Privacy Notice
Last updated: September 2026
This Privacy Notice explains how personal data is collected, used, stored, and protected when you interact with our website, book consultations or workshops, download toolkits, or communicate with our consultancy, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The personal data we collect
| Category of data | Examples collected | Source |
|---|---|---|
| Identity & contact data | Full name, business email address, phone number, professional title, organisation name. | Directly provided via contact forms, event sign-ups, or email inquiries. |
| Booking & financial data | Invoice billing address, service tier selected, transaction references (payment card details are processed directly by third-party PCI-compliant processors). | Directly provided upon booking coaching sessions or corporate training engagements. |
| Technical & usage data | IP address, browser type, operating system, pages visited, visit timestamps. | Automated via cookies and basic web analytics logs. |
| Communication records | Emails, session briefing notes, coaching pre-work questionnaires, feedback submissions. | Direct communications with our practice. |
Lawful basis and how we use your data
- Performance of a contract: To deliver workplace training programmes, coaching sessions, workshop toolkits, and client agreements.
- Legitimate interests: To respond to business inquiries, manage professional relationships, maintain website security, and monitor site operational integrity.
- Legal obligation: To maintain required financial, accounting, and tax records under UK corporate legislation.
- Consent: Where explicitly given, to distribute occasional newsletters, masterclass updates, or educational articles. You may withdraw consent at any time via the unsubscribe link or direct email request.
Data sharing and third-party processors
We do not sell, rent, or trade your personal data. We only share personal data with trusted third-party service providers essential to deliver our professional services under strict data processing agreements, including:
- Secure cloud file storage and workspace infrastructure.
- Scheduling and appointment booking platforms.
- Email marketing and automation software (only where opt-in consent exists).
- Professional banking, accounting, and invoicing software.
Data retention and international transfers
We retain corporate client and booking records for up to 6 years following the completion of services to fulfil UK legal, accounting, and insurance requirements. General business inquiry data that does not lead to an engagement is reviewed and deleted after 12 months. Where service providers host data outside the UK/EEA, appropriate safeguards (such as UK International Data Transfer Agreements or standard contractual clauses) are maintained.
Your data protection rights
Under UK data protection law, you have the right to request access to your data, request rectification of inaccurate records, request erasure (the “right to be forgotten”), object to processing, or request restriction of processing. To exercise any of these rights, please email victoria@victoriaenglishwellbeing.co.uk.
You also hold the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.