Privacy Policy
Last updated: 6 August 2026
1. About this privacy policy
This privacy policy explains how Lynsey Hanratty Coaching collects, uses, stores and shares personal data when you:
Visit this website.
Contact us or book a Clarity Call.
Purchase or receive coaching services.
Subscribe to emails or download a free resource.
Submit a testimonial or enquiry.
Attend a speaking engagement, workshop or other event.
Communicate with us by email, video call, social media or another channel.
Personal data means information that identifies you directly or could reasonably be used to identify you.
We process personal data in accordance with applicable data-protection law, including the EU General Data Protection Regulation, the Irish Data Protection Act 2018 and applicable Irish ePrivacy rules.
2. Who is responsible for your personal data?
The data controller is:
Lynsey Hanratty, trading as Lynsey Hanratty Coaching
Email: hello@lynseyhanratty.com
The data controller decides why and how personal data is processed.
We have not appointed a Data Protection Officer. Questions, requests or complaints relating to your personal data should be sent to the email address above.
Please tell us if your personal details change so that the information we hold remains accurate.
3. Personal data we may collect
Depending on how you interact with us, we may collect the following information.
Identity and contact information
This may include your:
Name.
Email address.
Telephone number.
Postal or billing address.
Business, organisation or job title.
Social-media username.
Enquiry and booking information
This may include:
Information submitted through a contact or booking form.
Clarity Call booking details.
Calendar availability.
Questions or information you provide before a call.
Emails and other communications between us.
Notes relating to an enquiry or prospective coaching relationship.
Customer and transaction information
This may include:
Services purchased.
Contract and coaching-container details.
Payment status.
Billing information.
Invoices, receipts and transaction history.
Payments are processed by a third-party payment provider (Stripe). While your card details may be processed on a Clarity Call, we do not generally retain your complete payment-card details.
Coaching information
When you become a coaching client, we may process:
Information you provide during coaching sessions.
Coaching goals, reflections and action points.
Session notes.
Correspondence between sessions.
Information required to manage appointments and deliver the agreed service.
Feedback about the coaching relationship.
We aim to collect only the information reasonably necessary to deliver the coaching service.
Special-category personal data
During coaching, you may voluntarily discuss information about your physical or mental health, disability, religious or philosophical beliefs, relationships, sexuality, racial or ethnic origin, political opinions or other sensitive personal circumstances.
We do not require you to provide more sensitive information than is necessary. Where we record or otherwise process special-category personal data, we will identify an appropriate lawful basis under Article 6 GDPR and an additional condition under Article 9 GDPR. Where appropriate, this may include your explicit consent.
You may withdraw consent where consent is the basis for processing. Withdrawal does not affect processing that took place lawfully before consent was withdrawn.
We do not normally collect information about criminal convictions or alleged offences.
Website and technical information
When you use the website, our service providers or we may collect:
IP address.
Browser and device type.
Operating system.
Approximate location.
Pages visited.
Visit duration.
Referring website or search term.
Website interactions.
Cookie preferences.
Security and diagnostic information.
Non-essential analytics and marketing technologies should only be activated in accordance with your cookie choices.
Marketing information
This may include:
Your newsletter subscription.
Marketing preferences.
Free-resource registrations.
Email opens and link interactions, where enabled.
Records of consent or withdrawal of consent.
Testimonials, photographs and feedback
Where you provide a testimonial, case study, photograph, video or other feedback for publication, we may process your name, image, role, organisation and comments in accordance with the permission agreed with you.
4. How we collect personal data
We may collect personal data:
Directly from you, including when you complete a form, book a call, purchase coaching, sign a coaching agreement, send an email, join a video call, subscribe to emails or communicate through social media.
Automatically, through cookies, security logs and similar technologies when you visit the website.
From service providers, including scheduling, payment, email-marketing, website-hosting and analytics providers.
From publicly available sources, such as a public professional profile, where relevant to a legitimate enquiry or business relationship.
From another person or organisation, for example when someone refers you, introduces you or books a speaking engagement. Where appropriate, we will tell you the source of the information.
5. Why we use personal data and our lawful bases
We may use your personal data for the following purposes.
Responding to enquiries and arranging Clarity Calls
We use contact and enquiry information to respond to you, assess whether our services may be suitable and arrange a call.
The lawful basis is normally taking steps at your request before entering into a contract and our legitimate interest in responding to genuine enquiries.
Providing coaching services
We use identity, contact, booking, coaching and transaction information to provide the service agreed with you.
The lawful basis is the performance of our contract with you.
Processing payments and maintaining financial records
We process transaction and billing information to accept payment, issue invoices, manage accounts and comply with tax and accounting obligations.
The lawful bases are performance of a contract and compliance with legal obligations.
Managing appointments
We use your name, contact details, time zone and booking information to arrange sessions, send confirmations and manage cancellations or rescheduling.
The lawful basis is taking steps before entering into a contract or performing our contract with you.
Communicating about services you have purchased
We may send administrative messages about bookings, payments, contracts, availability or changes to a service.
These are service communications rather than marketing messages. The lawful basis is performance of a contract or our legitimate interest in administering the service.
Sending emails and marketing
We may send marketing emails where you have actively consented or where another limited legal exception applies.
You can unsubscribe at any time by using the link in an email or contacting us.
Providing free resources
We use the details you submit to provide a requested free resource and, where you have separately agreed, send marketing communications.
Downloading a resource does not automatically subscribe you to unrelated marketing unless this is made clear and you have provided valid consent.
Operating and securing the website
We process technical and usage information to operate the website, prevent fraud, diagnose errors, protect accounts and maintain website security.
The lawful basis is our legitimate interest in operating a secure and effective website.
Analytics and advertising
Where you consent through the cookie banner, we may use analytics or marketing technologies to understand website use and assess the effectiveness of our content or advertising.
The lawful basis is consent.
Professional development and supervision
We may discuss aspects of coaching work with a suitably qualified professional supervisor, mentor or adviser for ethical support, professional development and service quality.
Where possible, identifying details will be removed or minimised. We will not disclose more information than is reasonably necessary.
Testimonials and case studies
We will normally use an identifiable testimonial, photograph or case study only with your permission.
You can ask us to stop using future versions of the material, although it may not always be possible to retrieve copies already printed, distributed or published by third parties.
Legal obligations and claims
We may use or retain information where necessary to comply with law, respond to a regulatory request, establish or defend a legal claim, prevent fraud or protect the rights and safety of relevant individuals.
The lawful basis may be legal obligation or legitimate interests.
6. Coaching sessions, notes, recordings and transcripts
We may retain concise coaching notes, including agreed goals, reflections, actions and relevant administrative information.
Coaching sessions will not be recorded or transcribed without informing you in advance and obtaining the appropriate agreement or consent.
Where recording or transcription is agreed, we will explain:
Why it is being created.
Which provider or platform is being used.
Who will receive or access it.
Where it will be stored.
How long it will be retained.
Whether an AI-enabled transcription or summarisation tool is involved.
Where recording is optional, you may decline without losing access to the underlying coaching service.
Coaching is not psychotherapy, counselling, medical care or emergency support. Information shared during coaching may still be personal or sensitive and will be treated accordingly.
7. Use of artificial intelligence
We may use approved AI-enabled tools for limited business-support tasks, such as drafting general content, organising non-sensitive information or assisting with administration.
We will not intentionally enter identifiable coaching notes, session recordings, transcripts or special-category client information into public, general-purpose AI tools without an appropriate lawful basis, suitable safeguards and clear information being provided to the individual concerned.
Where an AI-enabled tool is used to transcribe or summarise a coaching session, we will inform you before it is used.
We aim to:
Minimise or remove identifying information.
Review relevant provider settings and data-use terms.
Restrict unnecessary retention.
Use human review rather than relying blindly on an AI output.
Avoid allowing confidential client information to be used for model training where appropriate controls are available.
We do not use solely automated decision-making that produces legal or similarly significant effects concerning you.
The Irish DPC advises organisations using AI to understand what personal data is used, where it goes, whether the provider retains or reuses it and how data-protection rights can be supported.
8. Who we share personal data with
We may share personal data with trusted providers where this is necessary to operate the website or deliver services.
These providers may include:
Squarespace, for website hosting, forms and website commerce.
Calendly, for appointment scheduling.
MailerLite, for email marketing and free-resource delivery.
Stripe or another payment processor, for payment processing.
Email, cloud-storage and document-management providers.
Video-conferencing providers (Zoom, Google Meet) used for coaching or Clarity Calls.
Accountants, bookkeepers, lawyers, insurers and other professional advisers.
Professional supervisors or mentors.
Contractors providing authorised technical or administrative support.
Government authorities, regulators or law-enforcement bodies where legally required.
Service providers may process personal data only for the purposes for which they have been engaged, subject to their contractual and legal obligations.
We may also disclose information in connection with a proposed sale, transfer or restructuring of all or part of the business, subject to appropriate confidentiality and data-protection safeguards.
We do not sell or rent personal data to advertisers or data brokers.
9. International transfers
Some service providers may process or store personal data outside Ireland or the European Economic Area.
Where an international transfer is made, we will take reasonable steps to ensure that a lawful transfer mechanism is available. Depending on the provider and destination, this may include:
A European Commission adequacy decision.
The EU Standard Contractual Clauses.
Contractual, technical or organisational safeguards.
Another transfer mechanism permitted by applicable law.
The former EU–US Privacy Shield wording has deliberately been removed. Current EU transfer mechanisms include adequacy decisions and the European Commission’s Standard Contractual Clauses.
You can contact us for further information about the safeguards applying to a particular transfer.
10. How long we retain personal data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, regulatory and dispute-resolution requirements.
Our usual retention periods are:
General enquiries and unsuccessful Clarity Call enquiries: normally up to 6 months after the last meaningful contact.
Coaching notes and routine client correspondence: normally up to two years after the coaching relationship ends, unless a shorter or longer period is reasonably required.
Session recordings or transcripts: normally up to 90 days after the relevant session, unless another period has been agreed or retention is legally necessary.
Contracts, invoices, payments and tax records: normally six years, or longer where an inquiry, appeal, investigation or legal dispute requires it.
Marketing information: until you unsubscribe, withdraw consent or the information is no longer required. We may retain a limited suppression record to ensure that we respect your opt-out.
Testimonials and permissions: while the testimonial is in use and for a reasonable period afterwards to document the permission provided.
Website analytics and cookie data: according to the retention periods described in the Cookie Policy and the settings of the relevant provider.
Irish Revenue generally requires business tax records to be retained for six years.
We may retain information for longer where necessary to establish, exercise or defend legal claims or meet another legal requirement.
Where appropriate, information may be securely deleted or anonymised so that it can no longer identify an individual.
11. Data security
We use reasonable technical and organisational measures intended to protect personal data from accidental loss, misuse, unauthorised access, alteration or disclosure.
Measures may include:
Password protection and multi-factor authentication.
Restricted access to accounts and files.
Secure cloud and software providers.
Device and account-security controls.
Confidentiality obligations.
Backups and software updates.
Procedures for responding to suspected personal-data breaches.
No online system can be guaranteed to be completely secure. If a personal-data breach occurs, we will assess it and notify affected individuals and the relevant regulator where legally required.
12. Your data-protection rights
Depending on the circumstances and the lawful basis used, you may have the right to:
Ask for access to your personal data.
Ask for inaccurate information to be corrected.
Ask for personal data to be deleted.
Ask for processing to be restricted.
Object to processing based on legitimate interests.
Object to direct marketing at any time.
Request data portability.
Withdraw consent where processing is based on consent.
Ask not to be subject to certain solely automated decisions.
Make a complaint to a supervisory authority.
These rights are not absolute and may be subject to legal conditions or exemptions.
To exercise a right, email hello@lynseyhanratty.com.
We may need to ask for information to confirm your identity before responding. This is to prevent personal data from being disclosed to someone who is not entitled to receive it.
We normally respond to valid requests within one month. Where a request is particularly complex or several requests have been made, the response period may be extended where legally permitted, and we will inform you.
There is normally no fee for exercising your rights. A reasonable fee may be charged, or a request may be refused, where the request is manifestly unfounded or excessive and the law permits this.
13. Complaints
Please contact us first at hello@lynseyhanratty.com if you have a concern about how your information has been handled. We will investigate the issue and respond as soon as reasonably possible.
You also have the right to complain to the:
Data Protection Commission, Ireland
Where UK data-protection law applies to our provision of services to an individual in the United Kingdom, you may also have the right to complain to the:
Information Commissioner’s Office, United Kingdom
UK GDPR can apply to an organisation outside the UK where it offers goods or services to individuals in the UK.
Where the UK Data (Use and Access) Act 2025 complaint requirements apply, we will provide a means of making a complaint, acknowledge it within 30 days and take appropriate steps to investigate and respond without undue delay.
14. Cookies and tracking technologies
The website uses cookies and similar technologies.
Some cookies are strictly necessary for the website to operate. Other cookies, including analytics, advertising or embedded-service cookies, should only be used where you have provided the required consent.
You can manage your choices through the website’s cookie banner or cookie settings. You can also delete cookies through your browser.
Further information is available in our separate Cookie Policy.
The Cookie Policy and actual cookie-banner settings should be reviewed separately, as the present policy contains outdated tools and says some analytics cookies are enabled by default.
15. Third-party websites & embedded services
The website may contain links to or embedded content from third-party services.
Examples may include scheduling tools, payment pages, video platforms, social networks or external resources.
When you follow a third-party link or interact with embedded content, that third party may process personal data under its own privacy policy. We do not control third-party privacy practices and encourage you to review the relevant notice.
16. Children
Our coaching services and website purchasing functions are intended for adults.
We do not knowingly collect personal data from children through the website. If you believe a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete it.
17. Information required to provide a service
Certain personal data is necessary to:
Respond to your enquiry.
Book an appointment.
Enter into a coaching agreement.
Process payment.
Deliver the service.
Meet legal or accounting obligations.
Where required information is not provided, we may be unable to arrange a call, accept a purchase or provide coaching.
18. Changes to this privacy policy
We may update this privacy policy when our services, technology, providers or legal obligations change.
The latest version will be published on this page with an updated revision date.
Where a change materially affects how we use existing personal data, we will provide further information where required.