Last updated: 23 July 2025
Effective date: 23 July 2025

1. Introduction

Thrive Business Coaching Ltd ("Thrive", "we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (thrive-businesscoaching.com), use our services, or interact with us.

We are the data controller responsible for your personal data. We are registered in England and Wales.

This policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Data Controller Contact Information

Company: Thrive Business Coaching Ltd

Data Protection Contact: Katie Bell

Email: hello@thrive-businesscoaching.com

Website: www.thrive-businesscoaching.com

If you have any questions about this Privacy Policy or our data practices, please contact us using the details above.

3. Information We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

Contact information: Name, email address, phone number, business name
Booking information: Details provided when scheduling a Clinic Growth Call or consultation
Programme enrolment data: Information required for our Elevate or Ascend programmes
Payment information: Processed securely through our payment providers (we do not store full card details)
Communication records: Emails, messages, and other correspondence with us
Testimonials and feedback: Reviews, video testimonials, and case studies (with your consent)

3.2 Information Collected Automatically

Technical data: IP address, browser type and version, operating system, device type
Usage data: Pages visited, time spent on pages, navigation paths, referral sources
Cookie data: Information collected through cookies and similar technologies (see our Cookie Policy)
Analytics data: Aggregated data about website usage through Google Analytics

3.3 Information from Third Parties

Social media platforms when you interact with our content
Referral partners who may share your contact details with your consent
Publicly available business information

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Purpose	Lawful Basis
Providing our coaching services and programmes	Contract performance
Processing payments	Contract performance
Responding to enquiries and Clinic Growth Calls	Legitimate interests / Pre-contractual steps
Sending marketing communications	Consent
Website analytics and improvement	Legitimate interests
Legal compliance and fraud prevention	Legal obligation / Legitimate interests
Publishing testimonials and case studies	Consent

5. How We Use Your Information

We use your personal data to:

Deliver our business coaching programmes (Elevate, Ascend)
Schedule and conduct Clinic Growth Calls and consultations
Process payments and manage your account
Send you programme materials, resources, and updates
Provide access to our online portal and community groups
Send marketing communications about our services (with your consent)
Improve our website, services, and user experience
Respond to your enquiries and provide customer support
Comply with legal and regulatory requirements
Protect against fraud and ensure security

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

Service providers: Who assist with payment processing, email delivery, website hosting, and analytics (e.g., Stripe, Google Analytics, email marketing platforms)
Professional advisors: Accountants, lawyers, and consultants bound by confidentiality obligations
Business partners: Trusted partners who deliver elements of our programmes (e.g., guest coaches, mindset specialists)
Legal authorities: When required by law or to protect our rights

All third parties are required to respect the security of your personal data and process it in accordance with applicable law. We only permit them to process your data for specified purposes.

7. International Data Transfers

Some of our service providers may be located outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

Transfers to countries with UK adequacy decisions
Standard Contractual Clauses (SCCs) approved by the ICO
Other lawful transfer mechanisms under UK GDPR

8. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy. Retention periods vary based on:

Client records: 7 years after the end of our business relationship (for legal and accounting purposes)
Marketing contacts: Until you unsubscribe or withdraw consent
Website analytics: 26 months (Google Analytics default)
Enquiries not converted to clients: 2 years

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you (Subject Access Request).

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data in certain circumstances.

Right to Restrict Processing

Request that we limit how we use your data.

Right to Data Portability

Receive your data in a structured, commonly used format to transfer to another provider.

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Withdraw consent at any time where we rely on consent as our lawful basis.

Rights Related to Automated Decision-Making

Not be subject to decisions based solely on automated processing (we do not use automated decision-making).

To exercise any of these rights, please contact us at hello@thrive-businesscoaching.com. We will respond to your request within one month.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption of data in transit (SSL/TLS)
Secure password policies and access controls
Regular security assessments
Staff training on data protection
Secure storage of physical documents

In the event of a data breach that poses a risk to your rights, we will notify you and the Information Commissioner's Office (ICO) as required by law.

11. Marketing Communications

We will only send you marketing communications where you have given us consent or where we have a legitimate interest (existing client relationship). You can opt out at any time by:

Clicking the "unsubscribe" link in any marketing email
Contacting us at hello@thrive-businesscoaching.com

Opting out of marketing will not affect service-related communications about your programme or account.

12. Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

13. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of these sites. We encourage you to read the privacy policies of any linked websites.

14. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a new effective date. We encourage you to review this policy periodically.

16. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Helpline: 0303 123 1113

Website: www.ico.org.uk

We would appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first at hello@thrive-businesscoaching.com.