Privacy Policy
Who we are
This website and the services described on it are operated by Aude Firmin ("we", "us", "our") of 1 Asterid Heights, 7 Liberty Bridge Road, London E20 1AR. We are the data controller for the personal information described in this policy.
If you have any questions about how we handle your information, email info@audefirmin.com.
What information we collect
When you contact us or book a complimentary consultation: your name, email address, phone number, and anything you tell us about yourself, your business, or what brings you to the work.
When you book a session, initiation, or journey: the above, plus your address, business name where relevant, and payment details (processed by our payment providers, not stored by us).
During sessions: notes on what we discuss. Because of the nature of the work, this can include information about your health, wellbeing, relationships, beliefs, and personal circumstances. Some of this is special category data under UK data protection law, and we only process it with your explicit consent, which you give when you book and which you can withdraw at any time.
When you download The Signal Practice or join our mailing list: your name and email address.
When you visit the website: technical information such as your IP address, browser type, pages visited, and how you arrived at the site, collected through cookies and similar technologies. See our Cookie Policy for details.
When you give a testimonial: your name, your words, and, with your permission, your role or business.
How we use your information and our legal basis
Purpose
Legal basis
Delivering the sessions, journeys, and events you have booked
Performance of a contract
Keeping session notes so the work has continuity
Explicit consent (for special category data) and legitimate interests
Taking payment and keeping financial records
Contract and legal obligation
Responding to enquiries and consultation requests
Legitimate interests
Sending our newsletter and The Signal Practice
Consent
Publishing testimonials
Consent
Running and improving the website
Legitimate interests and, for non essential cookies, consent
Complying with legal, tax, and regulatory obligations
Legal obligation
We do not sell your information and we do not use it for automated decision making.
Who we share it with
We share your information only where needed to run the practice, with providers who process it on our instructions under contract:
-
Payment processing: Stripe and PayPal
-
Booking and website hosting: Wix
-
Email newsletter and lead magnet delivery: [email platform]
-
Video sessions: Zoom
-
Scheduling and communication tools, and our accountant for financial records
We may also disclose information where required by law, or where we believe there is a serious risk of harm to you or another person.
Some of these providers store data outside the UK. Where they do, transfers are protected by UK adequacy regulations or the International Data Transfer Agreement.
Confidentiality of sessions
Everything you share in a session is confidential. Session notes are kept securely and are never shared with third parties except in the circumstances described above. We may refer to our work anonymously for professional development or teaching, without any detail that could identify you.
How long we keep it
-
Session notes and client records: 6 years after your last session, then securely deleted
-
Financial records: 6 years, as required by HMRC
-
Enquiries that do not lead to a booking: 12 months
-
Newsletter data: until you unsubscribe
-
Testimonials: until you ask us to remove them
-
Website analytics: as set out in our Cookie Policy
Your rights
Under UK GDPR you have the right to:
-
access the personal information we hold about you
-
ask us to correct anything inaccurate
-
ask us to delete your information
-
object to or restrict how we process it
-
withdraw consent at any time where consent is our legal basis
-
receive a copy of your data in a portable format
-
complain to the Information Commissioner's Office at ico.org.uk
To exercise any of these rights, email info@audefirmin.com. We will respond within one month.
Security
We take reasonable technical and organisational measures to protect your information, including password protected devices, encrypted storage, and limited access to session notes.
Children
Our services are for adults only. We do not knowingly collect information from anyone under 18.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.
