Privacy Policy

1. Who we are

Feral Ducks Coaching ("we", "us", "our") provides business coaching services, including coaching for entrepreneurs with ADHD.

Data controller: Feral Ducks Ltd
Address: Unit 2 Trident Business Park, Llangefni, Anglesey, LL77 7BB
Contact email: hello@feralducks.co.uk
ICO registration number: *******************

If you have any questions about this policy or how we handle your data, contact us using the details above.

2. What data we collect

Depending on how you interact with us, we may collect:

• Contact details — name, email address, phone number
• Enquiry information — anything you tell us via our contact form, email, or booking calls (e.g. business context, coaching goals, ADHD-related information you choose to share)
• Client/coaching records — session notes, action plans, progress notes, invoices (if you become a client)
• Payment information — processed via [Stripe / GoCardless / etc.] — we do not store full card details ourselves
• Website usage data — via cookies/analytics (see Section 7)
• Communications — emails, messages, or call notes relating to our work together

3. How we collect it

• Directly from you (contact forms, email, discovery calls, coaching sessions)
• Automatically via our website (cookies, analytics)
• From third parties only where relevant (e.g. a referral partner, with your consent)

4. Why we use your data and our lawful basis

Purpose	Lawful basis (UK GDPR Art. 6)
Responding to your enquiry	Consent / Legitimate interests
Delivering coaching services	Performance of a contract
Invoicing and bookkeeping	Legal obligation
Sending marketing emails (if opted in)	Consent
Improving our website and services	Legitimate interests

Where we rely on consent, you can withdraw it at any time (see Section 8).

Special category data
If you choose to share health-related information with us (for example, information about ADHD or other conditions relevant to coaching), this is treated as special category data under UK GDPR. We only process this with your explicit consent, and only to the extent you choose to share it in order to help us coach you effectively. You are never required to share this to enquire about or access our services.

5. Who we share your data with

We don't sell your data. We may share it with:

• Service providers who help us run the business — e.g. [Xero (accounting), your booking/calendar tool, email platform, CRM]
• Professional advisors — accountant, solicitor, insurer, where necessary
• Authorities — where required by law (e.g. HMRC)

All third parties are required to keep your data secure and use it only for the purposes we specify.

6. Where your data is stored

Your data is stored within the UK/EEA wherever possible. Where a service provider stores data outside the UK/EEA (e.g. some US-based software), we rely on appropriate safeguards such as Standard Contractual Clauses or the provider's UK/EU adequacy arrangements.

7. Cookies

Our website may use cookies to:

• Keep the site working properly (essential cookies)
• Understand how visitors use the site (analytics cookies, e.g. Google Analytics)

You can control cookies through your browser settings. [Add a cookie banner/consent tool reference if you have one, e.g. Cookiebot/CookieYes.]

8. Your rights

Under UK GDPR, you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time, where we rely on consent
• Complain to the ICO (Information Commissioner's Office) at ico.org.uk if you're unhappy with how we've handled your data

To exercise any of these rights, email us at hello@feralducks.co.uk. We'll respond within one month.

9. How long we keep your data

• Enquiries that don't convert: deleted after [12 months]
• Client records: kept for the duration of our working relationship plus [6 years] for legal/tax purposes
• Marketing consent: kept until you unsubscribe or withdraw consent

10. Data security

We use appropriate technical and organizational measures (secure logins, encrypted storage, restricted access) to protect your data against loss, misuse, or unauthorised access.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will reflect the most recent version. Significant changes will be flagged on our website.