This policy is provided for transparency and does not constitute legal advice. UK requirements for websites and personal data include the UK GDPR, the Data Protection Act 2018, and (where cookies or similar technologies are used) the Privacy and Electronic Communications Regulations (PECR). General guidance is summarised in resources such as the Legalo website legal requirements guide and the ICO guide to PECR.
1. Who we are
Rush Mind Coaching is operated by Rushes LTD, a company registered in England and Wales (company number 10766887).
For data protection enquiries, coaching enquiries, or service complaints, contact us through the Get Started form and describe your request clearly (for complaints, include “Complaint” in your message). We do not publish email addresses on this website.
2. Scope of this policy
This policy covers personal data processed through:
- The public website at rushmind.co.uk (information pages and the contact form).
- Cookie and similar technologies on those pages, as described in our Cookie Policy.
If you use our separate client portal (/client_portal/), additional contracts, logs and coaching records may apply. That environment has its own notices and acceptance flows when you sign in. This policy still describes our overall approach and your statutory rights.
3. What personal data we collect
We aim to collect only what we need. Typical categories include:
| Activity | Data | Purpose (summary) |
|---|---|---|
| Browsing this website | Technical data sent by your browser (e.g. IP address, user agent, date/time of request), and—depending on your choices—identifiers stored via cookies or local storage (such as your cookie consent decision). | Operate and secure the site; remember privacy preferences; comply with law. |
| Contact form (“Get Started”) | Full name, optional preferred code name, email address, phone number, how we can help (minimum length applies), any optional extra notes, and your agreement to our terms/privacy (timestamp implied by submission). | Respond to your enquiry and manage our relationship with you. |
| Email or phone if you contact us directly | Whatever information you choose to provide. | Respond and deliver coaching-related administration. |
We do not ask you to provide special category data (such as health information) through the public contact form. Please avoid sending sensitive information by email unless we have agreed a secure channel.
4. Lawful bases for processing
Depending on the activity, we rely on one or more of the following lawful bases under UK GDPR Article 6:
- Consent — where we ask you to agree (for example cookie preferences where required, or optional marketing if ever offered).
- Legitimate interests — operating the website, answering enquiries, keeping records of consent, and protecting against misuse, where not overridden by your rights.
- Contract — if you become a paying client and we need data to deliver coaching.
- Legal obligation — where we must retain or disclose information for accounting, tax or regulatory reasons.
5. Sharing and recipients
We do not sell your personal data. We may share it with:
- Hosting and email providers who process data on our instructions (processors), solely to run rushmind.co.uk and deliver messages.
- Professional advisers (e.g. accountants or solicitors) where required.
- Authorities when required by law or to protect vital interests.
Public pages may load fonts or icon stylesheets from third-party CDNs (for example Google Fonts or cdnjs). Those providers may receive technical data (such as IP address) as part of the request. See our Cookie Policy.
6. International transfers
Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards (such as UK-approved standard contractual clauses or adequacy regulations) apply where required by UK GDPR Chapter V.
7. Retention
We keep personal data only as long as necessary for the purposes above. Indicative periods:
- Contact form submissions: typically up to 24 months unless we need longer for ongoing conversations or legal claims, unless you ask us to delete sooner (subject to overrides).
- Consent records: stored to demonstrate compliance with PECR / UK GDPR.
- Server logs: according to hosting configuration (often rotated automatically).
8. Your rights
Under UK data protection law you may have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase data in certain circumstances.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests or for direct marketing.
- Data portability for data you provided where processing is automated and based on consent or contract.
- Withdraw consent at any time where processing is based on consent.
To exercise these rights, contact us via the Get Started form. You may also complain to the Information Commissioner’s Office (ICO), the UK supervisory authority.
9. Security
We use appropriate technical and organisational measures to protect personal data. No online transmission is completely secure; you should use discretion when sending information.
10. Children
This website and coaching marketing are aimed at adults. We do not knowingly collect data from children without appropriate consent.
11. Changes
We may update this policy from time to time. Material changes will be reflected on this page with an updated date. Where required, we will notify you or seek fresh consent.
12. Related documents
- Cookie Policy
- Terms of Use
- Privacy & Engagement (coaching practice, confidentiality and engagement expectations)