Introduction

This privacy policy explains how Hannah O'Donnell, trading as The Unbound ('I', 'me', 'my'), collects, uses, stores, and protects your personal data when you use my website, purchase my services, or interact with me in any other way.

I am committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, I am the data controller. This means I decide how and why your personal data is processed.

Data I collect
Data you provide

• Name and email address (when you book a discovery call, purchase a service, or subscribe to my mailing list)

• Phone number (if you provide it when booking)

• Payment information (processed securely by Wix Payments and Stripe; I do not store your full payment card details)

• Responses to pre-programme questionnaires

• Any information you choose to share during coaching sessions (I do not take notes during sessions and all session content is anonymised)

• Messages you send me by email or through the website contact form

Data collected Automatically

When you visit my website, certain data is collected automatically through cookies and similar technologies:

• Device information (browser type, operating system, screen size)

• IP address (which may indicate your approximate location)

• Pages visited, time spent on pages, and how you arrived at my site

• Interactions with advertisements (via Meta Pixel)

This data is collected by the following third-party services:

• Wix Analytics (built-in website analytics)

• Google Analytics (website traffic analysis)

• Meta Pixel (advertising performance and audience targeting for Facebook and Instagram ads)

How I use your data

I use your personal data for the following purposes:

• To deliver coaching services you have purchased, including scheduling sessions via Wix Bookings, conducting sessions via Google Meet, and sending pre-session questionnaires and follow-up emails

• To process payments via Wix Payments and Stripe

• To deliver digital workshop content you have purchased

• To send you marketing emails about my services, workshops, and content (only with your consent, and you can unsubscribe at any time)

• To analyse website traffic and improve my website and services

• To run and measure the effectiveness of advertising campaigns on Facebook and Instagram

• To respond to enquiries and provide customer support

• To comply with legal obligations

Lawful basis for processing

Under UK GDPR, I must have a lawful basis for processing your personal data. The bases I rely on are:

• Contract: Processing is necessary to deliver the coaching services or digital workshops you have purchased (Article 6(1)(b)).

• Consent: You have given clear consent for me to send you marketing communications. You can withdraw this consent at any time by clicking 'unsubscribe' in any email or contacting me directly (Article 6(1)(a)).

• Legitimate interests: Processing is necessary for my legitimate interests, such as improving my website, analysing website traffic, and measuring advertising performance, where these interests are not overridden by your rights (Article 6(1)(f)).

• Legal obligation: Processing is necessary to comply with a legal obligation, such as keeping financial records for tax purposes (Article 6(1)(c)).

Third-party services

I use the following third-party services that may process your personal data on my behalf:

Wix (website, bookings, email, payments, analytics)

Wix hosts my website, processes bookings through Wix Bookings, handles some payments through Wix Payments, sends marketing emails, and provides built-in analytics. Wix processes data in accordance with their privacy policy: www.wix.com/about/privacy

Stripe (payment processing)

Stripe processes payment plan instalments. Stripe handles your payment card data securely. I do not have access to your full card details. Stripe's privacy policy: stripe.com/privacy

Google (Analytics and Meet)

Google Analytics collects anonymised data about how visitors use my website. Google Meet is used to deliver coaching sessions. Google's privacy policy: policies.google.com/privacy

Meta (Facebook and Instagram advertising)

The Meta Pixel is installed on my website to measure the effectiveness of advertising campaigns and to create targeted audiences for ads on Facebook and Instagram. This means Meta may receive data about your visit to my website, including pages viewed and actions taken. Meta's privacy policy: www.facebook.com/privacy/policy

I have ensured that each third-party service provides adequate data protection safeguards. Where data is transferred outside the UK, it is protected by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Cookies

My website uses cookies and similar technologies. Cookies are small text files stored on your device when you visit a website.

6.1 Essential Cookies

These are necessary for the website to function properly, for example to keep you logged in or to process payments. You cannot opt out of essential cookies.

6.2 Analytics Cookies

These help me understand how visitors use my website. I use Wix Analytics and Google Analytics for this purpose. These cookies collect anonymised data such as pages visited and time spent on the site.

6.3 Advertising Cookies

The Meta Pixel places cookies on your device to track interactions with my website for the purpose of advertising on Facebook and Instagram. This data helps me measure ad performance and show relevant ads to people who have visited my site.

6.4 Managing Cookies

When you first visit my website, you will be shown a cookie consent banner. You can choose which categories of cookies to accept. You can also manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website.

How long I keep your data

• Coaching client data: For 6 years after the end of the coaching relationship, in line with HMRC record-keeping requirements and the Limitation Act 1980 (the standard limitation period for contract claims).

• Email subscriber data: Until you unsubscribe or request deletion.

• Website analytics data: Retained by Google Analytics and Wix Analytics in accordance with their data retention policies. Google Analytics data is set to auto-delete after 14 months by default.

• Payment records: For 6 years, as required by HMRC.

• Workshop purchase records: For 6 years, as required by HMRC.

Your rights

Under UK GDPR, you have the following rights:

• Right of access: You can request a copy of the personal data I hold about you.

• Right to rectification: You can ask me to correct inaccurate or incomplete data.

• Right to erasure: You can ask me to delete your data, subject to any legal obligations I have to retain it.

• Right to restrict processing: You can ask me to limit how I use your data.

• Right to data portability: You can request your data in a structured, commonly used format.

• Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.

• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact me at hannah@hannahjaneodonnell.com. I will respond within one month.

​

​If you are not satisfied with how I handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk

Data security

I take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. This includes using secure, reputable third-party services for payment processing, email, and session delivery.

However, no method of electronic transmission or storage is completely secure. While I strive to protect your personal data, I cannot guarantee its absolute security.

Children

My services are not directed at individuals under the age of 18. I do not knowingly collect personal data from children. If I become aware that I have collected data from someone under 18, I will delete it promptly.

Changes to this policy 

I may update this privacy policy from time to time. Any changes will be published on this page with an updated 'last updated' date. I encourage you to review this policy periodically.

Contact

If you have any questions about this privacy policy or how I handle your data, please contact me:

Hannah O'Donnell

Trading as: Hannah O'Donnell Coaching

Email: hannah@hannahjaneodonnell.com

Website: www.hannahjaneodonnell.com