Last updated: October 2026 Floreya (“we”, “us”, “our”) is committed to protecting your personal information and respecting your privacy. This Privacy Notice explains how we collect, use, store and protect your data when you visit our website, contact us, or use our coaching and consultancy services. It also outlines your rights under UK GDPR and how you can exercise them. 1. Who we are Floreya Consultancy Newport, NP10 8FT United Kingdom Email: caroline@floreya.co.uk We provide ADHD-focused coaching, training and consultancy services for individuals, families and workplaces. 2. The personal data we collect We may collect the following information: • Contact details (name, email address, phone number) • Enquiry information (details you share when contacting us) • Coaching information (notes, goals, challenges, session records) • Website usage data (cookies, IP address, browser type, pages visited) • Payment information (if you purchase services) • Business information (if you engage us for workplace consultancy) We only collect the information necessary to deliver our services effectively and legally. 3. How we collect your data We collect data in the following ways: • When you contact us via forms, email or phone • When you book or attend coaching sessions • When you sign up for resources, newsletters or events • Through cookies and analytics when you use our website • When you purchase services or enter into a contract with us 4. How we use your data We use your personal information to: • Respond to enquiries • Deliver coaching, consultancy and training services • Manage bookings, payments and administration • Personalise your coaching experience • Improve our website and services • Send updates or resources (only with your consent) • Meet legal, regulatory or accounting obligations We do not sell your data or share it with third parties for marketing. 5. Legal basis for processing We process your data under the following lawful bases: • Contract – to provide coaching or consultancy services • Consent – for newsletters or optional communications • Legitimate interests – to improve our services and website • Legal obligation – for accounting, tax or regulatory requirements 6. How we store and protect your data We use secure, industry standard systems to store your information, including encrypted cloud services and password protected devices. Access is restricted to authorised personnel only. We retain your data only for as long as necessary: • Coaching records: typically 7 years (professional practice standard) • Enquiry data: 12 months • Website analytics: up to 26 months • Financial records: 6 years (legal requirement) 7. Sharing your data We may share your data with: • Payment processors (e.g., Stripe, PayPal) • Email or scheduling platforms (e.g., Microsoft 365, Calendly) • Professional bodies (e.g., ICF) only if required • Legal or regulatory authorities (rare and only when necessary) All third parties are GDPR-compliant and only process data on our instructions. 8. Your rights under UK GDPR You have the right to: • Access your personal data • Correct inaccurate information • Request deletion of your data • Restrict or object to processing • Withdraw consent at any time • Request data portability To exercise any of these rights, email caroline@floreya.co.uk. 9. Cookies and website tracking Our website uses cookies to: • Improve functionality • Analyse website traffic • Enhance user experience You can manage or disable cookies through your browser settings. 10. Children’s data We do not knowingly collect data from children under 16 without parental or guardian consent. 11. Changes to this notice We may update this Privacy Notice from time to time. The latest version will always be available on our website. 12. Contact us If you have questions about this Privacy Notice or how we handle your data, contact: Caroline Powell Founder, Floreya Consultancy Email: caroline@floreya.co.uk