Privacy Policy
Last updated: 02/11/2025
1. Introduction
This privacy policy explains how Lexi Tinkler ("I", "me", or "my") collects, uses, and protects your personal information when you use my coaching services or visit www.lexitinkler.com (the "Website").
I am committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. I am the data controller responsible for your personal data.
2. Information I Collect
Information you provide directly:
- Name and contact details (email address, phone number)
- Information shared during consultation calls or coaching sessions
- Payment and billing information
- Communication history (emails, forms, messages)
- Professional background information relevant to coaching
- Goals, challenges, and other information you share during our coaching relationship
Information collected automatically:
- Website usage data (pages visited, time spent on site)
- Technical data (IP address, browser type, device information)
- Cookies and similar technologies (see Cookie Policy)
3. Legal Basis for Processing
I process your personal data under the following legal bases:
- Contract: To provide coaching services you've requested or purchased
- Legitimate interests: To run my business effectively and improve my services
- Consent: For marketing communications and testimonials
- Legal obligation: To comply with tax, accounting, or other legal requirements
4. How I Use Your Information
I use your personal data to:
- Provide coaching services and support
- Process payments and maintain records
- Communicate with you about sessions and appointments
- Send relevant resources and coaching materials
- Improve my services and website
- Comply with legal and regulatory obligations
- With your consent, send marketing communications about my services
- With your consent, share testimonials or success stories
5. Information Sharing and Disclosure
I do not sell, rent, or trade your personal information. I may share your data only:
- With trusted service providers who assist in running my business (e.g., scheduling software, payment processors, email platforms)
- When required by law or to protect legal rights
- With your explicit consent
All third-party providers are required to maintain the confidentiality and security of your personal data.
6. Data Security
I implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Secure storage of physical records in locked facilities
- Password-protected digital files and systems
- Encrypted communication tools where appropriate
- Regular review of security practices
- Limited access on a need-to-know basis
7. Data Retention
I retain your personal data for:
- Client records: 7 years after our last session (for legal and insurance requirements)
- Financial records: 6 years (as required by HMRC)
- Marketing contacts: Until you unsubscribe or request deletion
- Website data: 26 months
8. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data and receive a copy
- Rectify inaccurate or incomplete data
- Erase your data (in certain circumstances)
- Restrict processing of your data
- Object to processing based on legitimate interests
- Data portability - receive your data in a portable format
- Withdraw consent at any time (where processing is based on consent)
To exercise these rights, please contact me using the details below.
9. Coaching Confidentiality
In addition to data protection law, our coaching relationship is governed by professional confidentiality standards. Information shared during coaching sessions is kept strictly confidential, except where:
- You give explicit permission to share
- I am legally required to disclose information
- There is a risk of harm to yourself or others
10. International Transfers
Some service providers may process data outside the UK. Where this occurs, I ensure appropriate safeguards are in place, such as:
- Adequacy decisions by the UK government
- Standard contractual clauses
- Your explicit consent
11. Children's Privacy
My services are not directed to individuals under 18. I do not knowingly collect personal data from children. If you believe a child has provided me with personal data, please contact me immediately.
12. Cookies
This Website uses cookies to improve your experience. These include:
- Essential cookies: Required for the website to function
- Analytics cookies: To understand website usage (optional)
You can control cookies through your browser settings. For more information, see our Cookie Policy.
13. Marketing Communications
If you've opted in to receive marketing emails:
- You can unsubscribe at any time using the link in each email
- I will never share your email with third parties for their marketing
- I will only send relevant coaching-related content and offers
14. Changes to This Policy
I may update this privacy policy periodically. The "Last updated" date at the top will indicate when it was most recently revised. Significant changes will be communicated via email or website notice.
15. Complaints
If you're unhappy with how I handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://ico.org.uk
Phone: 0303 123 1113
16. Contact Information
For any questions about this privacy policy or your personal data, please contact:
Lexi Tinkler
Email: lexi@lexitinkler.com
Website: www.lexitinkler.com