Privacy Policy - Irene Kennedy Coaching
Last updated: 21 July 2026
Hi, I'm Irene and I take your privacy seriously. This policy explains how I collect, use and protect your personal information when you visit my website or work with me through coaching and consulting.
I work with clients globally. This policy applies wherever you're located and is aligned with GDPR (EU and UK), the Australian Privacy Act and relevant US state privacy laws including the CCPA and CPRA. Wherever you're based, you get the same standard of protection.
By using my website or services you agree to this policy.
1. Information I Collect
I may collect personal details when you:
Visit my website
Book a session with me
Fill out a contact form
Email or message me
Make a payment
The information might include:
Your name, email address and contact details
CVs, cover letters, LinkedIn profiles and other career documents
Your availability and preferences for scheduling
Payment confirmation details (I do not see or store your card numbers)
Anonymous usage data through cookies or analytics
2. How I Use Your Information
I use your information to:
Communicate with you about bookings or questions
Deliver coaching and career support services
Review and provide feedback on your documents
Send newsletters or updates if you've chosen to subscribe
Improve my website and services
I will never sell your information. I don't share it with third parties beyond the service providers listed in section 10, and only as needed to run my business.
3. Handling CVs and Sensitive Information
Many of my clients share career documents like CVs, cover letters or coaching notes. I treat these as strictly confidential.
Files are only used for coaching and feedback
Files are not shared with anyone else unless you give written permission
Files are deleted within 12 months of our work ending, unless you ask me to keep them for longer
Sometimes a CV may include sensitive information like health details or diversity information. I don't request this and recommend leaving it out. If you choose to share it anyway, you're giving me consent to use it only to deliver the services you asked for.
4. Data Retention
I keep your data only as long as I need to provide services or meet financial record requirements. Client documents are deleted within 12 months of our work finishing, unless you request otherwise. Financial records are kept for the period required by Australian tax law, currently five years.
5. Marketing and Email
If you subscribe to my email list I collect your name and email to send updates. You can unsubscribe any time through the link in the email or by contacting me. I currently use Kit and Squarespace to manage email subscriptions. You can review their privacy policies here: Kit and Squarespace.
If you contact me directly by email I use Google (Gmail) to receive and send messages. You can review their privacy policy here: Google Privacy Policy.
6. Cookies and Tracking
My website may use cookies to improve performance and track anonymous use. You can disable cookies in your browser at any time. In places where the law requires it, such as the EU and UK, a cookie banner will appear asking for your consent.
7. Legal Basis for Processing (GDPR)
For clients in the EU and UK I process personal data based on:
Consent when you provide information voluntarily
Contractual necessity to deliver services you book
Legitimate interests such as improving my services
8. Your Rights
Depending on where you live you may have the right to:
Ask for a copy of your data
Correct inaccurate information
Ask for your data to be deleted
Restrict or object to how your data is used
Request your data in a portable format
Opt out of the sale or sharing of personal information (this doesn't apply to me, as I don't sell data, but it's a right under some US state laws)
To exercise these rights just contact me. I'll respond within 30 days.
9. How I Protect Your Data
I take steps to keep your information safe including:
Using secure platforms like Squarespace, Calendly, Google and Stripe
Password protecting accounts and devices
Keeping access limited to myself only
Securely deleting files when no longer needed
In the unlikely event of a data breach that affects you, I'll notify you within 72 hours of becoming aware of it, in line with GDPR requirements.
10. Third Party Services
I use trusted providers to deliver my services. Each has its own privacy policy:
Squarespace for website hosting - privacy policy
Calendly for booking - privacy policy
Google for email - privacy policy
Stripe for payment - privacy policy
Kit for email subscriptions - privacy policy
11. International Data Transfers
Because I work with clients worldwide, your data may be transferred and processed outside your home country. Where required, transfers rely on the service providers' own compliance mechanisms (such as standard contractual clauses used by Google, Squarespace, Calendly and Stripe). No matter where your data is handled, I apply the same standard of protection.
12. Children's Privacy
My services are not directed at anyone under 18 and I don't knowingly collect information from minors.
13. Complaints
If you're unhappy with how I've handled your data, please contact me first so I can resolve it quickly. If you're still concerned, you can raise the issue with your local regulator, for example:
UK - Information Commissioner's Office (ICO)
EU - your local Data Protection Authority
Australia - Office of the Australian Information Commissioner (OAIC)
14. Governing Law
This policy is governed by the laws applicable to Irene Kennedy Coaching as a service provider. Where GDPR or US state law grants you stronger rights over your own data, those rights still apply regardless of governing law.
15. Contact
If you have any questions or requests, please use the contact form on my website or email me directly.
16. Updates
From time to time this policy may be updated. The most recent version will always be on this page with the date shown at the top.