Privacy Policy

Last updated: September 2026

Career Coaching with Ffion Wynn respects your privacy and is committed to handling your personal information responsibly and securely.

This Privacy Policy explains what information I may collect, why I collect it, how it is used and stored, and your rights in relation to your personal data.

1. Who is responsible for your information?

Career Coaching with Ffion Wynn is an independent career coaching business operated by Ffion Wynn.

For the purposes of UK data protection law, I am the data controller for personal information collected through this website and through my coaching services.

Career Coaching with Ffion Wynn operates independently from my NHS employment. Information provided to this business is not collected on behalf of my employer or NHS Wales.

2. Information I may collect

Depending on how you use the website and coaching service, I may collect information including:

  • your name and contact details;

  • information required to arrange and manage appointments;

  • booking and payment information;

  • your current role, profession, career history and career goals;

  • information you provide through pre-session questionnaires;

  • CVs, applications, job descriptions or other career documents you choose to share;

  • correspondence between us;

  • notes made for the purpose of providing coaching;

  • feedback you choose to provide following coaching; and

  • technical information collected when you use the website, such as information collected through necessary cookies and website analytics.

I will only seek information that is reasonably necessary to provide or administer the service.

3. Sensitive information

Career discussions can sometimes involve personal circumstances.

You may choose to tell me about matters such as your physical or mental health, disability, neurodivergence or other information that UK data protection law considers special category personal data.

You are not required to disclose this information unless you consider it relevant to the coaching you would like to receive.

Where you voluntarily provide such information for the purpose of coaching, I will only use it for that purpose and will take additional care in its handling.

Career coaching is not a clinical service and I do not require medical records or detailed medical information.

4. Information you should not provide

Please do not provide information that is unnecessary for your coaching, particularly:

  • patient-identifiable information;

  • confidential NHS or employer information;

  • confidential recruitment information;

  • commercially sensitive information belonging to your employer; or

  • unnecessary personal information about colleagues, patients or other third parties.

Where discussing a workplace situation is useful, please anonymise other individuals wherever reasonably possible.

5. How I use your information

Your personal information may be used to:

  • respond to enquiries;

  • arrange, administer and deliver coaching sessions;

  • process bookings and payments;

  • understand what you would like to achieve from coaching;

  • prepare appropriately for your session;

  • communicate with you about your booking;

  • provide relevant follow-up;

  • maintain appropriate business and financial records;

  • improve and evaluate the coaching service;

  • deal with complaints or disputes;

  • comply with legal, tax, regulatory or safeguarding obligations; and

  • maintain the security and operation of the website and booking system.

Your personal information will not be sold to third parties.

I will not provide your coaching information to your employer simply because your coaching concerns your career or workplace.

6. Legal bases for processing

Under UK data protection law, personal information must be processed on an appropriate lawful basis.

Depending on the circumstances, I may process your information because:

  • it is necessary to provide the coaching service you have requested or to take steps at your request before providing that service;

  • I have a legitimate interest in operating, administering, evaluating and protecting my business;

  • I need to comply with a legal obligation; or

  • you have given consent where consent is appropriate.

Where special category personal data is voluntarily provided during coaching, I will ensure that an appropriate additional condition under UK data protection law applies to its processing.

Where I rely on consent, you may withdraw that consent at any time. Withdrawal does not make previous lawful processing unlawful.

7. Payments

Payments are processed using third-party payment providers.

I do not need to receive or store your full debit or credit card details in order to provide coaching.

Payment providers process payment information under their own privacy and security arrangements.

Certain transaction information may be retained by me where necessary for accounting, tax, fraud prevention, dispute resolution or other legitimate business purposes.

8. Appointment and technology providers

I may use third-party services to operate the business, including services for:

  • website hosting;

  • appointment scheduling;

  • payment processing;

  • email;

  • online video meetings;

  • questionnaires and forms; and

  • secure electronic storage.

These providers may process limited personal information where necessary to provide their services.

I will take reasonable steps to use reputable providers and appropriate privacy and security settings.

Where information is processed outside the UK, I will rely on appropriate safeguards where required by data protection law.

9. Coaching notes and documents

I may keep brief notes where reasonably necessary to prepare for, deliver or follow up coaching.

I will aim to keep these proportionate and relevant rather than maintaining extensive records about clients.

Documents you send for review, such as CVs, applications or job descriptions, will only be used for the purpose for which you supplied them unless another use has been agreed with you.

10. How long information is kept

I will not keep personal information for longer than reasonably necessary.

Different information may need to be retained for different periods. For example, financial and transaction records may need to be retained for longer to comply with tax and accounting requirements.

Coaching notes, questionnaires and documents will be periodically reviewed and securely deleted when they are no longer reasonably required.

Where the law requires particular records to be retained for a specified period, those requirements will take precedence.

11. Feedback and testimonials

I may ask you to provide feedback following coaching.

Providing feedback is voluntary.

I will not publish your name, identifiable feedback, testimonial, employer or other identifying information for promotional purposes without your permission.

Where feedback is used anonymously for service evaluation, I will take reasonable steps to remove information that could identify you.

12. Marketing

I will only send marketing communications where there is an appropriate lawful basis for doing so and where required consent has been obtained.

You can withdraw consent to marketing at any time.

Transactional messages concerning an enquiry, booking, payment or coaching session are not marketing communications.

13. Cookies and website analytics

This website may use cookies and similar technologies that are necessary for the website to operate and may also use optional analytics or other technologies.

Where consent is legally required for optional cookies, you will be given an opportunity to make that choice.

Further information may be provided through the website's cookie settings or cookie notice.

14. Security

I take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet-based system can be guaranteed to be completely secure.

15. Your data protection rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

  • ask for access to personal information held about you;

  • ask for inaccurate information to be corrected;

  • ask for information to be deleted in certain circumstances;

  • ask for processing to be restricted;

  • object to certain processing;

  • request transfer of certain information in a portable format; and

  • withdraw consent where processing relies upon consent.

Not every right applies in every circumstance.

If you wish to exercise a data protection right, please contact me using the contact details provided on this website.

16. Complaints

If you have concerns about how your personal information has been handled, please contact me first so that I have an opportunity to address them.

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Information Commissioner's Office

17. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time as the business, website or services develop.

The latest version will be published on this website with the date it was last updated.

18. Contact

For questions about this Privacy Policy or the personal information I hold about you, please contact Career Coaching with Ffion Wynn using the contact details provided on this website.