Please read this notice alongside any relevant Coaching Contract, course terms and Cookie Policy.
1. Who We Are and How to Contact Us
Rebekah Tyler, trading as The Coach in the Cupboard® ("we", "us" or "our"), is the data controller responsible for the personal information described in this notice.
Our website: therebekahtyler.com
Privacy enquiries: [email protected]
Business postal correspondence address: 2 Goodill Close, Stone, ST15 0LH.
You may contact us to ask questions, exercise your privacy rights or request information about the service providers and safeguards we use.
2. What Information We Collect
- Identity and contact information: Name, email address, telephone number, relevant billing or postal address and preferences.
- Coaching and service information: Booking details, attendance, goals, correspondence, feedback, worksheets you choose to submit and limited coaching notes where appropriate.
- Account and purchase information: Products or membership selected, payment status, transaction identifiers, invoices and account access records. Payment-card details are normally handled by our payment provider rather than stored directly by us.
- Website and technical information: IP address, device and browser information, approximate location, website interactions and cookies or similar technologies where used.
- Communications and community contributions: Emails and messages you send, webinar or group participation, and information you voluntarily publish in community spaces.
- Marketing preferences: Subscription status, consent or opt-out records, and engagement data where lawful and enabled.
We do not ask clients to provide more personal information than reasonably necessary. Please avoid posting private or sensitive information in group spaces.
3. How Information Comes to Us
We obtain information directly from you through forms, bookings, payments, emails, coaching conversations, course platforms and community activity.
We may also receive limited transaction, account or engagement information from providers you use to interact with us, such as payment and meeting platforms.
4. Why We Use Personal Information
We process personal information for specific purposes under the following usual lawful bases provided by UK GDPR.
| Purpose | Usual lawful basis |
|---|---|
| Answer enquiries and arrange bookings | Legitimate interests in responding to requests; steps before entering a contract. |
| Deliver coaching, courses and membership | Contract, where necessary to provide the services purchased. |
| Process payments and issue invoices | Contract and legal obligation. |
| Maintain records and protect accounts | Legitimate interests and legal obligations where applicable. |
| Send promotional newsletters and offers | Consent, or legitimate interests where a valid PECR soft opt-in permits marketing. |
| Analytics and non-essential cookies | Consent where legally required, or another appropriate lawful basis depending on the technology used. |
Where we rely on legitimate interests, those interests include responding to customers, operating services securely, improving administration and establishing or defending legal claims.
We consider individuals' rights and reasonable expectations before relying on legitimate interests. Providing essential contact and booking information is generally necessary to deliver your services. Optional marketing and certain cookies are not required.
5. Sensitive Information and Coaching Notes
During coaching, you may choose to discuss health, mental health, disability, religion or other sensitive personal matters.
We seek to record only information genuinely necessary for providing appropriate coaching. We do not routinely require sensitive disclosures.
Where special-category personal information is processed, we will identify both an appropriate lawful basis under Article 6 and an additional condition under Article 9 of UK GDPR.
Where explicit consent is required and relied upon, we will request it separately and explain how it may be withdrawn.
Confidential coaching notes, where taken, are kept separately or access-restricted wherever practicable. Ordinary administration staff should not have access unless necessary and authorised.
6. Our Systems and Service Providers
We may use customer relationship management systems, course platforms, payment processors, videoconferencing, email services, document storage and website tools to deliver our services.
Providers associated with our delivery arrangements may include GoHighLevel, Stripe, PayPal, Zoom, Microsoft services and social or community platforms where you choose to participate.
These providers may process limited personal information necessary to perform their functions, subject to their roles, contracts and applicable law.
We do not sell clients' personal information. We disclose information only where an appropriate lawful basis exists, including disclosures to authorised providers, compliance with legal obligations and proportionate safeguarding needs.
7. OAC Community and Online Sessions
If you join the Organised & Aligned Collective community or an external social platform such as Facebook, your display name, posts and information you choose to share may be visible to other members and to the platform itself.
Other participants are not under our direct technical control. We ask members to respect confidentiality, but cannot guarantee that another participant will do so.
Please avoid sharing information in group spaces that you would prefer to remain private.
Group calls and online meetings are not recorded unless participants have been informed beforehand and an appropriate lawful basis has been established.
If a recording is proposed, its purpose, recipients and retention arrangements will be explained before recording takes place.
8. Email Updates and Marketing
We send essential service emails including payment receipts, booking confirmations, course access instructions and information necessary for your membership or coaching service.
Optional promotional emails are sent only where permitted by the Privacy and Electronic Communications Regulations (PECR), usually with your consent or under a valid existing-customer soft opt-in.
Every promotional email provides a straightforward way to unsubscribe or object to receiving further marketing.
Unsubscribing from marketing will not prevent essential messages related to an active booking, account or legal obligation.
We may use limited email engagement statistics where enabled and lawfully justified.
9. Cookies and External Websites
Our website may use essential cookies and, subject to applicable consent rules, optional analytics or marketing technologies.
Further information is available in our Cookie Policy .
10. International Data Transfers
Some technology providers may store or access personal information outside the United Kingdom.
Where a restricted international transfer takes place, we will ensure that an appropriate lawful transfer mechanism applies.
This may include UK adequacy regulations, the UK International Data Transfer Agreement, or a relevant contractual Addendum, together with any required transfer assessment.
You may contact us to request further information about relevant international transfers and safeguards.
11. Security and Retention of Information
We use proportionate technical and organisational measures intended to protect personal information, including restricted access, appropriate account security and controlled sharing.
No internet-based system can be guaranteed completely secure.
We retain personal information only while there is a justified reason to do so, taking account of the customer relationship, accounting obligations, potential legal claims and the type of information.
| Information | Retention period |
|---|---|
| Coaching notes and client correspondence | Deleted six years after the final interaction. |
| Bookings, contracts, invoices and financial records | For the period required by applicable tax and accounting obligations and proportionate claims management (five years as stated in our current policy). |
| Active course and membership accounts | While the account or entitlement is active, with subsequent retention where justified. |
| Newsletter and marketing records | Until you unsubscribe, object or the information is no longer needed, subject to proportionate suppression records. |
| Website and cookie data | According to the Cookie Policy and configured provider retention settings. |
12. Your Data Protection Rights
Subject to applicable legal conditions and exemptions, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Restrict certain processing.
- Object to processing, including direct marketing.
- Receive certain information in a portable format.
- Withdraw consent where consent is the lawful basis.
Withdrawal of consent does not invalidate processing already carried out lawfully.
To exercise your rights, please contact [email protected] . We may ask for reasonable information to confirm your identity and will respond within the applicable statutory timescales.
If you have concerns about how your information has been handled, you are welcome to contact us first so that we can investigate.
You also have the right to complain to the Information Commissioner's Office (ICO): Make a complaint to the ICO .
13. Children and Updates to This Policy
Our paid coaching, course and membership services are intended for adults unless an individual service expressly states otherwise.
We do not knowingly invite children to register for services intended for adults.
We may update this Privacy Policy when our operations, providers or legal obligations change. The current version will be published on our website with its effective date.
Effective date: 8 October 2026.
