Privacy policy

Effective from: 14 August 2026
Version: 1.1

Who is responsible for your information

Steve Linney is the data controller responsible for the personal information described in this policy.

Trading identity: Steve Linney trading as Steve Linney Coaching
Business status: Self-employed sole trader
Address: 10 Applesham Way, Brighton, BN41 2LP, United Kingdom
Email: coaching@stevelinney.com
Website: https://www.stevelinney.com/

This policy applies to stevelinney.com, Steve Linney Coaching and related work delivered personally by Steve Linney.

Who this policy applies to

This policy applies when you:

  • Visit stevelinney.com
  • Contact me
  • Book a free conversation
  • Enquire about or purchase coaching
  • Take part in coaching
  • Subscribe to marketing emails
  • Listen to or interact with embedded media
  • Purchase or access another service or digital resource through the website

Paid coaching is available only to adults aged 18 or over.

The website isn’t intended to collect personal information from children.

Information I may collect

The information collected depends on how you interact with the website and services.

Contact + identity information

This may include:

  • Your name
  • Email address
  • Telephone number
  • Country of residence
  • Physical location where relevant to an online session
  • Correspondence
  • Enquiry details
  • Communication preferences

Booking + payment information

This may include:

  • Your selected coaching route
  • Appointment dates and times
  • Booking status
  • Attendance, cancellation and rescheduling records
  • Payment status
  • Transaction and refund records
  • The version and date of any agreement you accepted

Payments are processed by Stripe.

I don’t receive or store your complete payment-card details.

Coaching information

This may include:

  • Coaching agreement records
  • Intake and onboarding responses
  • Goals, reflections and information you submit through CoachAccountable
  • Brief coaching notes
  • Actions or resources connected with the coaching relationship
  • Attendance and cancellation records
  • Feedback
  • Complaints
  • Relevant correspondence
  • Emergency-contact information where requested and provided

Special-category information

Where it is relevant, necessary and you have provided explicit consent, I may process information concerning:

  • Mental or physical health
  • Therapy, counselling or psychiatric support
  • Crisis or hospitalisation
  • Suicidal thoughts or self-harm
  • Medication
  • Psychedelic or plant medicine experiences
  • Spiritual or non-ordinary experiences
  • Other health or wellbeing information you choose to disclose during coaching

Some of this is special-category personal data under the UK GDPR and receives additional protection.

I aim to collect only the information reasonably necessary to assess whether coaching is appropriate and to provide it safely and responsibly.

Website + device information

The website and its service providers may collect:

  • IP address
  • Browser and device information
  • Cookie identifiers
  • Pages visited
  • Referring website
  • Approximate location derived from an IP address
  • Interaction with embedded media
  • Consent preferences
  • Security and spam-prevention information

Marketing information

If you subscribe to marketing emails, I may collect:

  • Your name
  • Email address
  • Consent date and source
  • Email engagement information
  • Subscription status
  • Your interests and communication preferences

Where available, you may choose whether you want to receive material relating to coaching, sound, psychedelic.house or another stated interest.

How information is collected

Information may be collected:

  • Directly from you through website forms
  • Through CoachAccountable
  • Through Calendly when you book a free conversation
  • Through Stripe when you make a payment
  • During coaching sessions
  • Through email
  • Through feedback or complaints
  • Through cookies and similar technology
  • Through Google Analytics, Google Tag Manager and Meta Pixel where consent is required and has been given
  • Through security services such as Google reCAPTCHA
  • Through interactions with embedded YouTube or Mixcloud content
  • From another person where you have authorised them to contact me or where sharing is otherwise lawful

Why information is used

I may use personal information to:

  • Respond to enquiries
  • Provide information about services
  • Arrange and deliver coaching
  • Assess whether coaching falls within my professional scope
  • Complete onboarding
  • Manage agreements
  • Schedule and administer sessions
  • Process payments and refunds
  • Maintain proportionate coaching records
  • Provide relevant resources and follow-up
  • Respond to safety or safeguarding concerns
  • Obtain confidential professional supervision
  • Manage complaints
  • Establish, exercise or defend legal claims
  • Meet legal, tax, insurance and accounting obligations
  • Protect the website and prevent spam or misuse
  • Understand how the website is used
  • Improve services and content
  • Send marketing where permission has been given

Personal information collected for coaching isn’t used for unrelated marketing without separate permission.

Lawful bases

Under UK data-protection law, I need a lawful basis for processing personal information.

The basis used depends on the information and the reason it is being processed.

Contract

I may process information when it is necessary to:

  • Take steps at your request before entering a coaching contract
  • Set up and administer the coaching relationship
  • Schedule and deliver coaching
  • Manage payments, pauses, cancellations and refunds
  • Provide resources or services you have requested

Legal obligation

I may process information where necessary to:

  • Maintain financial and tax records
  • Respond to legally binding requests
  • Meet other legal and regulatory responsibilities

Legitimate interests

I may process information where reasonably necessary to:

  • Respond to enquiries
  • Operate and protect the coaching practice
  • Maintain proportionate service records
  • Improve services
  • Protect the website
  • Prevent fraud, spam or misuse
  • Manage complaints
  • Establish, exercise or defend legal claims

These interests are considered against your rights, interests and reasonable expectations.

Consent

I rely on consent for activities including:

  • Optional marketing emails
  • Non-essential cookies
  • Certain analytics and advertising technologies
  • Recording or transcribing a session where separately agreed

You may withdraw consent at any time.

Special-category information

When I process special-category information for coaching, I will identify:

  • An Article 6 lawful basis, normally contract or legitimate interests depending on the purpose
  • A separate Article 9 condition, normally your explicit consent

Explicit consent will be requested separately from acceptance of the coaching agreement.

It must be specific, informed and given through a clear affirmative statement.

You may withdraw explicit consent by contacting coaching@stevelinney.com.

Withdrawal won’t affect processing that was lawful before consent was withdrawn.

If particular information is reasonably necessary to continue coaching safely and responsibly, withdrawing consent may mean that I’m unable to continue providing the service.

Where special-category information is reasonably necessary for the establishment, exercise or defence of a legal claim, the applicable legal-claims condition may be used.

Vital interests

In exceptional circumstances, information may be processed or shared where it is reasonably necessary to protect someone’s life and they are physically or legally incapable of giving consent.

Automated decision-making

I don’t use solely automated decision-making to determine whether you can receive coaching or to make decisions that have a legal or similarly significant effect on you.

Technology may support booking, payment, reminders, website security and administration, but decisions about the coaching relationship are made by me.

Who information may be shared with

I don’t sell or rent personal information.

Information may be processed by service providers that support the website and coaching practice.

CoachAccountable

CoachAccountable is used for paid-coaching onboarding, agreements, scheduling, forms, coaching records, resources and relevant client communication.

Steve Linney remains the controller of client information entered into the coaching account. CoachAccountable acts as a processor where it processes that information on my behalf.

Stripe

Stripe processes coaching payments, recurring weekly payments, transaction information and refunds.

Stripe may process certain information as a separate controller where required for fraud prevention, legal compliance and the operation of its payment services.

I don’t receive or store your complete payment-card details.

Calendly

Calendly is used only to schedule the optional free 30-minute Let’s talk it through conversation.

It isn’t used to manage or take payment for paid coaching.

Brevo

Brevo is used for email marketing and subscriber preferences where permission has been given.

Brevo isn’t used as the main system for paid-client onboarding, coaching records or coaching administration.

Sensitive coaching information isn’t intentionally added to Brevo.

Website + email services

These may include:

  • SiteGround for website and email hosting
  • WordPress + Elementor for website content and forms
  • CookieYes for cookie-consent management
  • Google reCAPTCHA for security and spam prevention

Google services

Google services may be used for:

  • Google Meet video sessions
  • Google Workspace administration
  • Restricted document storage where additional records are needed
  • Google Analytics where consent has been given
  • Google Tag Manager to manage website technologies

Meta

Meta Pixel may be used for website measurement and advertising-related analysis where consent has been given.

Sensitive coaching information isn’t intentionally sent to Meta for advertising purposes.

Embedded media

YouTube and Mixcloud may receive information about your device and interaction when embedded media is displayed or played, subject to your cookie choices where applicable.

Other situations in which information may be shared

Personal information may also be shared:

  • In anonymised or appropriately minimised form during confidential professional supervision
  • With an emergency contact where one has been provided and contact is reasonably necessary
  • With emergency, safeguarding or crisis services where reasonably necessary
  • With legal, insurance, accounting or professional advisers under duties of confidentiality
  • When required by law, court order or another lawful authority
  • With another person or organisation when you have specifically asked or authorised me to do so
  • In connection with the establishment, exercise or defence of a legal claim

Where possible, only the minimum information reasonably necessary for the purpose will be shared.

Website forms + email

Elementor forms may send submissions to coaching@stevelinney.com.

The mailbox is hosted by SiteGround.

General contact forms shouldn’t be used to send detailed health, mental health, psychedelic or other highly sensitive information.

Paid-coaching onboarding and relevant forms are completed through CoachAccountable.

If sensitive information is received by email unnecessarily, I may move any essential information to the appropriate restricted record and delete the unnecessary email copy.

Unnecessary duplicate emails containing sensitive information will normally be deleted within 30 days after any essential information has been transferred and checked.

Coaching records

CoachAccountable is the principal system used for coaching onboarding, agreements, forms, scheduling and client records.

Additional records may be stored in restricted Google Workspace or Google Drive storage where reasonably necessary.

Reasonable security measures include:

  • Unique passwords
  • Two-factor authentication where available
  • Restricted sharing and permissions
  • Device security
  • Collecting only information reasonably necessary
  • Separating marketing information from coaching records
  • Reviewing access and retention
  • Keeping third-party access proportionate to its purpose

No online system can be guaranteed to be completely secure. Reasonable technical and organisational measures are used to reduce the risk of unauthorised access, loss, misuse or disclosure.

Recordings + transcripts

Coaching sessions aren’t routinely recorded or transcribed.

An audio or video recording or automated transcript will be created only where:

  • A clear purpose has been agreed
  • You have given separate permission
  • Storage, access and deletion have been explained
  • The arrangement is documented in advance

You may decline recording or transcription without losing access to coaching.

Any recording or transcript will be retained only for the agreed purpose and period.

International processing

Some service providers may process or make personal information accessible outside the United Kingdom.

Where UK data-protection rules treat this as a restricted international transfer, an appropriate transfer mechanism will be used where required.

This may include:

  • UK adequacy regulations
  • The UK International Data Transfer Agreement
  • The UK Addendum to approved standard contractual clauses
  • Another lawful safeguard or exception

The specific mechanism may depend on the provider, its processing locations and the contractual arrangements in place.

Service providers may also engage subprocessors in other countries. Their privacy information and data-processing terms provide further details about their processing arrangements.

Because coaching is available internationally, information may be received from people outside the UK. Mandatory data-protection or consumer rights in your country may continue to apply.

How long information is retained

Information is kept only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, insurance, safeguarding and professional responsibilities.

Coaching clients

Coaching agreements, intake information, essential notes and related client records are normally retained for five years after the last coaching session.

Information may be retained for longer where reasonably required in connection with:

  • A safeguarding matter
  • A complaint
  • An insurance issue
  • A legal claim
  • A legal or regulatory requirement

CoachAccountable accounts

Your access to CoachAccountable and the information visible within it may be restricted or closed when the coaching relationship ends.

Closing your access doesn’t necessarily result in immediate deletion of records that I am required or reasonably entitled to retain.

Records will be deleted or anonymised when the applicable retention period ends, unless continued retention is lawfully required.

Enquiries that don’t become clients

Routine enquiries will normally be deleted within 12 months of the last meaningful contact.

Calendly bookings

Information connected with a free conversation will normally be retained only for as long as needed to manage the conversation, follow up appropriately and maintain a reasonable enquiry record.

If the conversation doesn’t lead to coaching, the information will normally be deleted within 12 months of the last meaningful contact.

Form emails

Unnecessary email copies of sensitive forms will normally be deleted within 30 days after any essential information has been transferred to the appropriate restricted record and checked.

Financial records

Invoices, payments, refunds and related accounting records are retained for the period required by HMRC and other applicable law.

Marketing records

Marketing information is retained until you unsubscribe, withdraw consent or the information is no longer reasonably needed.

A minimal suppression record may be retained after you unsubscribe so that your request continues to be respected.

Website information

Cookie and analytics retention varies according to the technology used and the choices recorded through CookieYes.

Cookies + similar technologies

The website uses CookieYes to request and manage cookie choices.

Essential technologies may be used where reasonably necessary for:

  • Website operation
  • Security
  • Spam prevention
  • Consent management

With consent, the website may use:

  • Google Analytics
  • Google Tag Manager
  • Meta Pixel
  • YouTube embeds
  • Mixcloud embeds

These services may set cookies or receive information about your device and interaction with the website.

You can change or withdraw non-essential cookie consent through the cookie settings available on the website.

Rejecting non-essential cookies won’t prevent access to the main website content, although some embedded media may not work until the relevant permission has been given.

More detailed information about particular cookies, providers and retention periods should be available through the website’s cookie settings.

Email marketing

You’ll receive marketing emails only where you have opted in or another lawful permission applies.

Marketing permission is separate from:

  • Accepting the coaching agreement
  • Booking a free conversation
  • Purchasing coaching
  • Providing special-category information

Declining marketing won’t affect your ability to enquire about or receive coaching.

Brevo is used to manage marketing subscriptions, interest preferences and unsubscribe requests.

Every marketing email will include an unsubscribe route.

You may also unsubscribe by contacting coaching@stevelinney.com.

Confidentiality + safeguarding

Coaching information is treated as confidential, but confidentiality isn’t absolute.

Relevant information may be shared where reasonably necessary because:

  • There is a serious or immediate risk of harm to you or another person
  • A child or adult at risk may be experiencing abuse or neglect
  • Disclosure is required by law
  • Confidential legal, insurance or professional advice is required
  • You have authorised a specific disclosure

Where circumstances reasonably allow, I’ll discuss a proposed disclosure with you first.

Only information reasonably necessary for the purpose will be shared.

Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Ask for access to your personal information
  • Ask for inaccurate or incomplete information to be corrected
  • Ask for information to be erased
  • Ask for processing to be restricted
  • Object to certain processing
  • Receive certain information in a portable format
  • Withdraw consent
  • Complain about how your information is handled

These rights aren’t absolute and may be subject to legal exceptions.

For example, information may need to be retained in connection with financial obligations, safeguarding, complaints, insurance or legal claims.

To exercise a right, email coaching@stevelinney.com.

I may need to confirm your identity before releasing, changing or deleting personal information.

I’ll normally respond within one month, although the law allows more time in certain complex circumstances. If an extension is needed, I’ll explain why.

Complaints about personal information

Please contact me first at coaching@stevelinney.com

I’ll normally acknowledge a concern within five working days and provide a fuller response within 20 working days.

You may also complain to the Information Commissioner’s Office https://ico.org.uk/make-a-complaint/

You may also have the right to complain to a relevant data-protection authority in the country where you live or work.

Links + external services

The website contains links and embedded content operated by other organisations.

Their use of personal information is governed by their own privacy policies.

This policy doesn’t control what another website or service does after you visit it or interact with its content.

Changes to this policy

This policy may be updated when the services, technology, processing arrangements or legal requirements change.

The current version and effective date will appear at the top of this page.

Material changes affecting current coaching clients will be communicated where reasonably appropriate.