Ceri Brown Coaching

Last updated: May 2026

Please note: this Privacy Policy should be reviewed periodically and updated as needed. Ceri Brown Coaching recommends seeking legal advice to ensure ongoing compliance with UK GDPR and data protection law.

1. Who we are

This Privacy Policy applies to Ceri Brown Coaching, a sole trader business owned and operated by Ceri Brown, based in South Wales, UK.

Website: www.ceribrowncoaching.com

Email: ceri@ceribrowncoaching.com

Ceri Brown Coaching is the data controller for any personal data collected through this website and associated services. This means we are responsible for deciding how and why your personal data is used.

2. What this policy covers

This Privacy Policy explains:

• What personal data we collect about you

• Why we collect it and how we use it

• Who we share it with

• How long we keep it

• Your rights regarding your personal data

• How to contact us with questions or requests

By using this website or engaging with our services, you agree to the collection and use of your personal data in accordance with this policy.

3. What personal data we collect

Data you provide to us directly

We collect personal data that you voluntarily provide when you:

• Complete The Starting Point questionnaire (your name, details about your business, your goals and personal reflections)

• Subscribe to Mind Over Chatter or any other newsletter or email list

• Book a Breakthrough Session, Aluna programme, Spring Reset, or any other service

• Send us an email or message

• Complete any form on our website

• Engage with us via social media

The types of personal data this may include are:

• Your name and email address

• Your phone number (if provided)

• Details about your business and professional background

• Personal reflections, goals, and information you share in questionnaires or sessions

• Payment information (processed securely via third-party payment providers - we do not store card details)

Data collected automatically

When you visit our website, certain data may be collected automatically, including:

• Your IP address

• Browser type and version

• Pages visited and time spent on the site

• Referring website

• Device information

This data is collected via cookies and similar technologies. Please see our Cookie section below for more information.

4. Why we collect your data and our legal basis

Under UK GDPR, we must have a legal basis for processing your personal data. The following explains why we collect your data and the legal basis we rely on:

To provide our services to you

Legal basis: Contract - processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.

This includes: booking and delivering Breakthrough Sessions, Aluna, Spring Reset, and any other coaching services; sending you your personal Loom video in response to The Starting Point; arranging session times via email.

To send you our newsletter and marketing emails

Legal basis: Consent - you have given us your explicit consent to receive marketing communications.

This includes: Mind Over Chatter weekly newsletter; promotional emails about our services and offers; updates about new content, programmes, or resources.

You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly at ceri@ceribrowncoaching.com

To respond to your enquiries

Legal basis: Legitimate interests - it is in our mutual interest to respond to questions and messages you send us.

To improve our website and services

Legal basis: Legitimate interests - it is in our legitimate interest to understand how our website is used so we can improve the experience for visitors.

To comply with legal obligations

Legal basis: Legal obligation - we may need to process certain data to comply with our legal obligations, such as maintaining financial records.

5. How we store and protect your data

Your personal data is stored and processed using the following platforms and tools:

• Go High Level (via FEA Create) - our CRM, website, email marketing, and funnel platform. Data is stored on secure servers. Please refer to Go High Level's Privacy Policy for further details.

• Google - for Google Forms (The Starting Point questionnaire) and associated Google Workspace tools. Please refer to Google's Privacy Policy for further details.

• Zoom - for delivering coaching sessions online. Please refer to Zoom's Privacy Policy for further details.

• Loom - for recording and sending personal video responses. Please refer to Loom's Privacy Policy for further details.

• Stripe or other payment processors - for processing payments. We do not store your payment card details. Please refer to the relevant payment processor's Privacy Policy for further details.

We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

6. How long we keep your data

We retain your personal data only for as long as necessary for the purposes it was collected, or as required by law.

• Client session notes and records: retained for 7 years following the end of our working relationship, in line with standard business record-keeping requirements.

• Email marketing data: retained until you unsubscribe or request deletion.

• Enquiry and contact data: retained for up to 2 years following your last contact with us.

• Financial and payment records: retained for 7 years in line with HMRC requirements.

When data is no longer required, it is securely deleted or anonymised.

7. Who we share your data with

We do not sell, rent, or trade your personal data to any third parties for their marketing purposes.

We may share your data with:

• Our service providers - such as Go High Level, Google, Zoom, and Loom - who process data on our behalf and are bound by appropriate data processing agreements.

• Payment processors - who handle transactions securely and in accordance with their own privacy policies.

• Legal and regulatory authorities - where required by law or to protect our legal rights.

All third-party service providers we work with are required to keep your information secure and use it only for the purposes we specify.

8. International data transfers

Some of our third-party service providers may process data outside the United Kingdom. Where this is the case, we ensure that appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses or adequacy decisions.

9. Cookies

Our website uses cookies - small text files stored on your device - to help us understand how visitors use the site and to improve your experience.

The types of cookies we may use include:

• Essential cookies - necessary for the website to function correctly.

• Analytics cookies - to understand how visitors interact with our website (for example, which pages are most visited). We use this information in aggregate and it does not identify individual visitors.

• Marketing cookies - to track the effectiveness of our marketing activities.

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Your rights under UK GDPR

Under UK data protection law, you have the following rights in relation to your personal data:

• The right to access - you can request a copy of the personal data we hold about you.

• The right to rectification - you can ask us to correct any inaccurate or incomplete data.

• The right to erasure - you can ask us to delete your personal data in certain circumstances (the 'right to be forgotten').

• The right to restrict processing - you can ask us to limit how we use your data in certain circumstances.

• The right to data portability - you can ask us to provide your data in a structured, commonly used, machine-readable format.

• The right to object - you can object to us processing your data where we rely on legitimate interests as our legal basis.

• Rights related to automated decision-making - you have the right not to be subject to decisions made solely by automated means that significantly affect you. We do not currently use automated decision-making in our services.

• The right to withdraw consent - where we rely on your consent to process your data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at ceri@ceribrowncoaching.com. We will respond to your request within one month. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, if you believe your data has been handled unlawfully. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

11. Children's privacy

Our services are intended for adults only. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at ceri@ceribrowncoaching.com and we will take steps to delete it.

12. Links to other websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website with the revised date at the top. We encourage you to review this policy periodically.

Where changes are significant, we will notify you by email where we hold your contact details.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch:

Ceri Brown Coaching

ceri@ceribrowncoaching.com

www.ceribrowncoaching.com

We aim to respond to all enquiries within 5 working days.

Uncover · Release · Reclaim

Ceri Brown Coaching