GDPR Statement & Privacy Policy

Last updated: August 2026

At Compass Vision Career Coaching ("we", "our", "us"), operated by Phil Camm, we are committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, and safeguard your personal data when you visit our website (www.compassvision.co.uk), make an enquiry, or use our coaching services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Contact Details

Phil Camm trading as Compass Vision Career Coaching is the Data Controller responsible for your personal data.

• Full Business Name: Compass Vision Career Coaching
• Lead Contact: Phil Camm
• Email Address: phil@compassvision.co.uk
• Website: www.compassvision.co.uk

2. The Personal Data We Collect

We may collect, use, store, and transfer different kinds of personal data depending on how you interact with us:

• Identity Data: First name, last name, title.
• Contact Data: Email address, telephone number, billing address.
• Coaching & Career Data: Employment history, CV details, career goals, session notes, and self-assessment materials provided during coaching packages.
• Financial & Transaction Data: Payment details and records of services purchased.
• Technical & Usage Data: IP address, browser type, operating system, and information about how you use our website (collected via essential site analytics/cookies).

3. How We Collect Your Data

We collect personal data through:

• Direct Interactions: When you fill out our contact form, book a free discovery chat, correspond with us by email or phone, or engage in 1-to-1 coaching sessions.
• Automated Technologies: As you navigate our website, essential cookies or analytics tools (such as IONOS SiteAnalytics) may automatically collect technical data regarding your browsing actions.

4. How and Why We Use Your Personal Data (Lawful Basis)

Under the UK GDPR, we must have a lawful basis for processing your personal data. We collect and use your data for the following specific purposes:

Responding to Enquiries & Booking Discovery Chats

Types of Data Used: Identity Data, Contact Data.

Lawful Basis: Legitimate Interests — Necessary to answer your initial questions and arrange an introductory call before you become a client.

Delivering Coaching Services & Managing Client Relationships

Types of Data Used: Identity Data, Contact Data, Career & Coaching Data.

Lawful Basis: Performance of a Contract — Necessary to deliver your selected coaching package, schedule sessions, and communicate progress.

Processing Payments & Financial Accounting

Types of Data Used: Identity Data, Contact Data, Financial & Transaction Data.

Lawful Basis: Performance of a Contract and Legal Obligation — Necessary to process invoices and comply with UK statutory tax and accounting requirements.

Sending Updates & Marketing Communications

Types of Data Used: Identity Data, Contact Data.

Lawful Basis: Consent — We will only send you optional marketing communications if you have explicitly opted in. You may withdraw consent at any time by emailing us.

Maintaining Website Functionality & Security

Types of Data Used: Technical Data, Usage Data.

Lawful Basis: Legitimate Interests — Necessary to ensure our website operates smoothly, remains secure, and provides an efficient user experience.

5. Data Sharing & Third-Party Service Providers

We respect your privacy and will never sell or rent your personal data to third parties.

To deliver our services efficiently, we may share some relevant data with trusted third-party service providers who act as data processors on our behalf:

• Website Hosting & Email Providers: (e.g., IONOS UK/EU hosting).
• Video Conferencing Platforms: (e.g., Zoom, Google Meet, Microsoft Teams) for remote coaching sessions.
• Payment Processors & Banking: To facilitate secure client transactions.
• Scheduling Tools: (e.g., TidyCal or other website booking systems).

All third-party processors are required to respect the security of your personal data and treat it in accordance with UK law.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or tax reporting requirements.

• Enquiry Data (Non-Clients): Deleted or anonymised after 12 months if no coaching relationship is formed.
• Client Records & Coaching Notes: Retained for up to 6 years following the end of our coaching agreement for tax accounting and legal defence purposes, after which it is securely destroyed.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed without authorisation, altered, or disclosed. Access to your coaching records (including coaching notes, career history, etc) and personal information is strictly restricted to Phil Camm and stored securely.

8. Your Legal Rights Under UK GDPR

Under UK data protection law, you have specific rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request that we delete your personal data where there is no good reason for us continuing to process it.
• Right to Restrict Processing: Request a temporary pause in processing your data.
• Right to Data Portability: Request the transfer of your data to you or a third party in a structured, machine-readable format.
• Right to Object: Object to our processing of your personal data where we rely on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at phil@compassvision.co.uk. We will respond to all legitimate requests within one calendar month.

9. How to Complain

If you have any concerns about our use of your personal data, you can contact us directly so we can resolve the issue.

You also have the right to raise a complaint at any time with the UK’s data protection regulator:

• Information Commissioner’s Office (ICO)
• Website: www.ico.org.uk
• Helpline: 0303 123 1113