1. Who we are
Leilah Mirza Coaching and Healing Ltd is the data controller. Company number: 16242713. Registered office: Ground Floor Nautica House, Waters Meeting Road, Bolton, United Kingdom, BL1 8SW. Contact: info@leilahmirzacoachingandhealing.com.
2. Information we collect
- Identity and contact details, such as your name, email address and telephone number.
- Application, enquiry, booking and payment information. The website stores your application contact details, suitability outcome and consent status; detailed written answers are passed to Calendly when you continue to booking.
- Marketing preferences and interactions with emails or resources.
- Information you choose to share during coaching or wellbeing sessions, which may include sensitive information about health, experiences or beliefs.
- Technical information produced when you use the website or embedded services.
3. How and why we use information
We use personal information to respond to enquiries, assess suitability, arrange and provide services, administer payments, deliver resources, maintain appropriate client records, meet legal obligations, protect our services and send marketing where you have consented.
4. Lawful bases
Depending on the purpose, we rely on performance of a contract or steps requested before a contract, legal obligations, legitimate interests in operating and protecting the business, and consent for optional marketing. Where special-category information is processed, we rely on an appropriate additional condition, which may include your explicit consent. You may withdraw consent at any time.
5. Service providers and sharing
We do not sell personal information. We may use trusted providers for website hosting, email delivery and marketing, scheduling, coaching communications, payment processing, file storage and professional administration. These currently include ChatGPT Sites, Brevo, Calendly, Voxer and relevant payment providers. Information may also be disclosed where required by law, safeguarding duties or legal claims.
6. International processing
Some providers may process information outside the UK. Where this occurs, we use providers and safeguards intended to protect information in accordance with applicable data-protection law.
7. Retention
We keep information only for as long as reasonably necessary for the purpose collected, including service delivery, professional record-keeping, safeguarding, tax, accounting, dispute resolution and legal requirements. Marketing information is retained until you unsubscribe or consent is otherwise withdrawn, subject to a minimal suppression record where necessary.
8. Security and confidentiality
We use appropriate organisational and technical safeguards and limit access to those who need it. No internet service can guarantee absolute security. Session confidentiality is subject to legal obligations and circumstances involving serious risk or safeguarding concerns.
9. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or transfer of your information, object to certain processing, and withdraw consent. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
10. Marketing and cookies
You can unsubscribe from marketing emails at any time using the link in an email or by contacting us. Embedded third-party forms and booking services may use necessary or functional cookies. Any non-essential analytics or advertising technologies will be used only in accordance with applicable consent requirements.
11. Updates
We may update this policy when our services, providers or legal obligations change. The current version will remain available on this website.