Privacy Notice

Last updated: September 2026

1. About this Privacy Notice

Jo Hennessy Coaching (“I”, “me” or “my”) respects your privacy and is committed to protecting your personal information.

This Privacy Notice explains what personal information I collect, how and why I use it, how I protect it, and the rights you have in relation to your information.

I provide personal, professional performance and leadership coaching online and in person.

For data protection purposes, I am the data controller for the personal information I process in connection with Jo Hennessy Coaching.

If you have any questions about how your personal information is used, please contact me using the details at the end of this Privacy Notice.

2. Personal information I may collect

I may collect and use the following types of personal information:

  • your name and contact details;

  • information you provide when making an enquiry, booking a consultation or coaching programme, or communicating with me;

  • information about your coaching goals, circumstances, experiences and areas you wish to explore;

  • coaching notes and other information you choose to share during coaching;

  • payment, invoicing and transaction information;

  • information about how you use my website and services;

  • information you provide when subscribing to resources, newsletters or other communications;

  • your date of birth, where this is requested as part of the coaching intake process or for a specific coaching purpose; and

  • any other information you choose to provide to me in connection with your coaching, enquiries or communications.

3. How I use your information

I may use your personal information to:

  • respond to enquiries and requests;

  • arrange and provide coaching services;

  • understand your goals, circumstances and areas you wish to explore;

  • prepare for and conduct coaching sessions;

  • communicate with you about your coaching and related services;

  • process payments, invoices and business records;

  • provide resources or other information you have requested;

  • send marketing communications where permitted by law and in accordance with your preferences;

  • improve my website, services and client experience;

  • maintain appropriate professional and business records;

  • respond appropriately if an urgent situation arises during a coaching session;

  • protect my business, systems and information from misuse or unauthorised access; and

  • comply with legal and regulatory obligations.

4. Lawful bases for using your information

Under UK data protection law, I must have a lawful basis for processing your personal information. Depending on the circumstances, I may rely on:

Contract – where processing is necessary to provide coaching services you have requested or to take steps at your request before entering into an agreement.

Legitimate interests – where processing is necessary for purposes such as responding to enquiries, managing client relationships, preparing for coaching, maintaining appropriate records, improving my services, protecting my business and systems, or responding appropriately to an urgent situation.

Legal obligation – where I need to process information to comply with a legal or regulatory requirement, such as accounting or tax obligations.

Consent – where I ask for your consent for a particular purpose, such as certain marketing communications or, on limited occasions, recording a coaching session for professional development or qualification purposes. Where I rely on consent, you can withdraw it at any time.

5. Special category information

Coaching conversations may sometimes involve information relating to your health, wellbeing, stress, energy or other aspects of your personal circumstances. Health information is considered “special category data” under UK data protection law.

I do not provide healthcare or medical treatment and do not routinely create or maintain health records. Any special category information that you choose to share during coaching will only be processed where there is an appropriate lawful basis under UK data protection law and a relevant condition for processing special category data.

6. HeartMath® information

During some coaching sessions, you may choose to use HeartMath® products or services and share information displayed during the session.

This information may relate to physiological responses or wellbeing. I may view information displayed during a session but do not routinely download, copy, screenshot or otherwise retain HeartMath® information in my own systems.

Where information shared through coaching is special category data, it will be processed in accordance with the requirements described in section 5 above.

Your use of HeartMath® products or services is also subject to HeartMath®’s own privacy notice and terms.

7. Recording of coaching sessions

Coaching sessions are not routinely recorded.

On limited occasions, I may record a session for a specific purpose such as professional development or qualification requirements. If a session is to be recorded, I will inform you in advance and explain the purpose of the recording, how it will be used, who may access it and how long it will be retained.

You will not be required to agree to a recording in order to receive coaching. Recordings will be stored securely and deleted when they are no longer required for the stated purpose.

8. AI-assisted meeting notes

On some occasions, I may use an AI-assisted meeting notes feature to help summarise a coaching session. Where this is used, information from the session may be processed by the AI service to generate a summary. I will let you know when AI-assisted notes are being used.

Zoom states that customer meeting content is not used to train its or third-party AI models. Depending on the feature used and the configuration of my Zoom account, information may be processed by Zoom and its authorised service providers, including outside the UK, subject to appropriate data protection safeguards.

You will not be required to agree to the use of AI-assisted meeting notes in order to receive coaching.

9. How I collect your information

I may collect personal information:

  • directly from you when you contact me, complete forms, book or purchase services;

  • during coaching sessions and related communications;

  • when you subscribe to newsletters, resources or other communications;

  • through your use of my website, including through cookies and similar technologies; and

  • through service providers that support the operation of my business, such as appointment scheduling, communications, payment processing, website management and business administration.

I do not purchase personal information from data brokers for use in my coaching business.

10. Marketing communications

Where permitted by law, I may send you information about my services, resources or other relevant communications.

Where your consent is required, I will ask for it before sending marketing communications. You can unsubscribe from marketing communications at any time by using the unsubscribe option provided or by contacting me.

11. Who I may share your information with

I may share personal information with carefully selected third-party service providers where necessary to operate my business and provide my services. These may include providers of:

  • website hosting and management;

  • appointment scheduling;

  • email and communications services;

  • online coaching and meeting services;

  • payment processing;

  • secure data storage and business administration;

  • professional, legal or accounting services; and

  • specific online tools used to support a particular coaching exercise.

Where I use a third-party tool for a particular coaching exercise, I will only provide the information needed for that exercise and will take reasonable steps to minimise information that could identify you. The third-party provider may also process information in accordance with its own privacy notice and terms.

I do not sell your personal information.

I may also disclose personal information where I am required to do so by law or where this is necessary to respond to an urgent situation or protect someone's safety.

12. International transfers

Some third-party service providers I use may process personal information outside the UK.

Where personal information is transferred outside the UK, I will take appropriate steps to ensure that the transfer is subject to safeguards required under applicable data protection law.

13. Security

I take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

No method of transmitting or storing information electronically is completely secure. While I take appropriate measures to protect your personal information, I cannot guarantee the absolute security of information transmitted to me or stored electronically. You should take reasonable care when sending personal information online.

14. How long I keep your information

I keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting or professional requirements.

Different types of information may be retained for different periods depending on their purpose and my legal or professional obligations.

Where recordings are made, they will be deleted when they are no longer required for the purpose for which they were created. Information may remain temporarily in secure backups after deletion from active systems.

15. Your rights

Under UK data protection law, you may have rights including:

  • the right to access the personal information I hold about you;

  • the right to ask me to correct inaccurate or incomplete information;

  • the right to ask me to erase your information in certain circumstances;

  • the right to ask me to restrict how I use your information in certain circumstances;

  • the right to object to certain processing, including direct marketing;

  • the right to data portability in certain circumstances; and

  • where processing is based on consent, the right to withdraw your consent at any time.

These rights are not absolute and may not apply in every circumstance.

If you would like to exercise any of these rights, please contact me using the details below.

16. Cookies

My website uses cookies and similar technologies that are necessary for the website to function. I do not currently use cookies for analytics, advertising or other non-essential tracking purposes.

17. Links to other websites

My website may contain links to third-party websites or services. I am not responsible for the privacy practices, content or security of those websites.

I recommend that you review the privacy notice of any third-party website you visit.

18. Changes to this Privacy Notice

I may update this Privacy Notice from time to time to reflect changes to my services, how I use personal information or my legal obligations.

The latest version will be published on my website with the date it was last updated.

19. Contact

If you have any questions about this Privacy Notice or how I use your personal information, please contact me:

Jo Hennessy Coaching
Email: hello@johennessycoaching.com
Business correspondence address: Star Lodge, Montpellier Drive, Cheltenham, GL50 1TY

20. Complaints

If you have concerns about how I have handled your personal information, please contact me in the first instance so that I can try to resolve your concern.

You also have the right to complain to the UK Information Commissioner's Office (ICO), which is the UK's supervisory authority for data protection.

Further information is available from the ICO website.