LEGAL

Privacy Policy

Last updated: 27 November 2025

We take your privacy seriously. This policy explains how FORGE Coaching collects, uses, and protects your personal information.

1. Introduction

At FORGE Coaching, we are committed to protecting your personal information and your right to privacy. We understand that when you share your information with us, you trust us to handle it responsibly.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data. We comply with UK GDPR (General Data Protection Regulation) and follow global privacy best practices.

2. Who We Are

Business Name: FORGE Coaching

Founded by: James Hamell

Location: Gloucestershire, United Kingdom

Contact Email: [email protected]

3. What Information We Collect

A. Information You Provide Directly

When you contact us, sign up for services, or interact with our website, you may provide:

  • Name — so we know who you are
  • Email address — to respond to enquiries and send updates
  • Phone number (optional) — for coaching or workshop bookings
  • Messages and enquiries — submitted through contact forms
  • Coaching applications — details about your needs and goals
  • Workshop booking details — to reserve your spot
  • Newsletter signup data — if you opt in to receive updates

B. Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address — to understand general location and prevent abuse
  • Device type and browser — to ensure the website works properly
  • General location (country/region) — for analytics
  • Website usage data — pages visited, time spent, interactions

This data helps us improve the website experience and understand how people use our services.

C. Payment Information

If you purchase books, digital products, or coaching services:

Important: FORGE Coaching does NOT store your card details.

All payments are securely processed by trusted third-party payment processors such as Stripe or PayPal. These providers handle your payment information according to PCI-DSS standards and their own privacy policies.

D. Course Platform Data

If you enrol in the Self-Guided Course or other online learning platforms, we may collect:

  • Login and account data — to provide access to course materials
  • Progress and completion data — to track your learning journey
  • Usage data — which modules you've accessed and when

4. How We Use Your Information

We only use your personal information for legitimate purposes that help us deliver our services and improve your experience. Specifically, we use your data to:

Respond to enquiries

Answer your questions and provide information

Provide coaching services

Deliver the services you've signed up for

Manage workshop bookings

Send details, confirmations, and updates

Send newsletters

Only if you've opted in to receive them

Improve our website

Analyse usage and personalise experience

Legal compliance

Meet legal and regulatory requirements

5. Legal Bases for Processing (UK GDPR)

Under UK GDPR, we must have a legal basis for processing your personal data. We rely on the following:

Consent

When you opt in to newsletters, marketing, or optional services. You can withdraw consent at any time.

Contract

When you book coaching, workshops, or purchase services — we need your information to fulfil the contract.

Legitimate Interest

Running the website, preventing spam, improving services, and understanding how people use our site — as long as it doesn't override your rights.

Legal Obligation

Record-keeping, tax requirements, and other legal obligations we must meet as a business.

6. How We Store & Protect Your Data

We take data security seriously and use industry-standard measures to protect your information:

  • Secure storage: All data is stored on secure, encrypted platforms
  • Limited access: Only essential staff and trusted contractors can access your data
  • Strong passwords: We use robust authentication and access controls
  • No unnecessary retention: We only keep data as long as needed

While we do our best to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will always notify you of any breach as required by law.

7. Data Retention

We only keep your personal data for as long as necessary. Retention periods vary depending on the type of information:

Enquiry data

Contact form submissions

Up to 12 months

Coaching records

Session notes, progress data

Up to 7 years

Newsletter data

Email subscription lists

Until unsubscribe

Payment records

Invoices, transaction history

Up to 7 years

Analytics data

Website usage statistics

Per provider policy

If you request deletion of your data, we will delete it promptly unless we have a legal obligation to retain it (e.g., for tax or business records).

8. Sharing Your Information

We do NOT sell your personal data.

Your privacy is not for sale. We will never sell, rent, or trade your information to third parties for marketing purposes.

However, we may share your data with trusted service providers who help us run our business. These include:

  • Email marketing platforms (e.g., Mailchimp, ConvertKit) — to send newsletters
  • Payment processors (e.g., Stripe, PayPal) — to handle transactions
  • Web hosting providers — to keep the website online
  • Analytics tools (e.g., Google Analytics) — to understand website usage
  • Course hosting platforms — if you enrol in online courses
  • CRM or booking tools — to manage appointments and client relationships

All third-party providers are carefully selected and must comply with GDPR or equivalent data protection standards. They can only use your data to provide the specific services we've contracted them for.

9. Your Rights (UK & EU GDPR)

Under UK GDPR, you have important rights regarding your personal data. You can exercise these rights at any time by contacting us:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Correct any inaccurate or incomplete information

Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data (subject to legal retention requirements)

Right to Restrict Processing

Limit how we use your data in certain circumstances

Right to Object

Object to processing based on legitimate interests or direct marketing

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Withdraw Consent

Withdraw consent at any time (for processing based on consent)

Right to Complain

Lodge a complaint with the ICO (UK Information Commissioner's Office) if you believe your rights have been violated

How to Exercise Your Rights

To exercise any of these rights, please email us at [email protected]. We will respond to your request within one month.

10. Cookies & Tracking

Like most websites, we use cookies and similar technologies to improve your experience and understand how our website is used.

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and provide useful functionality.

What cookies do we use?

  • Essential cookies: Required for the website to function properly
  • Analytics cookies: Help us understand how visitors use the site (e.g., Google Analytics)
  • Preference cookies: Remember your settings and choices

Managing cookies

You can control and delete cookies through your browser settings. However, disabling certain cookies may affect website functionality.

For more detailed information, please see our Cookie Policy.

11. Third-Party Services

We use trusted third-party services to help run our business. Each of these providers has its own privacy policy:

Email Marketing

Mailchimp, ConvertKit, or similar

Payment Processing

Stripe, PayPal

Web Hosting

Landingsite.ai or similar

Analytics

Google Analytics

Course Platforms

Teachable, Kajabi, or similar

CRM & Booking

Various scheduling tools

We recommend reviewing the privacy policies of these services if you have concerns about how they handle your data.

12. International Transfers

Some of the third-party services we use may store or process data outside the UK or EU. When this happens, we ensure that:

  • Data is transferred using standard contractual clauses or other legally approved mechanisms
  • Service providers maintain adequate data protection standards
  • Your data remains protected in accordance with UK GDPR requirements

13. Children's Privacy

Our services are intended for adults (18+). We do not knowingly collect personal information from individuals under 18 without parental or guardian consent.

If you believe we have inadvertently collected information from someone under 18, please contact us immediately at [email protected] and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make significant changes, we will:

  • Update the "Last updated" date at the top of this page
  • Notify you by email if you're on our mailing list (for major changes)
  • Post a notice on the website

We encourage you to review this policy periodically to stay informed about how we protect your information.

15. Contact Information

If you have any questions about this Privacy Policy, how we handle your data, or would like to exercise your rights, please get in touch:

FORGE Coaching

Founded by James Hamell

Location

Gloucestershire, United Kingdom

We will respond to all requests within one month as required by UK GDPR.

Complaint to the ICO

If you're not satisfied with how we've handled your data or your request, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). Visit ico.org.uk for more information.