Privacy Notice
Last updated: 5 February 2026
1) Who We Are (Data Controller)
Expansion Point Coaching ("we", "us", "our") provides leadership and executive coaching services and acts as the data controller for the personal data we process.
Address: 53 Flagstaff Road, Reading, RG2 6BZ
Website: www.expansionpointcoaching.co.uk
Contact email: info@expansionpointcoaching.co.uk
We operate under UK GDPR and the Data Protection Act 2018. We also comply with EU GDPR when we offer services to individuals in the EEA.
2) Personal Data We Collect
• Identity & Contact: name, job title, employer, email, phone.
• Professional Profile: goals, competencies, development focus; any assessment results you or your employer choose to share with the coach.
• Coaching Engagement: session bookings, attendance, high‑level themes and coach working notes.
• Sponsor‑related: coachee names and high‑level coaching themes/feedback where a corporate sponsor is involved.
• Commercial: contracts, invoices and payment confirmations (no card details stored by us).
• Technical/Website: IP address and device/browser information where applicable.
• Marketing Preferences: subscription status and interactions.
We do not record coaching sessions. We do not administer psychometrics; if clients / sponsors share assessment outputs, we process them only for coaching purposes.
3) How We Use Personal Data & Legal Bases
• Provide and manage coaching services, scheduling and communications – Contract; Legitimate interests.
• Provide agreed sponsor updates (attendance/high‑level themes) – Legitimate interests; Consent where required.
• Invoicing, accounting and record‑keeping – Legal obligation; Contract.
• Operate, secure and improve our services and IT – Legitimate interests.
• Send updates/marketing about similar services – Legitimate interests ("soft opt‑in"); or Consent. You can opt out anytime.
4) Sharing Your Data
• Corporate sponsors (employer/sponsor/HR/L&D): only high‑level themes, feedback, and coachee names. We never share detailed session notes without coachees’ prior consent.
• Service providers (processors): Microsoft 365 (Outlook, Teams, OneDrive/SharePoint) for email, meetings and secure storage; and professional advisers (legal/accounting) where necessary.
• Authorities: where required by law or to protect rights and safety. We do not sell personal data.
5) International Transfers
Use of Microsoft services may involve transfers outside the UK/EEA. Where this occurs, we use appropriate safeguards: the EU Standard Contractual Clauses ("SCCs") and, for UK transfers, the UK International Data Transfer Agreement ("IDTA") or the UK Addendum to the EU SCCs, and we undertake transfer risk assessments where required.
6) Retention
• Coach working notes: 2 years after the end of the coaching programme.
• Engagement records (dates, high‑level progress): 6 years.
• Financial records: 6–7 years (legal/tax).
• Marketing contacts: until you opt out.
7) Your Rights
You may request access, rectification, erasure, restriction, objection (including to marketing), and data portability. Where we rely on consent, you may withdraw it at any time. Contact: info@expansionpointcoaching.co.uk. You can lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk / 0303 123 1113.
8) Coaching Confidentiality
Coaching conversations are confidential. We only share agreed high‑level themes with sponsors. We may disclose information if required by law or to prevent serious harm.
9) Children
Our services are for adults in professional contexts; we do not knowingly process children’s data.
10) Updates to this Notice
We may update this notice and will post the latest version on our website.
