Privacy Statement
North Direction | Last Updated: Oct 2025
Introduction
North Direction is committed to protecting your privacy and handling your personal data responsibly. This policy outlines how we collect, use, store, and protect your information when you engage with our services, including coaching, consultancy, training, and research.
If you have any questions or wish to access, amend, or delete your personal data, please contact: hello@northdirection.co.uk
What Information We Collect
We may collect and process the following types of personal data:
- Contact Information: Name, email address, phone number, postal address
- Next of Kin Details: For coaching clients, in case of emergency
- Session Notes & Progress Reports: Notes taken during coaching sessions and formal reports
- Contracts & Agreements: Signed coaching agreements, payment records
- Recordings & Transcriptions: Audio/video recordings (with consent), including AI-generated transcripts
- Usage Data: Browser type, IP address, operating system, site navigation (via Google Analytics)
- Correspondence Data: Emails, contact form submissions, and other communications
How We Use Your Information
Your data is used to:
- Deliver and manage coaching, training, and consultancy services
- Track progress and outcomes (with anonymised data and consent)
- Communicate session details and updates
- Maintain legal and contractual records
- Improve our website and services
- Respond to enquiries and provide support
We do not sell or share your personal data for marketing purposes without your consent.
Legal Basis for Processing
We process your data under the following lawful bases:
- Contractual necessity: To deliver services you’ve requested
- Consent: For recordings, marketing communications, and sensitive data
- Legal obligation: For tax, insurance, and regulatory compliance
- Legitimate interest: To improve services and maintain records
Data Retention & Disposal
| Data Category | Retention Period | Disposal Method |
| Contact Info – Clients | 7 years after last interaction | Secure deletion |
| Contact Info – Prospective Clients | 1 year | Secure deletion |
| Next of Kin Info | Duration of coaching | Secure deletion |
| Coaching Notes | 3 years post-engagement | Secure deletion & shredding |
| Progress Reports | 3 years post-engagement | Secure deletion |
| Contracts & Agreements | 7 years post-engagement | Secure deletion & shredding |
| Recordings & Transcripts | Up to 2 years (with consent) | Secure deletion upon request or expiry |
Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction or deletion
- Withdraw consent at any time
- Object to or restrict processing
- Request data portability
- Lodge a complaint with the ICO (Information Commissioner’s Office)
To exercise these rights, contact hello@northdirection.co.uk
Third-Party Services
We may use secure third-party platforms (e.g., Google Meet for coaching sessions, Google Analytics for website usage) that comply with GDPR, HIPAA, and ISO 27001 standards. Your data will only be shared with these services when necessary and with appropriate safeguards.
Employer-Funded Coaching
If your employer is funding your coaching, we will only confirm attendance dates unless otherwise agreed in writing. No session content or personal data will be shared without your explicit consent.
Security Measures
We implement appropriate technical and organisational measures to protect your data, including encryption, secure storage, and access controls.
Updates to This Policy
We may update this policy periodically. Significant changes will be communicated via email or posted on our website. Please check this page regularly for updates.