Your privacy matters

Privacy Policy

How I look after your personal information

1. Who I am

The data controller responsible for your personal information is Sarah Jaques, trading as Blossom Divorce & Break Up Coaching. This means I decide how and why your information is used.

2. The information I collect

I only collect the information I need to support you. This may include:

  • Enquiry details: your name, email address, phone number (if you give it), the service you’re interested in and anything you choose to tell me in your message.
  • Booking and payment information: session dates and times, the services you’ve booked, and payment details such as the amount, date and reference of your payment. I don’t store full card details.
  • Coaching session notes: brief notes I may make during or after our sessions to support our work together.
  • Communications: emails, messages and other correspondence between us.

Sensitive information. During coaching you may choose to share information that the law treats as “special category” data, for example about your physical or mental health, or details of your relationships and personal life that reveal such information. I will only record this kind of information with your explicit consent, keep it to what is genuinely needed for our work, and protect it with extra care. You can withdraw your consent at any time (see section 10).

3. How and why I use it

The law requires me to have a lawful basis for using your information. Here’s how I use it and why:

I will never use your information for marketing without your permission, and you can unsubscribe at any time.

4. How long I keep it

I keep your information only for as long as I need it:

  • Enquiries that don’t lead to coaching: 12 months from your last contact
  • Coaching session notes: 6 years after your last session
  • Booking and client records: 6 years after your last session, for legal and tax purposes
  • Financial records: 6 years. HMRC requires business records to be kept for at least 5 years after the 31 January Self Assessment deadline for the relevant tax year, so many businesses keep them for around 6 years.

After this, your information will be securely deleted or destroyed.

5. Who I share it with

I never sell your personal information. I only share it with trusted service providers who help me run my business, and only as much as they need. These may include:

  • Cloudflare: website hosting and email forwarding
  • Google: Gmail email
  • Zoom: online coaching sessions

These providers act on my instructions and must keep your information secure. I may also share information where the law requires it, or in the limited situations described in section 8.

6. International transfers

Some of my service providers may store or process information outside the UK. Where this happens, I make sure appropriate safeguards are in place, for example the destination country being recognised by the UK as providing adequate protection, or the use of approved contractual terms such as the International Data Transfer Agreement or the UK Addendum.

7. Keeping your information safe

I use sensible technical and practical measures to protect your information, such as password-protected devices and accounts, secure storage for any paper notes, and limiting access to me alone. No system is completely secure, but if a data breach ever affected you in a way that posed a high risk to your rights, I would tell you and, where required, the ICO.

8. Confidentiality and its limits

What you share in our sessions is treated in confidence. As set out in my Terms & Conditions, I will only share information without your permission:

  • if I believe there is a risk of serious harm to you or to someone else;
  • if I have a safeguarding concern about a child or a vulnerable adult;
  • if I am required to by law, for example by a court order, or in connection with the prevention or detection of a serious crime.

Wherever it’s appropriate and safe, I’ll talk to you first.

9. Cookies

This website doesn’t currently use its own cookies or analytics. It does use Google Fonts to display its typefaces. When a page loads, your browser connects to Google’s servers to fetch the fonts, which means Google receives technical information such as your IP address. You can read more in Google’s own privacy policy.

10. Your rights

Under UK data protection law, you have the right to:

  • Access the personal information I hold about you;
  • Rectification: ask me to correct information that’s wrong or incomplete;
  • Erasure: ask me to delete your information;
  • Restriction: ask me to limit how I use your information;
  • Portability: ask for your information in a format you can take elsewhere;
  • Objection: object to me using your information, including for direct marketing;
  • Withdraw consent at any time, where I rely on your consent. This won’t affect anything done before you withdrew it.

Some of these rights only apply in certain circumstances, for example I may need to keep financial records for legal reasons. To use any of your rights, just email me at pausehealrestart@gmail.com. There’s usually no charge, and I’ll respond within one month.

11. Complaints

If you have a concern about how I handle your information, please talk to me first and I’ll do my best to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO):

12. Changes to this policy

I may update this policy from time to time, for example if the law changes or I start using a new service. The latest version will always be on this page with its “last updated” date.

Any questions?

Get in touch