This Privacy Policy explains how Lisa Spencer Coaching (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website lisaspencercoaching.com (the “Website”), sign up to our email list, download a free resource, or purchase any of our products, coaching services, or memberships. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

Lisa Spencer Coaching is the “data controller” responsible for your personal data. This means we decide how and why your data is processed. You can contact us about this policy or your data at: [email protected].

2. The Information We Collect

Depending on how you interact with us, we may collect the following types of personal data:

Identity and contact details: your name and email address (for example, when you join our email list or download the 5 Day Confidence Challenge).

- Purchase and transaction information: the products or services you buy, order dates, and amounts. Card and payment details are handled directly by our payment providers and are not stored by us.

- Coaching information: any information you choose to share with us during enquiries or coaching sessions, which may include details about your wellbeing, work, and personal circumstances.

- Communications: the content of messages, emails, and enquiries you send us.

- Technical and usage data: such as your IP address, browser type, and how you use our Website, collected through cookies and similar technologies (see section 8).

Sensitive (special category) data

Because coaching can touch on health and wellbeing, you may share information that counts as “special category” data under UK GDPR (for example, details relating to your mental or physical health). Where this happens, we rely on your explicit consent to process it, and we only use it to provide our coaching services to you. You can withdraw this consent at any time by contacting us.

3. How and Why We Use Your Data (Lawful Bases)

Under UK GDPR we must have a lawful basis for processing your data. We rely on the following:

- Consent: to send you marketing emails, newsletters, and free resources you have signed up for. You can withdraw consent and unsubscribe at any time.

- Contract: to deliver the products, coaching services, or membership you have purchased, to take payment, and to provide customer support.

- Legal obligation: to keep records required by law, such as accounting and tax records.

- Legitimate interests: to run and improve our business, keep our Website secure, and respond to your enquiries, provided this does not override your rights.

- Explicit consent: to process any special category (health or wellbeing) information you choose to share in coaching.

4. Email Marketing

If you join our email list or download a free resource, we will use your name and email address to send you our newsletter, helpful content, and information about our products and services. Every marketing email includes an unsubscribe link, and you can opt out at any time. We will stop sending marketing emails as soon as you unsubscribe, although we may still contact you about a product or service you have purchased.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with trusted third parties who help us run our business, and only so far as is necessary. These may include:

- Our email, CRM, and course platform: THL (a platform provided through our marketing agency Totally High Level, built on Go High Level), which we use to capture sign-ups, send emails, host courses, and manage memberships. 

- Payment providers: e.g. Stripe and/or PayPal, who process payments securely on our behalf.

- Design and content tools: such as Canva, used to create our materials.

- Professional advisers: such as our accountant, where required.

Some of these providers may store or process data outside the UK. Where that happens, we take steps to ensure your data is protected by appropriate safeguards, such as the providers being covered by recognised data protection frameworks or standard contractual clauses. 

6. How Long We Keep Your Data

We keep your personal data only for as long as we need it for the purposes set out in this policy, or for as long as the law requires.

For example:

- Email marketing data: until you unsubscribe or ask us to delete it.

- Customer and coaching records: for the duration of our relationship and a reasonable period afterwards.

- Financial records: usually for at least six years, to meet UK tax and accounting requirements.

When we no longer need your data, we will securely delete or anonymise it.

7. Your Rights

Under UK GDPR you have the following rights over your personal data:

- The right to be informed about how we use your data.

- The right to access a copy of the data we hold about you.

- The right to rectification if your data is inaccurate or incomplete.

- The right to erasure (to ask us to delete your data) in certain circumstances.

- The right to restrict or object to processing.

- The right to data portability.

The right to withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at [email protected]

 We will respond within one month.

8. Cookies

Our Website may use cookies and similar technologies to help it function and to understand how visitors use it. Essential cookies are needed for the site to work; non-essential cookies (such as analytics) are only used with your consent. You can manage or disable cookies through your browser settings or our cookie banner.

9. How We Protect Your Data

We take reasonable technical and organisational measures to keep your personal data secure, including using reputable platforms, secure passwords, and limiting access to your data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

Our Website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our Website, with the “Last updated” date shown at the top. We encourage you to review it periodically.

12. How to Contact Us or Make a Complaint

If you have any questions about this policy or how we handle your data, please contact us at [email protected].

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling their helpline. We would, however, appreciate the chance to address your concerns first.