Privacy Policy

Last updated: 25 January 2026

This Privacy Policy explains how I,  Joe Roe, collect and uses personal data when you visit joeroe.co.uk, contact me, or receive my mental health coaching services. I am the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who I am and how to contact me

You may contact me with any privacy questions. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

What personal data I process

  • Identity and contact data such as your name, email, phone and address.
  • Booking and service data including enquiry details, session notes, goals and progress.
  • Special category data, such as information about your mental health or wellbeing, which requires explicit consent.
  • Payment data, such as transaction identifiers from our payment provider.
  • Technical and usage data such as IP address, device information and pages visited.
  • Cookies and similar technologies as described in section 10.

Why I process your data and lawful bases

I process data for the following reasons:

  • Providing and managing coaching services, based on contract and explicit consent for health data.
  • Bookings, billing and administration, based on contract and legal obligations.
  • Service security, based on legitimate interests.
  • Service messages and essential communications, based on contract or legitimate interests.
  • Optional marketing, based on consent.
  • Safeguarding or vital interests, in rare cases where there is a risk of serious harm.
  • Special category health data is processed only with your explicit consent unless another lawful exception applies.

Children

I provide services for children. Below 13, parental consent is required.

Who I share data with

I only share data when necessary and with appropriate safeguards. This includes service providers such as website hosting, email, scheduling, video conferencing, CRM, payment providers and analytics tools. I may share data with professional advisers, and with authorities when required by law or to protect vital interests.

International data transfers

Some providers may process data outside the UK. I use UK-approved international transfer mechanisms such as adequacy regulations, the International Data Transfer Agreement, or similar safeguards. For transfers to eligible US organisations, I may rely on the UK-US Data Bridge where the recipient is certified.

How long I keep data

  • I keep data only as long as necessary and then securely delete or anonymise it.
  • Enquiry data is kept for 12 months.
  • Coaching records are kept for [e.g., 6 years] after the last session.
  • Payment records are kept for 6 years.
  • Cookie lifetimes are described in section 10.

Security

We use appropriate technical and organisational security measures such as secure hosting, limited access controls, encryption in transit, confidentiality obligations and data minimisation.

Your data protection rights

Your rights under UK GDPR include:

  • Right to be informed.
  • Right of access to your data.
  • Right to rectification.
  • Right to erasure.
  • Right to restrict processing.
  • Right to data portability.
  • Right to object to processing.
  • Rights relating to automated decision making and profiling.

To exercise your rights, email info@joeroe.co.uk. I normally respond within one month, with possible extensions for complex or multiple requests.

Cookies and similar technologies

I use cookies to operate the site, keep it secure and, if you consent, to measure usage and improve content. Under the Privacy and Electronic Communications Regulations (PECR), we obtain consent for all cookies that are not strictly necessary.

Strictly necessary cookies do not require consent.

  • Analytics, performance, functionality and third party tracking cookies require consent.
  • You can manage or change your cookie preferences using our Cookie Settings tool or through your browser.

Accountability, records and DPIAs

I maintain internal records of data processing and conduct Data Protection Impact Assessments when necessary.

How to complain

  • Contact me at info@joeroe.co.uk.
  • You may also complain to the Information Commissioner’s Office, ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone 0303 123 1113.

Changes to this notice

We may update this notice occasionally. We will post the latest version on this page and inform you if significant changes are made.

Scroll to Top