Privacy Policy

Last updated: 14 August 2026

Who I am

I am Hannah Desmond, an ADHD/AuDHD Coach and sole trader. I am the Data Controller for personal data collected through this website and in connection with my coaching services. You can contact me at: 📧 hello@adhdcoachhannah.com If required, my ICO registration details can be provided on request.

What personal data I collect

When you interact with me through this website, by email, when booking a session, or when using my coaching services, I may collect: Your name and contact details, such as email address and phone number Information you provide when making an enquiry or booking a session Information you choose to share during coaching, including information about your circumstances, experiences, goals or support needs Payment and transaction information Information contained in correspondence between us Information about your use of my website where this is necessary for the website to function I do not keep routine notes of coaching sessions. Some information you may choose to provide during coaching may constitute special category personal data, such as information relating to health. Where I process special category data, I will only do so where I have an appropriate legal condition for doing so under applicable data protection law.

How I use your personal data

I use your personal data to:
Provide coaching services you have requested
Manage bookings, appointments and payments
Communicate with you about your coaching or related services
Respond to enquiries
Manage my business and client relationships
Meet legal, accounting, tax and insurance obligations
Maintain the security and proper functioning of my website and systems
Handle and respond to data protection requests or complaints
I do not sell your personal data or share it with third parties for their own marketing purposes.

Lawful bases for processing

Depending on the circumstances, I rely on the following lawful bases under the UK GDPR and other applicable data protection law: Contract: where processing is necessary to provide coaching or other services you have requested, or to take steps at your request before entering into a contract. Legal obligation: where I need to process or retain information to comply with legal, tax, accounting or other statutory requirements. Legitimate interests: where processing is necessary for legitimate business purposes, such as managing client relationships, communicating with clients, maintaining business records and keeping my systems secure, provided that those interests are not overridden by your rights and freedoms. Consent: where I ask for your consent for an optional use of your personal data, such as certain marketing communications. Where I process special category data, such as health information, I will also rely on an appropriate Article 9 condition where required, including explicit consent where applicable.

Who I share your data with

I use third-party service providers to operate my business. Depending on how you interact with me, these may include: Google Workspace for email, calendar, documents and secure business storage Squarespace for website hosting and website functionality Acuity Scheduling for appointment booking and reminders Stripe, Square and PayPal for payment processing These providers process personal data on my behalf or as independent controllers for particular aspects of their services. I only provide them with information necessary for the relevant purpose. I may also disclose information where necessary to comply with legal obligations, protect my rights, or prevent or investigate fraud or other unlawful activity.

International data transfers

Some of the service providers I use may process personal data outside the UK or European Economic Area. Where personal data is transferred internationally, I will use an appropriate legal mechanism and safeguards required by applicable data protection law, such as an adequacy decision or appropriate contractual safeguards.

How I protect your data

I use appropriate technical and organisational measures to protect personal data, including password protection, access controls and the security measures provided by the cloud services I use. I do not routinely store client data locally on my computer.

How long I keep your data

I keep personal data only for as long as I need it for the purposes described in this policy, including to provide services, manage my business and meet legal, tax, accounting and insurance obligations. Different types of information may therefore be kept for different periods. Where I am required to retain information for a legal or regulatory purpose, I will retain it for the period required. When information is no longer needed, I will securely delete or dispose of it where reasonably practicable.

Your data protection rights

Depending on the circumstances and the applicable law, you may have the right to:
Ask for a copy of the personal data I hold about you
Ask me to correct inaccurate or incomplete information
Ask me to delete your personal data
Ask me to restrict how I use your personal data
Object to certain processing, including processing based on legitimate interests
Request your personal data in a portable format where the right applies
Withdraw consent where I rely on consent
Raise a concern or complaint about how I handle your personal data
These rights are subject to certain legal exceptions and do not apply in every circumstance.
To exercise your rights, contact me at hello@adhdcoachhannah.com.

Data protection complaints

If you have a concern about how I have handled your personal data, please contact me at hello@adhdcoachhannah.com in the first instance. I will acknowledge your data protection complaint within 30 days and respond without undue delay, in accordance with the applicable requirements. You also have the right to complain to the relevant data protection supervisory authority. If you are in the UK, you can complain to the Information Commissioner's Office (ICO). If you are in the EU/EEA, you can complain to the data protection authority in the relevant EU/EEA country.

Marketing

I may use your email address to send you newsletters, updates and other information about my coaching, talks, resources and related services where I have an appropriate lawful basis to do so.

Where consent is required, I will ask you to opt in before sending marketing emails. Every marketing email will include a clear way to unsubscribe, and you can withdraw your consent or object to direct marketing at any time.

I will keep a record of marketing preferences and will not send marketing emails to people who have opted out.

Confidentiality in coaching

Coaching conversations are treated as confidential. There may be circumstances where I need to disclose information where required by law or where there is a serious and immediate concern about someone's safety. I will only make such disclosures where I consider this necessary and appropriate.

Cookies

This website uses cookies and similar technologies. Some cookies are necessary for the website and its functions to operate. Where the website uses non-essential cookies or similar technologies that require consent, I will ask for consent through the website's cookie consent mechanism. You can change your cookie preferences through the cookie settings provided on the website.

Automated decision-making

I do not currently make decisions about clients that have legal or similarly significant effects using solely automated processing or profiling.

Changes to this policy

I may update this Privacy Policy from time to time to reflect changes to my services, the systems I use, or applicable data protection law. The latest version will always be available on this website.