THE FINE PRINT

Privacy Policy

Last updated: 2 September 2026

I take your privacy seriously and want the way I collect and use your information to be clear, straightforward and proportionate.

This Privacy Policy explains what personal information I may collect when you visit this website, join my mailing list, contact me, purchase a programme or work with me, why I collect it, how it is used and stored, and the rights you have over your information.

Who I am

This website and the services offered through it are operated by Sarah McAreavey Coaching, based in Hove, East Sussex, United Kingdom.

For data protection purposes, Sarah McAreavey Coaching is the data controller of the personal information covered by this policy.

If you have any questions about your personal information or this Privacy Policy, you can contact me at: sarah@sarahmcareavey.com

The information I may collect

The information I collect depends on how you interact with me and may include:

Contact information, such as your name and email address.

Booking information, such as details you provide when arranging a clarity call, coaching session or other appointment.

Purchase and transaction information, including details of services or programmes you have purchased. Payments may be made by bank transfer or processed securely by Stripe. I do not receive or store your full card details.

Communications, including emails and messages you send to me through email, Telegram, website forms or other agreed methods of communication.

Coaching information, including notes I make in connection with our coaching sessions.

Information you choose to share about yourself, which may sometimes include information relating to your physical or mental health.

Marketing preferences, including whether you have chosen to receive my emails and whether you have subsequently unsubscribed.

Website information, such as information collected through Squarespace Analytics, Google Analytics and cookies about how people use and navigate my website.

Testimonials, including your name, photograph and comments where you have expressly agreed that I may publish them.

How I collect your information

You may provide information directly to me when you:

  • complete a form on my website

  • subscribe to my emails

  • sign up through Instagram

  • book a clarity or introductory call

  • book or take part in coaching

  • purchase a programme or digital product

  • email or message me

  • provide a testimonial

  • otherwise contact or work with me

Some information is also collected automatically when you use this website through cookies and analytics technologies. You can manage non-essential cookies through the cookie choices provided on the website.

Why I use your information

I only use personal information where I have a reason to do so.

Depending on the circumstances, I may use it to:

Provide services you have asked for.
For example, arranging coaching sessions, communicating with you about your booking, delivering a programme you have purchased or responding to an enquiry.

The lawful basis I generally rely on for this is contract, including taking steps at your request before entering into a contract.

Process payments and maintain appropriate business and financial records.

This may be necessary for the performance of our contract and to meet my legal obligations, including accounting and tax requirements.

Communicate with you.
For example, replying to an email, answering a question or sending information needed for a session or programme.

Depending on the circumstances, this will usually be necessary for our contract or for my legitimate interests in running and communicating about my business.

Send emails, resources and updates that you have chosen to receive.

Where you have actively subscribed to my mailing list, I generally rely on your consent.

If you book a clarity or introductory call through a form that clearly explains that your details will also be used to send you my emails, your information may also be added to my mailing list on that basis.

You can unsubscribe at any time using the unsubscribe link in any marketing email or by emailing me.

UK electronic-marketing rules require a genuine choice when consent is relied upon and an easy way to opt out of future marketing.

Understand and improve my website and services.

I may use analytics to understand how people find and use my website, which pages are useful and how the website is performing.

Depending on the information involved, this may be based on your consent, particularly where non-essential cookies or analytics technologies are used, and/or my legitimate interests in understanding and improving my business.

Coaching and health-related information

I do not routinely ask for or collect medical information when you purchase a digital programme such as Histamine Reset. Ordinarily, purchasing a programme requires basic information such as your name, email address and payment information.

During individual coaching, however, you may choose to tell me information about your physical or mental health where it is relevant to what we are discussing.

For example, you might choose to mention symptoms, diagnoses, neurodivergence, medications, health history or other personal circumstances.

Health information is treated as special category data under UK data protection law.

Where I need to record or otherwise process health information you have chosen to share as part of coaching, I will only do so where it is relevant to providing the service and where an appropriate lawful basis and special-category condition applies. Where I rely on explicit consent, I will ask you to expressly agree to this rather than assuming your consent simply because you have shared the information.

You are never required to tell me more about your health than you are comfortable sharing unless that information is genuinely necessary for a service you are asking me to provide.

Coaching notes

I may make brief notes in connection with coaching sessions so that I can provide continuity and an appropriate service.

These notes are stored in individual client folders on my password-protected iMac and may also be backed up using Apple iCloud.

I aim to collect only information that is relevant to our work together.

Going forward, coaching records will normally be retained for up to seven years after our coaching relationship ends, unless there is a legal or other legitimate reason to retain particular information for longer or it is appropriate to delete it sooner.

Coaching session recordings

Coaching sessions conducted through Zoom are normally recorded so that you can access and download a copy afterwards.

You can choose not to have your session recorded.

Recordings are stored temporarily through Zoom Cloud. I normally delete my copy of the recording within one month of the session.

If you download a copy of your recording, your own copy is then under your control and I am not responsible for how long you retain it or where you store it.

Email marketing

You may join my mailing list through my website, through Instagram, or through another sign-up process where it is made clear that you are joining my email list.

You may also be added when submitting a clarity or introductory-call form where the form clearly tells you that submitting it includes receiving my emails.

My emails may include articles, resources, information about my work, programmes, coaching availability and occasional offers.

You can unsubscribe at any time by clicking the unsubscribe link contained in my emails.

Unsubscribing may mean I retain a minimal record of your email address on a suppression list so that I know not to send marketing to you again.

Payments

Payments may be made directly by bank transfer or processed through Stripe.

Where Stripe processes your payment, your payment-card information is handled by Stripe rather than by me. I do not store your full credit or debit card details.

I may retain transaction information necessary for bookkeeping, accounting, tax and legal purposes.

Digital programmes

Digital products and programmes may be purchased or delivered through Flodesk.

When you purchase a programme, your name, email address, purchase information and other information required to complete and deliver the transaction may be processed through the relevant platform.

Bookings and video calls

I currently use TidyCal to manage online bookings and Zoom for online coaching sessions.

These providers may process information such as your name, email address, appointment information and technical information necessary to provide their services.

Website forms

My website is hosted by Squarespace.

Information submitted through a Squarespace form may be received directly by me and may also be transferred to Flodesk where the form is connected to my email list or marketing system.

Cookies and analytics

Like most websites, this site uses cookies and similar technologies.

Some cookies are necessary for the website to work properly. Others may help me understand how people use my website.

I currently use Squarespace Analytics and Google Analytics.

Where required, non-essential analytics cookies are only used according to the choices you make through the website's cookie consent banner.

You can change your cookie preferences through the options available on the site or through your browser settings.

Other service providers

I use a small number of trusted third-party services to operate my business.

These currently include services such as:

  • Squarespace

  • Flodesk

  • Stripe

  • TidyCal

  • Zoom

  • Google Analytics

  • Google Drive and Google Docs

  • Apple Mail and iCloud

These companies may process personal information on my behalf or as independent data controllers, depending on the service they provide.

I only share information with service providers where it is reasonably necessary for them to provide the service I use.

I do not sell your personal information.

International transfers

Some of the technology companies I use operate internationally or store and process information outside the United Kingdom.

Where personal information is transferred internationally, I expect the relevant service provider to use an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations or approved contractual safeguards.

Because the services and infrastructure used by technology companies can change, you can contact me if you would like more information about the providers currently processing your information.

Testimonials

I may publish testimonials from clients or customers on my website, in emails or on social media.

Where a testimonial identifies you by your full name, photograph or other identifiable information, I will ask for your explicit permission before publishing it.

You may subsequently contact me if you would like me to stop using an identifiable testimonial. Where reasonably possible, I will remove it from material under my control.

How long I keep your information

I do not keep every type of information for the same length of time.

As a general guide:

Coaching notes: normally up to seven years after our coaching relationship ends.

Zoom recordings: normally deleted from my Zoom account within one month.

Financial and transaction records: retained for as long as required for accounting, tax and legal purposes.

Mailing-list information: retained while you remain subscribed. If you unsubscribe, limited information may be retained so that your preference not to receive marketing can be respected.

Enquiries and correspondence: retained for as long as reasonably useful for the purpose for which you contacted me and then deleted when no longer needed.

I periodically review the information I hold and aim not to retain personal information for longer than reasonably necessary.

Keeping your information secure

I take reasonable steps to protect personal information from loss, misuse, unauthorised access or disclosure.

These include measures such as password protection on my devices and accounts and using established third-party platforms with their own security measures.

No online service or method of electronic storage can be guaranteed to be completely secure, but I aim to use sensible and proportionate safeguards for the nature of the information I hold.

Telegram and other communication services

If we choose to communicate through Telegram or another messaging service, information sent through that platform is also subject to the privacy and security practices of that service.

Please avoid sending highly sensitive personal information through messaging platforms unless it is necessary and you are comfortable doing so.

Email remains available if you would prefer to communicate that way.

Your rights

Under UK data protection law, depending on the circumstances, you may have the right to:

  • ask for a copy of the personal information I hold about you

  • ask me to correct information that is inaccurate or incomplete

  • ask me to delete your personal information

  • ask me to restrict how I use your information

  • object to certain uses of your information

  • ask for certain information to be transferred to you or another organisation

  • withdraw consent where I am relying on consent to use your information

Not every right applies in every circumstance, and there may occasionally be legal reasons why I cannot immediately delete or provide particular information.

If you would like to exercise any of these rights, email:

sarah@sarahmcareavey.com

I may need to verify your identity before providing personal information or carrying out certain requests.

Withdrawing consent

Where I rely on your consent, you can withdraw it at any time.

Withdrawing consent does not make anything I lawfully did before you withdrew your consent unlawful.

For marketing emails, the easiest way to withdraw consent is to use the unsubscribe link at the bottom of any email.

For other matters, you can email me at sarah@sarahmcareavey.com.

Complaints

If you have a concern about how I have used your personal information, I would always welcome the opportunity to put things right first.

Please contact me at:

sarah@sarahmcareavey.com

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

You can find information about making a complaint at the ICO website.

Changes to this Privacy Policy

I may update this Privacy Policy from time to time, for example if I change the services or technology I use or if data protection requirements change.

The latest version will always be published on this page and the date at the top will show when it was last updated.