PRIVACY POLICY

Privacy Policy
Last updated: February 2026
Mandorla Coaching is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
​
1. About Us
Mandorla Coaching
Website: www.mandorlacoaching.co.uk
Email: carloslopezreal@me.com
For the purposes of data protection law, Mandorla Coaching is the Data Controller of your personal information.
​
Mandorla Coaching is registered with the Information Commissioner’s Office (ICO) under registration number ICO:00013091654
​
2. What Information We Collect
We may collect and process the following categories of personal data:
a) Contact and Identity Information
-
Name
-
Email address
-
Telephone number
-
Postal address (if provided)
b) Coaching and Professional Information
-
Coaching goals and reflections
-
Session notes
-
Development plans
-
Feedback and evaluations
c) Administrative Information
-
Booking and scheduling details
-
Invoicing and payment records (where applicable)
d) Technical Information
-
IP address
-
Browser type and device information
-
Website usage data (where analytics are used)
3. How We Collect Your Information
We collect personal data when you:
-
Contact us via the website, email, or telephone
-
Complete enquiry or booking forms
-
Engage in coaching sessions
-
Subscribe to communications (if applicable)
-
Use our website
Information may be provided directly by you or generated through our professional engagement with you.
​
4. Lawful Basis for Processing
Under UK GDPR, we process your personal data on the following lawful bases:
-
Performance of a contract – to deliver coaching services
-
Legitimate interests – to manage our professional relationship and business operations
-
Consent – where you have given explicit permission (e.g. for marketing communications)
-
Legal obligation – where required by law
Where consent is relied upon, you may withdraw it at any time.
​
5. How We Use Your Information
We use your personal data to:
-
Provide coaching and related services
-
Manage appointments and communications
-
Maintain professional records
-
Process payments and invoices
-
Improve our services
-
Comply with legal and regulatory obligations
We do not use your data for automated decision-making or profiling.
​
6. Confidentiality and Professional Ethics
All coaching conversations and records are treated as confidential.
Information may only be disclosed without your consent in exceptional circumstances, including:
-
Where there is a serious risk of harm to you or others
-
Where disclosure is required by law
-
Where professional supervision requires anonymised discussion
Any such disclosure will be limited to what is necessary.
​
7. Sharing Your Information
Mandorla Coaching does not sell, rent, or trade your personal data.
We do not routinely share your information with third parties.
Your data may be processed only as necessary through essential service providers used in the normal operation of the business, such as:
-
Email and communication services
-
Video conferencing platforms (e.g. Zoom)
-
Secure data storage and backup services
These providers process data only to support the delivery of services and are required to meet appropriate data protection standards.
No personal data is shared for marketing or commercial purposes.
​
8. Data Storage and Security
We take appropriate technical and organisational measures to protect your information, including:
-
Password-protected systems
-
Encrypted devices where applicable
-
Secure cloud storage
-
Restricted access to records
Physical documents (if any) are stored securely.
While no system is completely secure, we take reasonable steps to safeguard your data.
​
9. How Long We Keep Your Data
We retain personal data only for as long as necessary.
Typically:
-
Active client records: during the coaching relationship
-
Closed client records: up to 7 years after the end of coaching
-
Financial records: in line with legal requirements
Data may be retained longer where legally required or with your consent.
After this period, data is securely deleted or anonymised.
​
10. Your Data Protection Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request deletion of your data
-
Restrict processing
-
Object to processing
-
Request data portability
-
Withdraw consent at any time
To exercise these rights, please contact us using the details above.
​
11. Right to Complain
If you are unhappy with how your data is handled, you have the right to lodge a complaint with:
Information Commissioner’s Office (ICO)
Tel: 0303 123 1113
We encourage you to contact us first so we can try to resolve any concerns.
​
12. Cookies and Website Analytics
Our website may use cookies and similar technologies to improve functionality and user experience.
Where non-essential cookies are used, you will be asked for consent.
You can control cookies through your browser settings.
For more information, please refer to our Cookie Policy (if applicable).
​
13. International Data Transfers
Some of the digital services used to store and back up data (such as secure cloud storage and backup providers) may process information on servers located outside the UK.
Where this occurs, appropriate safeguards are in place, including contractual protections and compliance with UK data protection requirements.
Mandorla Coaching takes reasonable steps to ensure that personal data remains protected wherever it is processed.
This quietly covers Dropbox, Backblaze, and anything similar — without naming them or creating unnecessary anxiety.
​
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated revision date. We encourage you to review it periodically.
​
15. Contact
If you have any questions about this Privacy Policy or how your data is handled, please contact:
Email: carloslopezreal@me.com
Website: www.mandorlacoaching.co.uk
​​​
​