Privacy policy

Privacy Policy for AuDHD Joy

1. INTRODUCTION

I am Heledd Straker, trading as AuDHD Joy ("I", "the Coach"). I am committed to protecting the privacy and security of your personal data, and I am the data controller for the personal data described in this policy. This policy outlines how I collect, use, and protect your information in accordance with the UK GDPR and the Data Protection Act 2018.

You can contact me about anything in this policy at heledd@audhdjoy.com.

2. DATA I COLLECT

I only collect data necessary to provide coaching and consulting services, including:

  • Contact Details: Name, email, and phone number.

  • Professional Context: Job title and company name.

  • Session Notes: Brief notes used solely for the purpose of tracking your progress. These may include information about your health or neurodivergence, which is special category data under UK law.

3. WHY I USE YOUR DATA

The law requires me to have a lawful basis for using your data. Mine are:

  • Delivering Coaching: To carry out our agreement or, where your employer has arranged your coaching, my legitimate interest in delivering the service they have commissioned.

  • Health & Neurodivergence Information: Your explicit consent, which you can withdraw at any time by emailing me.

  • Invoices & Financial Records: To meet my legal obligations, including tax requirements.

4. CONFIDENTIALITY & THE "SAFEGUARDING" RULE

Your privacy is my priority. I will not share the contents of our coaching sessions with your employer, HR, or any third party, EXCEPT in the following circumstances:

  • Consent: You give me explicit written permission to share a specific update.

  • Safety (The Life-at-Risk Rule): If I have a reasonable belief that there is a serious risk of harm to yourself or others.

  • Legal Obligation: If I am required by law to disclose information, for example by a court order.

5. CORPORATE CONFIDENTIALITY

I often learn sensitive information about a Client’s business operations. I treat all non-public business information as Strictly Confidential and will not disclose company strategy or "trade secrets" to third parties.

6. WHO I SHARE DATA WITH

I do not sell your data. I use a small number of trusted services to run my business:

  • Google Workspace for Business: to store notes and emails securely.

  • My Accountant: for invoices and financial records only.

  • Claude (Anthropic): see section 7.

Some of these services may store data outside the UK. Where they do, the transfer is protected by safeguards recognised under UK data protection law.

7. USE OF AI TOOLS

I use Claude, an AI assistant made by Anthropic, to help me reflect on coaching notes and plan sessions. Before using it, I remove your name and any details that could identify you. I have also switched off the setting that allows my conversations to be used to train Anthropic’s AI models. You can ask me not to use AI tools with information about you at any time, and this will not affect your coaching.

8. RECORDINGS & STORAGE

  • No Secret Recordings: I do not record video or audio sessions without your explicit consent for each specific instance.

  • Secure Storage: Your data is stored on my password-protected, encrypted systems (Google Workspace for Business).

  • Data Retention: I keep session notes for 6 years following the end of our contract for tax and insurance purposes, after which they are securely deleted.

9. YOUR RIGHTS

Under UK law, you have the right to:

  • request a copy of the data I hold about you;

  • ask for corrections, or request deletion (subject to legal requirements);

  • ask me to restrict or stop using your data, or to transfer it to you in a usable format; and

  • withdraw your consent at any time, where I rely on it.

To use any of these rights, just email me. If you are unhappy with how I have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113, although I would appreciate the chance to put things right first.