MurielAkahi.com is committed to protecting the personal data of all users — including children, young people, and adults — across our services. This policy outlines how we collect, store, use, and protect personal data in accordance with UK GDPR and the Data Protection Act 2018.

1. Scope

This policy applies to all personal data processed by MurielAkahi.com, including data from learners, coaching clients, advisory participants, and website visitors.

2. Principles

We follow the six principles of UK GDPR:

• Lawfulness, fairness, and transparency

• Purpose limitation

• Data minimisation

• Accuracy

• Storage limitation

• Integrity and confidentiality

3. Data We Process

Depending on the service, we may process:

• Contact details (e.g. name, email, age)

• Intake forms or questionnaires

• Coaching or advisory session notes

• Consent records (especially for minors)

• Technical data (e.g. device/browser via Squarespace analytics)

We do not collect unnecessary or sensitive data unless required for safeguarding or service delivery.

4. Legal Bases

We process data under one or more of the following legal bases:

• Consent (e.g. course registration, coaching intake)

• Contractual necessity (e.g. delivering paid services)

• Legal obligation (e.g. safeguarding disclosures)

• Legitimate interest (e.g. improving site usability)

5. Data Security

We use secure hosting (Squarespace), encrypted connections, and access controls. Staff and contractors are trained in data protection and safeguarding. Coaching notes and learner records are stored securely and reviewed regularly.

6. Data Sharing

We do not sell or share personal data with third parties for marketing. We may share data:

• With safeguarding authorities, if required

• With service providers under strict confidentiality agreements

• With legal or regulatory bodies, where required by law

7. Data Retention

We retain personal data only as long as necessary for service delivery, safeguarding, or legal compliance. Retention periods vary by service and are reviewed annually.

8. Data Subject Rights

You have the right to:

• Access your personal data

• Correct or delete inaccurate data

• Withdraw consent at any time

• Request data portability

• Object to certain types of processing

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, contact: support@murielakahi.com

9. Governance

Our Data Protection Lead oversees compliance, training, and incident response. Contact: support@murielakahi.com

10. Review and Updates

This policy is reviewed annually or in response to changes in law, services, or data practices. Updates will be published on this page.

Last updated: 11 October 2025