top of page

Privacy Policy

Rebel Bridge Studio customer privacy notice

This privacy notice tells you what to expect us to do with your personal information.

​

  • Contact details

  • What information we collect, use, and why

  • Lawful bases and data protection rights

  • Where we get personal information from

  • How long we keep information

  • Who we share information with

  • How to complain

 

Contact details

Telephone: +44 7446052099

Email: danny@rebelbridgestudio.com

 

What information we collect, use, and why

We collect or use the following information to provide and improve products and services for clients:

 

  • Names and contact details

  • Addresses

  • Gender

  • Pronoun preferences

  • Occupation

  • Date of birth

  • Marital status

  • Third party information (such as family members or other relevant parties)

  • Payment details (including card or bank information for transfers and direct debits)

  • Transaction data (including details about payments to and from you and details of products and services you have purchased)

  • Usage data (including information about how you interact with and use our website, products and services)

  • Information relating to compliments or complaints

  • Video recordings

  • Audio recordings (e.g. calls)

  • Records of meetings and decisions

  • Account access information

  • Website user information

We also collect or use the following special category information to provide and improve products and services for clients. This information is subject to additional protection due to its sensitive nature:

  • Racial or ethnic origin

  • Political opinions

  • Religious or philosophical beliefs

  • Health information

  • Sexual orientation information

 

We collect or use the following personal information for the operation of client or customer accounts:

 

  • Names and contact details

  • Addresses

  • Purchase or service history

  • Account information, including registration details

  • Information used for security purposes

  • Marketing preferences

  • Technical data, including information about browser and operating systems

 

We collect or use the following personal information for information updates or marketing purposes:

 

  • Names and contact details

  • Addresses

  • Profile information

  • Marketing preferences

  • Purchase or account history

  • Website and app user journey information

  • IP addresses

 

We collect or use the following personal information for research or archiving purposes:

 

  • Names and contact details

  • Addresses

  • Purchase or client account history

  • Website and app user journey information

  • IP addresses

 

 

 

We collect or use the following personal information to comply with legal requirements:

 

  • Name

  • Contact information

  • Identification documents

  • Client account information

  • Health and safety information

  • Any other personal information required to comply with legal obligations

 

We collect or use the following personal information to protect client welfare:

 

  • Names and contact information

  • Client account information

  • Health and wellbeing information

  • Emergency contact details

 

We collect or use the following personal information for recruitment purposes:

 

  • Contact details (eg name, address, telephone number or personal email address)

  • Date of birth

  • National Insurance number

  • Copies of passports or other photo ID

  • Employment history (eg job application, employment references or secondary employment)

  • Education history (eg qualifications)

  • Right to work information

 

We collect or use the following personal information for dealing with queries, complaints or claims:

 

  • Names and contact details

  • Addresses

  • Payment details

  • Account information

  • Purchase or service history

  • Call recordings

  • Photographs

  • Relevant information from previous investigations

  • Customer or client accounts and records

  • Financial transaction information

  • Information relating to health and safety (including incident investigation details and reports and accident book records)

  • Correspondence

 

Lawful bases and data protection rights

 

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

 

 

Our lawful bases for the collection and use of your data

 

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • The legitimate interest for processing personal information is to deliver professional coaching, consultancy and training services to clients. This requires collecting and using relevant personal information (such as contact details, professional context, and information voluntarily shared during sessions) in order to understand client needs, tailor services, and provide effective and appropriate support. The processing is necessary because these services rely on client-specific information to design, deliver and evaluate coaching and training outcomes. Without processing this information, it would not be possible to provide a personalised or effective service. The benefits include improved service quality, relevance of training content, and the ability to meet contractual obligations to clients. The potential risks to individuals are low because information is limited to what is necessary, handled confidentially, stored securely, and not shared without a lawful basis. This processing does not override the rights and freedoms of individuals, as clients knowingly engage in services where discussion of relevant personal and professional experiences is expected, and they retain control over what information they choose to disclose.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

  • Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing, shelter or serious risk to safety or wellbeing arising from coaching contexts. All of your data protection rights may apply, except the right to object and the right to portability.

 

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • The legitimate interest for processing personal information for the operation of client and customer accounts is to manage professional relationships, deliver contracted services, maintain accurate records, and ensure effective communication with clients. This includes collecting and using contact details, contractual information, billing information, and relevant service-related records necessary to administer accounts and fulfil agreed services. This processing is necessary because operating client accounts requires the accurate identification of clients, maintenance of service records, scheduling, invoicing, and ongoing communication to deliver services efficiently and meet contractual and legal obligations. Without processing this information, it would not be possible to provide services in a structured, accountable, or secure manner. The benefits of this processing include reliable service delivery, accurate record-keeping, continuity of service, and the ability to respond appropriately to client enquiries and support needs. In limited and exceptional circumstances, personal information may also be processed where necessary to protect the vital interests of a client, such as where there is a serious and immediate risk to an individual’s safety or wellbeing and appropriate action is required. The potential impact on individuals is low because only information that is relevant and proportionate to account management and service delivery is collected. Information is handled confidentially, stored securely, retained only for as long as necessary, and not shared with third parties unless there is a lawful basis to do so. This processing does not override the rights and freedoms of individuals, as clients reasonably expect their information to be used for account administration and service provision when engaging professional consultancy or coaching services, and they retain control over their information, including the right to access, rectify, or object where appropriate.

 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

 

  • Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for, life sustaining food, water, clothing, shelter or serious risk to safety or wellbeing arising from coaching contexts. All of your data protection rights may apply, except the right to object and the right to portability.

 

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

 

  • The legitimate interest for processing personal information for information updates and limited marketing purposes is to maintain professional communication with clients and relevant contacts about services, service updates, training opportunities, and content directly related to their existing or reasonably expected interests. This typically involves using basic contact information such as name, email address, and professional details. This processing is necessary to support ongoing client relationships, provide relevant service updates, and inform individuals about developments, insights, or offerings that are closely aligned with the services they have engaged with or expressed interest in. As a professional consultant, maintaining informed and relevant communication is a proportionate and expected part of service continuity and business development. The benefits of this processing include keeping clients appropriately informed, improving service relevance, and ensuring that communications are tailored, timely, and professionally useful rather than generic. It also supports transparency and continuity in the professional relationship. The potential risks to individuals are low because communications are limited, relevant, and directed only to individuals with an existing professional relationship or a reasonable expectation of receiving such updates. Personal information used for this purpose is minimal, not shared with third parties for unrelated marketing, and is stored securely. Individuals are provided with clear opt-out options and can object to or withdraw from communications at any time.

 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

 

Our lawful bases for collecting or using personal information for research or archiving purposes:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

 

Our lawful bases for collecting or using personal information to comply with legal requirements:

 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

 

Our lawful bases for collecting or using personal information to protect client welfare are:

 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

  • Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.

 

Our lawful bases for collecting or using personal information for recruitment purposes are:

 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

 

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

 

 

Where we get personal information from

 

  • Directly from you

  • Regulatory authorities

  • Legal bodies or professionals (such as courts or solicitors)

  • Publicly available sources

  • Previous employment

  • Providers of marketing lists and other personal information

  • Suppliers and service providers

  • Third parties:

    • Personal information may be obtained from third parties where this is necessary to deliver consultancy, coaching, and training services or to operate professional client relationships. These third parties may include:

      • Clients or client organisations who provide contact details and relevant professional information about their employees or representatives for the purpose of service delivery

      • Referral partners, professional networks, or intermediaries who introduce prospective clients and share basic contact information with consent or a reasonable expectation of contact

      • Event organisers, training providers, or booking platforms where individuals register for services and provide their details as part of the registration process

      • Publicly available sources, such as professional websites, LinkedIn profiles, or organisational directories, where information is accessed for legitimate professional engagement purposes

      • Technology and service providers (for example, scheduling, CRM, or payment platforms) where individuals input their own information when engaging with my services I only collect personal information from third parties where there is a lawful basis to do so, the information is relevant to the services provided, and individuals would reasonably expect their information to be shared for professional and administrative purposes. Any information obtained is limited to what is necessary, handled confidentially, and used in accordance with UK data protection law.

 

How long we keep information

 

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, including the provision of coaching, consultancy and training services, compliance with legal, accounting and regulatory obligations, and the establishment, exercise or defence of legal claims.

 

Client contact details, contracts, service records, and business correspondence are retained for the duration of the professional relationship and for up to six years following the end of the client engagement, in line with applicable legal limitation periods and professional accountability requirements.

 

Financial records, including invoices and accounting information, are retained for a minimum of six years in order to comply with HMRC and statutory record-keeping obligations.

 

Coaching notes, session records, assessment materials, and related documentation, which may include sensitive or reflective personal information, are retained for up to three years following the conclusion of the most recent coaching or service engagement. Where a client re-engages with services after a period of absence, the retention period recommences from the end date of the latest engagement to support continuity of service, appropriate professional record-keeping, and the management of any follow-up enquiries or complaints. These records are securely deleted or anonymised once the retention period has expired, unless a longer retention period is required by law or ongoing contractual necessity.

 

Audio or video recordings of sessions are retained for up to three years after the conclusion of the relevant service period and are then securely deleted.

 

Training attendance records and feedback forms are generally retained for up to three years for quality assurance, evaluation, and professional record-keeping purposes.

 

Marketing contact details are retained until an individual withdraws consent, opts out, or where there has been no meaningful engagement for a reasonable period, after which the information is securely deleted or suppressed.

 

Website enquiries and contact form submissions are typically retained for up to twelve months unless they result in an ongoing client relationship.

 

Where personal information is provided by client organisations about their employees for the purpose of delivering services, such information is retained only for as long as necessary to deliver the agreed services and for an appropriate period thereafter in accordance with contractual, legal, and professional obligations.

 

Personal information is stored securely using email systems, cloud storage, and professional administrative tools. Information is periodically reviewed and securely deleted or anonymised when it is no longer required, in accordance with the storage limitation principle under UK data protection law.

 

Who we share information with

 

Others we share personal information with

  • Professional or legal advisors

  • Regulatory authorities

  • External auditors

  • Organisations we’re legally obliged to share personal information with

  • Publicly on our website, social media or other marketing and information media

  • Suppliers and service providers

  • Professional consultants

 

 

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

 

Last updated

23rd February 2026

D Kett

bottom of page