Privacy Notice
Last updated: 14 October 2026
This notice explains what personal data White Clarity Ltd collects when you use our website or our speaker coaching and presentation training, why we use it, and the rights you have.
1. Who we are
White Clarity Ltd ("we", "us") provides virtual and in-person speaker coaching and presentation training. We are the controller of your personal data, which means we decide how and why it is used.
| Company | White Clarity Ltd, registered in England and Wales, company number 07213674 |
|---|---|
| Registered office | 40 Teglease Gardens, Clanfield, Hampshire, PO8 0YW |
| ICO registration number | ZA880473 |
| Contact | Andrea White, andrea@andreawhite.co.uk, 07843 514973 |
We handle personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) for marketing emails and cookies.
2. What personal data we collect
- Contact and identity details: name, email address, phone number, and for corporate clients your organisation and job title.
- Booking and payment details: sessions and packages booked, contracts, invoices and payment status. Card payments are processed by our payment provider; we never see or store your full card number.
- Coaching information: session notes, your goals and feedback, presentation materials you share, and recordings and transcripts of coaching calls, made with your agreement.
- Health or access information: if you choose to tell us about something such as speaking anxiety, a disability or access needs so we can adapt sessions. This is special category data and we only use it with your explicit consent.
- Enquiries and correspondence: messages sent through our website form, by email or by phone.
- Marketing preferences: whether you subscribe to our newsletter, and whether our emails are opened and links clicked.
- Website data: IP address, browser and device type, and pages visited, collected through cookies and analytics on our website.
We collect most of this directly from you. If your employer books training for you, we may receive your name, email address and role from them.
You don't have to give us your details, but without contact and booking information we can't provide coaching or training.
3. How we use your data and our lawful basis
We only use your data where the law gives us a reason (a "lawful basis"). The table shows each purpose and the basis we rely on.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Replying to your enquiry | Contact details, enquiry | Taking steps at your request before a contract |
| Booking, delivering and managing coaching and training | Contact, booking and coaching information | Contract with you; where your employer is our client, our legitimate interest in delivering the training they have booked |
| Adapting sessions to health or access needs | Health or access information you share | Your explicit consent |
| Taking payment and keeping accounts | Booking and payment details | Contract; legal obligation (tax and company records) |
| Sending our newsletter and marketing emails | Name, email, marketing preferences | Your consent; for existing clients, the PECR "soft opt-in" for similar services |
| Running our website and measuring visits | Website data | Legitimate interests in running a secure website and understanding, in aggregate, how it is used so we can improve it |
| Handling complaints or legal claims | Relevant records | Legitimate interests |
Every marketing email includes an unsubscribe link, and you can withdraw consent at any time. We use our email provider's standard open and click reports to see which content is useful; this never leads to decisions about you. We do not carry out automated decision-making or profiling that has legal or similarly significant effects.
4. Who we share your data with
We never sell your data. We share it only with the service providers below, who process it on our behalf under contracts that require them to keep it secure, and with others only where the law requires.
| Provider | What they do for us | Data involved |
|---|---|---|
| Squarespace | Hosts our website, contact forms and visitor analytics | Website data, form submissions |
| MailerLite | Sends our newsletter and marketing emails | Name, email, preferences, open and click data |
| Paperbell | Client bookings, scheduling, contracts, invoices and client portal | Contact, booking and payment details, documents you share |
| Stripe | Processes card payments made through Paperbell | Payment details |
| Zoom and Microsoft Teams | Video calls for virtual sessions | Name, email, audio and video during sessions |
| Otter.ai | Records and transcribes coaching calls | Call audio, transcripts, participant names |
| QuickBooks (Intuit) | Bookkeeping and accounting software | Name, contact details, invoices and payment records |
| Our accountant and HMRC | Preparing accounts and tax returns | Invoices and payment records |
We may also share data with professional advisers, insurers or authorities where we are legally required to or need to protect our legal rights.
5. Transfers outside the UK
Some of our providers store data outside the UK. MailerLite stores data on servers in the European Union, which the UK recognises as providing adequate protection. Squarespace, Stripe, Otter.ai, Zoom, Microsoft and Intuit (QuickBooks) may process data in the United States.
Where data goes to the United States, we rely on the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework) when the provider is certified under it. Otherwise we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more detail about these safeguards.
6. How long we keep your data
We keep data only as long as we need it for the purposes above, then delete or anonymise it.
| Type of data | How long we keep it |
|---|---|
| Enquiries that don't lead to a booking | 12 months from our last contact |
| Client records, contracts and coaching notes | 6 years after your last session |
| Call recordings and transcripts | 6 years after your last session, unless you ask us to delete them sooner |
| Invoices and financial records | 6 years from the end of the financial year they relate to, as required by HMRC |
| Newsletter subscriber details | Until you unsubscribe; inactive subscribers are removed after 3 years |
| Website analytics | Analytics cookies expire after up to 2 years |
7. Security, cookies and children
Security. We use reputable providers with data processing agreements in place, protect our accounts with strong passwords and two-factor authentication where available, and limit access to your data to those who need it to deliver our services.
Cookies. We don't use advertising or third-party tracking cookies. Our website platform, Squarespace, sets a small number of essential cookies so the site works securely, and its built-in analytics uses first-party cookies to count visits and see which pages are viewed. We use these statistics only in aggregate, to improve our website, and they are not shared for advertising. You can object to analytics at any time by blocking or deleting cookies in your browser settings.
Children. Our services are designed for adults. We do not knowingly collect data from anyone under 18 unless a parent or guardian has arranged coaching for them and agreed to us processing their data.
8. Your rights and how to complain
You have the right to:
- Access the personal data we hold about you and receive a copy
- Correct data that is inaccurate or incomplete
- Erase your data, where we no longer have a valid reason to keep it
- Restrict how we use your data in certain circumstances
- Object to us using your data on the basis of legitimate interests, and to direct marketing at any time
- Data portability: receive data you gave us in a commonly used, machine-readable format
- Withdraw consent at any time, without affecting anything we did before you withdrew it
To use any of these rights, email andrea@andreawhite.co.uk. There is usually no fee. We will respond within one month, and may ask you to confirm your identity first.
If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
9. Changes to this notice
We update this notice when the way we use personal data changes. The "last updated" date at the top shows when it was last revised, and we will email clients and subscribers about any significant changes.