Privacy Policy

Tori Sutherland Coaching & Consulting
Last updated: 16/02/2026

1. Who I Am

Tori Sutherland Coaching & Consulting is a sole trader business operated by Tori Sutherland.

For the purposes of UK data protection law, I am the Data Controller. This policy explains how I collect, use and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Personal Data I Collect

I collect only the information necessary to operate my business.

A. Clients (Coaching & Consulting Services)

Name
Business contact details (email address, organisation)
Limited contact information
Coaching session notes (stored in anonymised format)
Testimonials (only with explicit consent)

B. Enquiries & Website Users

Name
Email address
Information submitted via contact forms or email
Booking information submitted via Calendly
Google Analytics to collect anonymised information about how visitors use our website, including approximate location data such as country and region.

C. Invoicing

Invoices are issued via FreeAgent, and I require contact information and any organisation billing specifics to process. I do not collect or store clients' bank or card payment details directly.

3. How I Use Your Data

I use personal data to:

Respond to enquiries
Deliver coaching and consulting services
Maintain client records
Issue invoices and manage accounts
Request or publish testimonials (with consent)
Seek business opportunities through direct professional outreach
Improve website performance and user experience

4. Lawful Bases for Processing

Under UK GDPR, I rely on the following lawful bases:

Contract

To provide coaching or consulting services agreed with you or your organisation.

Legitimate Interests

For:

Business administration
Responding to enquiries
Maintaining professional relationships
Limited B2B outreach communications

I ensure these interests are balanced against your rights.

Consent

Where:

You submit a website enquiry
You agree to a testimonial being shared

You may withdraw consent at any time.

Legal Obligation

To comply with tax and accounting requirements.

5. Data Storage and Security

Data is stored securely using:

Password-protected devices
Secure cloud storage services
Restricted access controls

I take appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure or loss.

6. Data Retention

I retain personal data only for as long as necessary:

Client records and invoices: up to 6 years (for tax and legal compliance)
Enquiry emails: up to 24 months
Testimonials: until consent is withdrawn
Coaching notes: retained in anonymised format

Data is securely deleted when no longer required.

7. Sharing Your Information

I do not sell or rent personal data.

Your data may be processed by the following trusted third-party service providers that support my business operation:

Calendly (scheduling)
FreeAgent (invoicing and accounting)
Google cloud-based storage services

8. Your Rights

Under UK data protection law, you have the right to:

Access your personal data
Request correction
Request erasure
Object to processing
Request restriction
Request data portability
Withdraw consent where applicable

Requests can be made by emailing: contact@torisutherland.com

9. Complaints

If you are concerned about how your data is handled, you have the right to lodge a complaint with the:

Information Commissioner's Office
Website: https://ico.org.uk

I would welcome the opportunity to address your concerns first.

10. Cookies

My website may use cookies and analytics tools to improve user experience. You can manage cookies through your browser settings. Where legally required, consent will be requested via a cookie banner.

11. Changes to This Policy

This Privacy Policy may be updated periodically. The latest version will always be available on my website.