What I do with your information

Who I am

Steven Pocula Coaching Limited is the data controller for the information described here. A company registered in England and Wales, company number 17339169.

Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole BH16 6FA
info@stevenpocula.com
Registered with the Information Commissioner’s Office, reference ZC207319

Cookies

This site sets no cookies of its own. No tracking pixels, no analytics, no advertising, nothing that follows you anywhere.

Two pages embed a service run by someone else, and those services set their own storage in your browser to make themselves work:

• The booking calendar on the contact page is provided by TidyCal, and stores what it needs to hold your booking while you make it.
• Checkout happens on Stripe’s own pages, which use cookies for fraud prevention and to complete the payment.

Both are strictly necessary to deliver something you have actively asked for — a booking, or a purchase — which is why there is no consent banner. Neither is used to profile you or to advertise to you.

What I collect, and why

• Name and email from an enquiry — so I can reply to you. Lawful basis: legitimate interests, because you asked me a question.
• Name and email from a signup form — to send you what you asked for, and occasional notes afterwards. Lawful basis: your consent.
• Name, email and billing address at checkout — to take payment and keep proper records. Lawful basis: our contract, and legal obligation for accounting.
• Notes from coaching sessions — so I can do the work properly across sessions rather than starting cold each time. Lawful basis: our contract.

I never see your card details. Payments are handled entirely by Stripe. Your card number does not pass through this website and I could not retrieve it if I wanted to.

Sensitive information

Coaching conversations sometimes touch on health, wellbeing or personal circumstances. Data protection law treats this as special category data and holds it to a higher standard. I record only what is necessary to do the work, I keep it securely, and I do not share it. Where I hold anything of this kind I do so with your explicit consent, and you can withdraw that at any time.

Who else handles it

• Stripe — payment processing
• MailerLite — email delivery and list management
• TidyCal — booking and calendar
• Formspree — delivering the enquiry form to my inbox
• Hostinger — website hosting

Each acts on my instructions under contract. I do not sell your data and I do not share it with anyone for marketing.

How long I keep it

• Enquiries that do not become clients — 12 months, then deleted
• Mailing list — until you unsubscribe
• Coaching notes — 3 years after our work together ends
• Financial records — 6 years, as HMRC requires

Your rights

You can ask me to show you what I hold, correct it, delete it, restrict what I do with it, or send it to you in a portable form. You can object to processing based on legitimate interests. Where I rely on consent you can withdraw it at any time, and every email I send carries a one-click unsubscribe.

Email me and I will respond within one month.

If something goes wrong

If personal information is lost or exposed in a way that puts you at risk, I will tell you without undue delay and explain what happened and what I am doing about it. Where the law requires it, I will report the breach to the Information Commissioner’s Office within 72 hours of becoming aware of it.

If you are unhappy

You can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. I would appreciate the chance to put things right first, but that is your right and it does not depend on asking me.

Questions: info@stevenpocula.com.