Privacy Policy

This Privacy Policy outlines how Andrina Hayden, trading as Andrina Hayden Coaching, a sole trader based in the United Kingdom, collects, uses, and protects personal data through this website and related services. I am committed to respecting your privacy and protecting your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I Am

Andrina Hayden
Trading as: Andrina Hayden Coaching
Email: andrina@andrinahayden.com

I am the data controller for the personal information collected through this website.

2. What Personal Data I Collect

I may collect and process the following types of personal data:

Contact details:

• Name
• Email address
• Phone number (if provided)

Scheduling data:

• Appointment preferences, dates/times (via Cal.com)

Mailing list data:

• Email address (and name, if provided) when you subscribe to my newsletter or mailing list.

Website usage data:

• IP address, browser type, pages visited (via cookies or basic technical logs)

Payment data (if applicable):

• Processed securely via third-party providers (e.g., Stripe or PayPal). I do not store full payment details.

3. How I Collect Your Data

Data is collected when you:

• Fill out a contact or enquiry form
• Book a session using Cal.com
• Subscribe to my mailing list
• Browse the website (limited cookies or technical data)

4. How and Why I Use Your Data

I only process your personal data where I have a lawful basis under UK GDPR:

To respond to enquiries or deliver coaching services

• Using your contact details to communicate with you
• Lawful basis: Contract

To manage bookings and client communications

• Confirming sessions and sending reminders
• Lawful basis: Contract

To send marketing emails (newsletter / updates)

• Sending emails you have explicitly signed up for (e.g., insights, offers, updates)
• You can unsubscribe at any time via the link in any email
• Lawful basis: Consent

To maintain business and financial records

• Keeping invoices and transaction records
• Lawful basis: Legal obligation

To improve website performance

• Understanding basic usage patterns
• Lawful basis: Legitimate interests

5. Email Marketing

If you choose to subscribe to my mailing list:

• Your data is managed using Brevo
• I will only send you marketing emails if you have given clear consent
• You can unsubscribe at any time by clicking the link in any email or contacting me directly

I do not send unsolicited marketing emails.

6. Who I Share Your Data With

Your data may be processed by trusted third-party providers, including:

• Webflow – website hosting and form submissions
• Cal.com – appointment scheduling
• Brevo – email marketing and mailing list management
• Supabase – for secure database storage and cookie consent management
• Microsoft 365 – email communication and storage (Outlook, OneDrive)
• Zoom – virtual coaching sessions

These providers only process your data on my behalf and under appropriate data protection agreements. I do not sell your personal data.

7. International Data Transfers

Some of the third-party providers I use (such as Brevo and Supabase) may process data outside the UK.

Where this occurs, I ensure appropriate safeguards are in place, such as:

• UK adequacy regulations, or
• Standard Contractual Clauses (SCCs)

8. Cookies and Tracking Technologies

This website may use essential cookies required for functionality (e.g., form submissions and security).

I do not currently use advertising or advanced tracking cookies.

If this changes, I will update this policy and implement a cookie consent mechanism where required.

9. Data Storage and Security

I use secure, reputable cloud-based systems and take reasonable steps to protect your data from unauthorised access, misuse, or loss.

10. How Long I Keep Your Data

I retain your data only as long as necessary:

• Enquiries: up to 12 months
• Active clients: up to 6 years (for legal/tax purposes)
• Mailing list subscribers: until you unsubscribe or request deletion

11. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent (for marketing) at any time
• Object to or restrict processing
• Lodge a complaint with the Information Commissioner’s Office

To exercise your rights, contact: andrina@andrinahayden.com

12. Changes to This Policy

I may update this Privacy Policy to reflect legal or operational changes. The latest version will always be available on this page.

Last updated: 26.05.2026