Privacy Notice & GDPR Compliance

This Privacy Notice explains how Focus Mindset (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you use our website or engage with our performance therapy, coaching, or related services. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
________________________________________
1. Who We Are
Business Name: Focus Mindset 
Owner: A. Skehan
Email: admin@focusmindset.co.uk
Phone: 073356033013
Website: focusmindset.co.uk
ICO Registration Number: C1687435.
We act as the Data Controller for the information we collect.
________________________________________
2. What Personal Data We Collect
We may collect the following types of personal data:
a) Information You Provide Directly
•    Name
•    Email address
•    Phone number
•    Booking information
•    Payment details (processed securely via third-party providers)
•    Any information you share when contacting us or completing forms
•    Therapy or coaching session notes (only where relevant to service provision)
b) Automatically Collected Data
When you visit our website, we may automatically collect:
•    IP address
•    Browser type and version
•    Device information
•    Cookies and usage data (see Cookies section)
c) Special Category Data
If relevant to therapy services, we may collect special category data such as:
•    Mental wellbeing information
•    Lifestyle factors
•    Stress or performance-related concerns
This data is only processed with your explicit consent and kept strictly confidential.
________________________________________
3. How We Use Your Data
We use your personal data to:
•    Provide therapy, coaching, and performance improvement services
•    Respond to enquiries and manage bookings
•    Send session reminders and administrative messages
•    Improve website performance and user experience
•    Maintain secure client records
•    Meet legal and regulatory obligations
•    Only send marketing communications if you’ve opted in
We will never sell your data.
________________________________________
4. Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
•    Contract – to provide the services you request
•    Consent – for special category data and marketing communications
•    Legitimate interests – to improve services and website functionality
•    Legal obligation – for record-keeping required by law
________________________________________
5. Sharing Your Data
We may share your data with:
•    Secure third-party booking or payment platforms
•    Professional supervision (anonymised only)
•    Legal authorities if required by law
We do not share identifiable information unless you have given explicit consent or have a vital interest (e.g., safeguarding concerns).
________________________________________
6. Data Storage & Retention
We store your data securely and only for as long as necessary:
•    Therapy records: typically kept for 7 years (industry standard)
•    General enquiries: retained for 12 months
•    Marketing data: kept until you unsubscribe
All data is stored securely on GDPR-compliant systems.
________________________________________
7. Your Rights Under UK GDPR
You have the right to:
•    Access your personal data
•    Correct inaccurate data
•    Request erasure (“right to be forgotten”)
•    Restrict or object to processing
•    Move your data (data portability)
•    Withdraw consent at any time
•    Lodge a complaint with the ICO (Information Commissioner’s Office)
ICO Website: www.ico.org.uk
ICO Helpline: 0303 123 1113
________________________________________
8. Cookies
Our website uses cookies to improve your browsing experience.
We use:
•    Essential cookies – required for the website to function
•    Analytics cookies – help us understand website traffic
•    Preference cookies – remember your settings
You can control or disable cookies through your browser settings.
________________________________________
9. Security
We take data security seriously and use:
•    Encrypted storage
•    Secure communication channels
•    Access controls
•    Regular security checks
However, no online transmission is 100% secure, and we cannot guarantee absolute security.
________________________________________
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those websites.
________________________________________
11. Changes to This Privacy Notice
We may update this Notice from time to time. The latest version will always be available on this page.
________________________________________
12. Contact Us
If you have any questions about this Privacy Notice or would like to exercise your GDPR rights, please contact:
Email: admin@focusmindset.co.uk
Phone:  073356033013