Privacy Policy

Privacy Policy (UK GDPR & English Law Compliant)

Last updated: 21.11.25

1. Introduction

True North Business Coaching and Advice (“we,” “us,” or “our”) is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your information in accordance with:

• The UK      General Data Protection Regulation (UK GDPR)
• The Data      Protection Act 2018
• The Privacy      and Electronic Communications Regulations (PECR)

By using our services or website, you agree to the practices described in this policy.

2. Data Controller

True North Business Coaching and Advice is the Data Controller for the personal data we collect and process.

For all data-related enquiries, contact:
Email: andy@truenorth.business

3. What Personal Data We Collect

Information you provide directly

• Name,      email address, phone number, business name, job title
• Billing      and payment information
• Details      shared in coaching sessions, workshops, assessments, or forms
• Feedback,      testimonials, or survey responses
• Documents      or business materials you choose to share with us

Information collected automatically (via website)

• IP      address, browser type, and device information
• Pages      viewed and interaction data
• Cookies      and similar technologies (see Cookie Policy)

Information from third parties

• Payment      service providers
• Analytics      or marketing systems
• Referrals      or partner organisations (only with your consent)

4. Legal Bases for Processing (UK GDPR)

We process personal data based on the following lawful grounds:

• Contract      (Article 6(1)(b)) – to deliver coaching and consultancy services
• Consent      (Article 6(1)(a)) – for marketing communications and optional data      collection
• Legitimate      Interests (Article 6(1)(f)) – improving our services and business      operations
• Legal      Obligation (Article 6(1)(c)) – accounting, tax, regulatory duties

If we rely on consent, you have the right to withdraw it at any time.

5. How We Use Your Personal Data

We use your data to:

• Deliver      coaching, consultancy, and related services
• Communicate      with you about appointments, resources, and support
• Process      payments and administer accounts
• Improve      our website, services, and customer experience
• Send      marketing communications (only if you opt in, per PECR)
• Maintain      security and comply with legal requirements

We never sell your personal data.

6. Confidentiality in Coaching

All information shared during coaching or consultancy sessions is treated as strictly confidential.

We only disclose information:

• When      required by law
• If      there is a risk of harm
• With      your explicit written consent

This aligns with ethical standards for coaching in the UK.

7. How We Store and Protect Your Data

We take appropriate technical and organisational measures to keep your data secure, including:

• Encrypted      storage solutions
• Password-protected      systems and access controls
• Secure      communication channels

We keep data only for as long as necessary to fulfil our contractual or legal obligations.

8. Sharing Your Personal Data

We may share data with trusted third-party service providers, such as:

• Payment      processors
• CRM,      scheduling, or email marketing software
• Cloud      storage and IT providers
• Professional      advisors (legal, accounting)

All third parties are bound by confidentiality and data protection requirements under service contracts.

We do not share or disclose coaching-related details without your explicit permission.

9. International Data Transfers

If we transfer data outside the UK (e.g., using reputable US-based software providers), we ensure appropriate safeguards are in place, such as:

• UK      International Data Transfer Agreements (IDTAs)
• Addendums      to Standard Contractual Clauses (SCCs)
• Providers      with strong privacy certifications

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right      to access – request a copy of your data
• Right      to rectification – correct inaccurate information
• Right      to erasure – ask us to delete your data
• Right      to restrict processing
• Right      to data portability
• Right      to object to processing, including marketing
• Right      to withdraw consent at any time

To exercise your rights, contact us at: andy@truenorth.business

11. Marketing Communications (PECR Compliance)

We only send marketing emails if you:

• Actively      opt in, or
• Are      an existing client and we offer related services (soft opt-in)

You may unsubscribe at any time using the link in our emails or by contacting us directly.

12. Cookies

Our website uses cookies to improve functionality and analyse performance.
You can control or disable cookies through your browser settings.
A full Cookie Policy can be provided separately.

13. Retention Periods

We keep your personal data only for as long as necessary. Typical retention periods:

• Client      records: up to 6 years (legal/accounting)
• Marketing      data: until you unsubscribe
• Coaching      notes (non-sensitive): 1–3 years unless otherwise agreed

14. Changes to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be published on our website with a revised “Last updated” date.

15. Contact Us

For questions or data enquiries:

True North Business Coaching and Advice
Email: andy@truenorth.business
Website: www.truenorth.com