Privacy policy.
Last updated: 3 October 2026
I respect your privacy. This policy explains how David Murphy Coaching collects, uses and protects personal information when you visit my website, contact me or use my coaching services. It covers adult clients, young people and parents or carers.
1. Who I Am
David Murphy, trading as David Murphy Coaching, is the data controller responsible for your personal information.
Email: hello@davidpetermurphy.com
2. What Information I Collect
Depending on how you use my services, I may collect:
● Your name, email address and phone number.
● Information provided in enquiries, booking forms and coaching questionnaires.
● Your goals, preferences and any adjustments that would help you access coaching.
● Coaching records and session notes.
● Booking, invoice and payment records.
● Information about how you use my website, where applicable.
For young people, I may also collect their name, preferred name, date of birth and information supplied by their parent or carer, including the adult’s relationship to them.
You may choose to share information about neurodivergence, diagnoses, health or safeguarding concerns. Some of this is sensitive personal information, known as “special category data” under UK data protection law.
Neurodivergence questions on my booking form are optional. A diagnosis is not needed to access coaching. Please provide only information relevant to the support you are seeking.
3. How I Use Your Information
I use personal information to:
Respond to enquiries and discuss whether coaching is suitable.
Arrange and deliver coaching.
Understand goals, support needs and communication preferences.
Make appropriate adjustments to sessions.
Maintain relevant coaching and administrative records.
Process payments and meet financial record-keeping obligations.
Respond appropriately to safeguarding concerns.
Send marketing updates only where you have separately opted in.
I do not use coaching information for advertising or marketing targeting.
4. My legal basis for using information.
Depending on the purpose, I rely on:
Contract: to take steps at your request before entering an agreement and to deliver services under that agreement.
Legitimate interests: to manage enquiries, administer my practice and keep appropriate records, where these interests do not override your rights.
Legal obligation: where processing is necessary to comply with a legal requirement.
Consent: for optional marketing communications and other uses where I specifically ask for your permission.
Where I rely on explicit consent to use information about neurodivergence or health, I request this separately and explain the purpose. Reading this policy or submitting a form does not, by itself, constitute explicit consent.
You can withdraw consent by emailing me. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.
Safeguarding information may sometimes need to be used or shared without consent. Where this is necessary, I will identify an appropriate legal basis and, where applicable, a special category condition.
5. Young people and parents or carers
Parents or carers may provide information to help arrange coaching for a young person. I also involve the young person in understanding how their information will be used, in a way appropriate to their age and understanding.
Permission to participate in coaching and consent to use sensitive personal information are separate matters. I address these through the relevant consent process before coaching begins.
The young person’s confidentiality and the arrangements for sharing information with parents or carers are explained in the coaching agreement. Completing a booking form does not automatically give a parent or carer access to everything discussed during sessions.
6. Who I Share Information With
I do not sell personal information or share it with others for their own marketing.
Where necessary, information may be processed by providers supporting my business, such as form, website, email, scheduling, payment and secure record-storage services.
I use Tally to collect booking-form responses. Tally states that form data is encrypted in transit and at rest and stored in Europe.
I may also share relevant information:
With your permission, where appropriate.
Where required by law.
Where necessary and lawful to address a safeguarding concern or serious risk of harm.
I aim to share only the information necessary for the purpose. Where appropriate and safe, I will explain any disclosure to the people involved.
7. Storage and Security
I take appropriate measures to protect personal information against loss, misuse and unauthorised access.
Information is stored securely and access is limited to people who need it for the purposes described in this policy. I use appropriate passwords, device security and secure online services to protect personal information.
8. How Long I Keep Information
I keep information only for as long as needed for its purpose, taking account of legal requirements, insurance requirements and the need to maintain appropriate professional records.
I normally keep:
Enquiries that do not lead to coaching for up to 12 months after our last contact.
Booking forms, coaching agreements and session records for up to 7 years after coaching ends.
Records relating to under-18 clients for up to 7 years after coaching ends, or until the client reaches the age of 25, whichever is later.
Invoices and financial records for 7 years to meet legal and accounting requirements.
Marketing contact details until you withdraw consent or the information is no longer needed.
Where records need to be kept longer for a specific legal or safeguarding reason, I retain only what is necessary. Information is securely deleted or destroyed when no longer required.
9. Your rights
Depending on the circumstances and legal basis, you may have the right to:
Access your personal information.
Correct inaccurate or incomplete information.
Request deletion.
Restrict how information is used.
Object to processing based on legitimate interests.
Receive or transfer certain information in a portable format.
Withdraw consent where processing relies on consent.
These rights are not absolute. For example, I may need to retain some information to meet a legal obligation.
You can object to processing based on legitimate interests by contacting me.
To exercise your rights, email hello@davidpetermurphy.com.
You can also complain to the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
10. Cookies and Website Tracking
My website may use cookies and similar technologies.
I use only cookies that are necessary for the website to function, unless you give permission for optional cookies. If optional cookies or analytics tools are used, you can accept or reject them through the cookie settings on the website.
11. Changes to This Policy
I may update this policy as my services or data-handling arrangements change. The latest version will be available on my website. Where required, I will notify affected people of significant changes.
Contact:
If you have any questions about this policy or how your data is handled, please contact:
David Murphy – Data Controller
hello@davidpetermurphy.com