Privacy policy
June 2026
We respect your privacy and take care in what information we collect, how we use it and keeping it safe. We will only collect and use your data in ways that are described in this Policy, which are consistent with our obligations and your rights under the law.
The type of information we collect
We may collect and use the following information to provide services:
- Contact information
- Professional data such as employment background, job description and related information
- Photographs or video recordings
- Call recordings
- Records of meetings or decisions
- Information relating to compliments or complaints
- Data that is necessary to deliver coaching services
We may collect and use the following information for communication or marketing purposes:
- Name and contact details.
- Communications preferences – which will always be on an ‘opt-in’ basis
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. Which lawful basis we rely on may affect your data protection rights which are set out in brief below. There are some exemptions which means you may not receive all the information you ask for. You can find out more about lawful bases, your data protection rights and the exemptions which may apply on the ICO’s website.
- Your right of access – you have the right to ask us for copies of your personal information.
- Your right to rectification – you have the right to ask us to correct or delete personal information
- Your right to erasure – you have the right to ask us to delete your personal information.
- Your right to restriction of processing – you have the right to ask us to limit how we can use your personal information.
- Your right to object to processing – you have the right to object to the processing of your personal data.
- Your right to data portability – you have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
- Your right to withdraw consent – when we use consent as our lawful basis you have the right to withdraw your consent at any time.
If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the bottom of this privacy notice.
Our lawful bases for collecting or using personal information to provide services and goods are:
- Consent
- Contract
- Legitimate interests, specifically:
o To provide you with information about our services
o To register you as a new client
o To deliver our services to you and manage payment for those services.
o To provide you, always with your agreement, with information about new opportunities and services we provide that may be of interest to you.
Our lawful bases for collecting or using personal information for marketing and communications purposes are:
- Consent
Our lawful bases for collecting or using personal information for dealing with queries, complaints or compliments are:
- Legitimate interests – to review and process any queries, complaints or claims.
Where we get personal information from
Most of the personal information we process is provided to us directly by you. In some circumstances we may receive personal information from:
- Your employer, if they have initiated our contact with you;
- Third parties who we are contracted with to deliver our services and as agreed with you
- Publicly available sources
How long we keep information for
We will keep your personal data only as long as is necessary for the purposes set out in this Policy, or as is required by applicable law. Data is held securely with restricted access and is destroyed or deleted securely.
- Where there are legal or regulatory data retention requirements, we will comply with those periods
- Other information, whether digital or hard copy will be kept for three years after the end of the contract.
- Information required for ongoing professional accreditation, will be retained for up to five years.
- Marketing and communications data will be reviewed, and consent re-obtained on an annual basis
Who we share information with
Data Processors
We use Xero to manage and process our accounts system and Microsoft to provide our IT infrastructure, cloud-based storage, emails and calendar.
Others we share personal information with
We may sometimes share information with:
- Professional or legal advisors
- Professional consultants
- Suppliers and service providers
Sharing information outside the UK
Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with UK data protection requirements, making sure appropriate safeguards are in place.
How to complain
If you have any concerns about our use of your personal information, you can make a data protection complaint to us through email l: hello@resonantthinking.com.
Our full contact details are:
Resonant Thinking Ltd
1 The Rickyard
Easenhall
CV23 0JN.
If you are unhappy with how we have responded to your complaint you can complain to the Information Commissioner Officer using the details below:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113