmes

When you engage with us for coaching services, we collect and retain information necessary to manage your coaching engagement. This includes contact details, session notes (held securely offline), and correspondence. This information is processed on the basis of performing our contract with you.

Coaching conversations are confidential. Information shared in coaching sessions is not stored through this website and is handled in accordance with our professional coaching obligations and applicable codes of ethics.

Client data relating to coaching engagements is retained for 3 years following the end of the coaching relationship.

7. Blog & Content

Our website includes a blog with articles on professional development, leadership, and coaching topics. Reading blog content does not require you to provide any personal data. Google Analytics 4 collects anonymised data about blog page visits (subject to your cookie consent) to help us understand which content is most useful to our audience.

If you share or link to our blog content, any data processing related to those actions is governed by the platform you use to share it.

8. Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use our website and engage with our content. GA4 collects anonymised data about pages visited, session duration, device type, and approximate geographic location.

Key privacy protections in place:

  • IP anonymisation is enabled by default in GA4 — full IP addresses are never stored
  • Google Analytics only activates after you have given your consent via our Complianz cookie banner
  • Google Signals is disabled — no cross-device or advertising audience tracking
  • We have accepted the Google Ads Data Processing Terms

GA4 data is retained for 26 months. Google LLC is US-based; transfers are covered by the UK-US Data Bridge. Google’s Privacy Policy: policies.google.com/privacy

9. Sharing Your Personal Data

We do not sell or share your personal data with third parties for their own purposes. We may share it with the following parties strictly as necessary:

  • Google LLC — Google Analytics (anonymised website usage data only, as data processor)
  • Elegant Themes — Divi page builder and contact form plugin (data processor)
  • Our web hosting provider — for website hosting and security services
  • Professional advisers — solicitors, accountants, or insurers where legally required
  • Regulatory authorities — the ICO or other bodies where required by law

All processors are required to handle your data securely and in accordance with UK GDPR.

10. International Transfers

Our website is hosted in Europe. Google LLC is based in the United States; transfers of personal data to Google are covered by the UK-US Data Bridge and Google’s standard contractual clauses. We do not otherwise transfer your personal data outside the UK or EEA.

You may request further information about international transfer safeguards by contacting us.

11. Data Retention

  • Website enquiry form data: 3 years from date of last contact, then securely deleted
  • Coaching client data: [specify period, e.g. 3 years] following the end of the coaching relationship
  • Financial records: 7 years (HMRC requirement)
  • Google Analytics data: 26 months (GA4 default)
  • Web hosting server logs: up to 30 days

After the applicable retention period, personal data is securely deleted or anonymised.

12. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access — request a copy of personal data we hold about you (Subject Access Request)
  • Right to rectification — ask us to correct inaccurate or incomplete data
  • Right to erasure — request deletion of your data in certain circumstances
  • Right to restrict processing — ask us to pause processing in certain circumstances
  • Right to data portability — receive your data in a structured, portable format in certain circumstances
  • Right to object — object to processing based on legitimate interests or to direct marketing
  • Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
  • Rights related to automated decision-making — we do not carry out solely automated decision-making

To exercise any of these rights, please contact us at [contact email] or via our website contact form. We will respond within one calendar month. We may need to verify your identity. There is no charge unless requests are manifestly unfounded or excessive.

13. Complaints

If you are dissatisfied with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113   |   Website: ico.org.uk

We would welcome the opportunity to address your concern directly before you contact the ICO.

14. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • SSL/TLS encryption across our website
  • Secure WordPress administration with restricted access
  • Regular plugin and platform updates
  • Secure offline storage of coaching session notes

In the event of a personal data breach likely to affect your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

15. Third-Party Links

Our website and blog may contain links to third-party websites, publications, and platforms. We are not responsible for their privacy practices and encourage you to read their privacy notices.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version and its effective date will always be published on our website. We will notify you of significant changes where we have your contact details.

This Privacy Policy was last updated on 21 July 2026.