Privacy Policy | Good Calma

Good Calma customer privacy notice

This privacy notice tells you what to expect us to do with your personal information.

Who we are

Good Calma is the trading name of Sian Young, a sole trader. Sian Young is the data controller for your information.

Contact details

Email: goodcalma@live.co.uk

What information we collect, use, and why

We collect or use the following information to provide services:

Names and contact details

Addresses

Purchase or account history

Payment details (including card or bank information for transfers and direct debits)

Account information

Website user information (including user journeys and cookie tracking)

Photographs or video recordings

Call recordings

Records of meetings and decisions

Information relating to compliments or complaints

We collect or use the following information for the operation of customer accounts and guarantees:

Names and contact details

Addresses

Purchase history

Account information, including registration details

Marketing preferences

We collect or use the following information for service updates or marketing purposes:

Names and contact details

Addresses

Marketing preferences

Website and app user journey information

We collect or use the following personal information for dealing with queries, complaints or claims:

Names and contact details

Address

Account information

Purchase or service history

We collect or use the following information to improve how we run our business, such as developing our processes, template responses, and learning from how previous situations were handled:

Emails and messages you send us
Records of meetings and decisions
Information relating to compliments or complaints

Sensitive information you may choose to share

During pre-screening calls, coaching sessions, or course activities, you may choose to share more sensitive information, such as:

Information about your emotional or mental wellbeing
Information about your physical health
Information about your relationships or personal experiences

This is known as special category data. We only collect it if you choose to share it, we only use it to check the service is right for you and to support you safely, and we process it with your explicit consent. You can withdraw your consent at any time.

[In rare cases where we believe you or someone else is at risk of serious harm, we may share relevant information with emergency services or other appropriate authorities without your consent, where the law allows us to.]

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.

Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.

Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.

Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How to request a copy of your data (Subject Access Request)

If you would like to see or receive a copy of the personal information we hold about you, you can make a Subject Access Request.

How to submit: Email info@goodcalma.com with the subject line "Subject Access Request".

Cost: This is free of charge.

What we will do: In line with the Data (Use and Access) Act 2025, we will carry out reasonable and proportionate searches to find your information.

Timeline: We will provide your information within one calendar month of receiving your request.

If your request is exceptionally broad, needs clarifying, or we need proof of your identity to release your information safely, we may pause the one-month timeline. The clock restarts once you have given us the clarification or identity verification we need.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful basis for collecting or using sensitive (special category) information is:

Explicit consent - you have given us clear permission to use this information for the purposes explained in this notice. You can withdraw your consent at any time.

Where we get personal information from

Directly from you
Automatically from your device when you visit our website (see Cookies below)

How long we keep information

We keep your information only as long as we need it:

Client and coaching records including session recordings: for six years following your last active contact with us
Financial records: six years (required by HMRC)
Pre-screening call notes and recordings, if you do not go on to work with us: 6 months
Emails and enquiries: six years, as we use them to develop our processes and improve how we respond to clients
Marketing data: until you unsubscribe or withdraw consent. We keep your email address on a suppression list after you unsubscribe so you are not added again by mistake.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

Who we share information with

Others we share personal information with

Professional or legal advisors

Professional consultants

Suppliers and service providers

The suppliers and service providers we use include:

Wix - website, email marketing, course delivery, and website analytics
Stripe / Wix Payments / PayPal - payment processing (we do not store your card details)
Zoom / Teams / Google Meet - pre-screening calls and coaching sessions
Google Drive / Dropbox - storing notes and recordings

We only share information with suppliers who need it to help us deliver our services, and we never sell your information.

Some of our suppliers store or process data outside the UK. In line with the Data (Use and Access) Act 2025, we make sure these transfers are protected by appropriate safeguards so the standard of protection is not materially lower than in the UK.

We use cookies to help our website work properly and to understand how visitors use it.

Our website uses a "block before consent" setting. This means no analytics, marketing, or tracking cookies are placed on your device until you click "Accept" on our cookie banner. You can accept, decline, or change your choices at any time using the options on the banner.

The cookies we use:

Essential cookies: placed by Wix to keep the site secure and working properly. These do not need your consent because the site would not work without them.
Payment cookies: placed by Stripe / Wix Payments during checkout to process payments securely and help prevent fraud.
Analytics and marketing cookies (with consent): e.g. Wix Analytics, Google Analytics, Meta Pixel to help us understand how visitors use our website and measure our marketing.

You can also control or delete cookies through your browser settings.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated September 2026