Privacy Policy

Your privacy is very important to CN8 Limited and you can be confident that your personal information will be kept safe and secure and will only be used for the purpose it was given to us. We adhere to current data protection legislation, including the General Data Protection Regulation (EU/2016/679) (the GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

‘Coaching’ with CN8 Limited includes, but is not limited to, 1-2-1 coaching, group coaching, assessments and consulting.

This privacy notice tells you what CN8 Limited (we/us) will do with your personal information from initial point of contact through to after Coaching has ended, including:

Why we are able to process your information and what purpose we are processing it for
Whether you have to provide it to us
How long we store it for
Whether there are other recipients of your personal information
Whether we intend to transfer it to another country,
Whether we do automated decision-making or profiling, and
Your data protection rights

We are happy to chat through any questions you might have about the CN8 Limited data protection policy and you can contact us via cecilie@cn8.co.uk.

‘Data controller’ is the term used to describe the person/ organisation that collects and stores and has responsibility for people personal data. In this instance, the data controller is Cecilie Nielsen.

CN8 Limited is a registered company: Company No. 13925345

Postal address: Co Streets S J Males Limited Basepoint Business Centre, 110 Butterfield, Great Marlings, Luton, Bedfordshire, LU2 8DL. United Kingdom.

Phone number: +44 (0)7500 522099

Email address: cecilie@cn8.co.uk

Information Collected

CN8 Limited collects information from users so that requests for Coaching and insights can be reviewed and managed.

Information collected from users include full name, mailing address, telephone number, e-mail address, company name, address and contact information, third party assessment data, and requested topic of information. This information collected is core to the function of CN8 Limited requests so that Coaching requests can be appropriately handled by our Coaching professionals.

The information collected will only be used by the CN8 Limited team. The Managing Director of CN8 Limited will review the policy annually to ensure system access only by appropriate staff and through technical security with username log-in and passwords. Records are retained in a secure location.

Lawful Basis

The GDPR states that CN8 Limited must have a lawful basis for processing your personal data. There are different lawful bases depending on the stage at which CN8 Limited are processing your data. We have explained these below:

If you have had Coaching with CN8 Limited and it has now ended, we will use legitimate interest as our lawful basis for holding and using your personal information.

If you are currently having Coaching or if you are in contact with us to consider Coaching, CN8 Limited will process your personal data where it is necessary for the performance of our contract.

The GDPR also makes sure that we look after any sensitive personal information, that you may disclose to us, appropriately. This type of information is called special category personal information. The lawful basis for us processing any special categories of personal information is that it is for provision of Coaching and necessary for a contract between CN8 Limited and you.

Cookies

Cookies are small bits of data that websites store on your computer to help uniquely identify you. Like most websites we use cookies to help the site work more efficiently. Certain features on this site (our newsletter via Substack and our website via Square Space) require the use of cookies, but you can always choose whether to allow this site to store additional cookies to improve your overall experience.

Recent changes in European Legislation mean we are now required to make you aware of the use of cookies on our website and provide you with the opportunity to opt out of cookies being stored on your devices. If you choose to ‘Decline tracking cookies’, the optional, third-party cookies will not be set on your computer by this website. As a result your user experience on this website may be affected slightly. If you choose to continue using this site without declining the use of cookies, these cookies will be stored on your computer.

Google Analytics

We use Google Analytics to record information about how many users are visiting this website, where visitors have come to this site from, which content they’re looking at, and what the capabilities of their devices are, so we can provide you with the best possible content and user experience in future.

How we use your information

A. Initial contact

When you contact CN8 Limited with an enquiry about Coaching services we will collect information to help satisfy your enquiry. This will include name, home address, telephone numbers and place of work. If you decide not to proceed we will ensure all your personal data is deleted within two months. If you would like us to delete this information sooner, just let us know.

B. While you are accessing Coaching

i. Confidentiality

This Coaching relationship, as well as all information (documented or verbal) that the Client shares with the Coach as part of this relationship, is bound by the principles of confidentiality set forth in the ICF Code of Ethics (www.coachingfederation.org/ethics). However, please be aware that the Coach- Client relationship is not considered a legally confidential relationship (like the medical and legal professions) and thus communications are not subject to the protection of any legally recognized privilege. The Coach agrees not to disclose any information pertaining to the Client without the Client’s written consent. The Coach will not disclose the Client’s name as a reference without the Client’s consent.

Confidential Information does not include information that: (a) was in the Coach’s possession prior to its being furnished by the Client; (b) is generally known to the public or in the Client’s industry; (c) is obtained by the Coach from a third party, without breach of any obligation to the Client; (d) is independently developed by the Coach without use of or reference to the Client’s confidential information; or (e) the Coach is required by statute, lawfully issued subpoena, or by court order to disclose;

(f) is disclosed to the Coach and as a result of such disclosure the Coach reasonably believes there to be an imminent or likely risk of danger or harm to the Client or others; and (g) involves illegal activity. The Client also acknowledges his or her continuing obligation to raise any confidentiality questions or concerns with the Coach in a timely manner.

ii. Privacy/Data Protection

The Coach and the Client will each of them comply as appropriate with applicable privacy/data protection legislation (including GDPR), binding court order, judgment or decree, guidance, codes, policy or standards.

With regard to processing personal data/personal identifiable information (“data”) in relation to the Client, the Coach will: process such data lawfully (on an appropriate basis including but not limited to consent, or to comply with the Coach’s legal or regulatory obligations, or for contractual performance, or for the Coach’s legitimate interests), fairly and in a transparent manner; collect such data for specified, explicit and legitimate purposes and not further process such data in a manner that is incompatible with those purposes; ensure that such data is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; maintain such data accurately; keep such data for no longer than is necessary for the purposes for which the data are processed; process such data in a manner that ensures appropriate security of the data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures; maintain records of such data processing under applicable privacy/data protection legislation requirements; share such data with third parties who the Coach will inform the Client about; concerning such data, observe the Client’s privacy/data protection rights under applicable privacy/data protection legislation requirements, which may be subject to some conditions and exceptions; process such data for marketing purposes under applicable privacy/data protection legislation requirements; in case of a security breach concerning such data, where requirements of applicable privacy/data protection legislation are met, notify a regulatory or supervisory authority, board or other body responsible for administering privacy/data protection legislation, and the Client of the data security breach; and, where it is necessary for the Coach to transfer such data internationally the Coach will comply with applicable privacy/data protection legislation requirements designed to ensure the privacy of such data.

In connection with any infringement by the Coach of applicable privacy/data protection legislation requirements, including a security breach, concerning personal data/personal identifiable information in relation to the Client, the Coach’s entire liability under this Agreement and the Client’s exclusive remedy shall be limited to the amount actually paid by the Client to the Coach under this Agreement for all Coaching services rendered through and including the termination date.

Third Parties

Where we have contracted with a carefully selected partner or supplier to carry out specific tasks, we take great care to ensure that we have a contract with the third party that states what they are allowed to do with the data we share with them. We ensure that they do not use your information in any way other than the task for which they have been contracted.

Your Rights

We try to be as open as we can be in terms of giving people access to their personal information. You have a right to ask us to delete your personal information, to limit how we use your personal information, or to stop processing your personal information. You also have a right to ask for a copy of any information that we hold about you and to object to the use of your personal data in some circumstances. You can read more about your rights at ico.org.uk/your-data-matters.

If CN8 Limited do hold information about you we will:

give you a description of it and where it came from;
tell you why I am holding its, tell you how long I will store your data and how I made this decision;
tell you who it could be disclosed to;
let you have a copy of the information in an intelligible form

You can also ask us at any time to correct any mistakes there may be in the personal information CN8 Limited hold about you.

To make a request for any personal information we may hold about you, please put the request in writing addressing it to cecilie@cn8.co.uk.

Personal Information

If you have had Coaching with CN8 Limited and it has now ended, we will use legitimate interest as our lawful basis for holding and using your personal information.

If you are currently having Coaching or if you are in contact with us to consider Coaching, CN8 Limited will process your personal data where it is necessary for the performance of our contract.

The GDPR also makes sure that we look after any sensitive personal information, that you may disclose to us, appropriately. This type of information is called ‘special category personal information’;. The lawful basis for us processing any special categories of personal information is that it is for provision of Coaching and necessary for a contract between CN8 Limited and you.

No user-specific data is collected by CN8 Limited or any third party. If you fill in a form on our website, that data will be temporarily stored on the web host before being sent to us.

We use Square Space as the content management system for our website.

When someone visits the CN8 Limited website, we use a third-party service, Substack to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is processed in a wav that does not identify anyone. We do not make, and do not allow Substack to make, any attempt to find out the identities of those visiting our website. You can read Substack’s privacy notice here https://substack.com/privacy.

If you have any complaint about how we handle your personal data please do not hesitate to get in touch with us by writing or emailing to the contact details given above. We would welcome any suggestions for improving our data protection procedures.

If you want to make a formal complaint about the way we have processed your personal information you can contact the ICO which is the statutory body that oversees data protection law in the UK. For more information go to www.ico.org.uk/make-a-complaint