Privacy Policy

Last updated: 12 October 2026

About this policy

This privacy policy explains how I collect, use, store and protect your personal information when you visit my website, contact me or work with me.

I am Georgia Taylor Foster, trading as GTF Coaching, and I am the data controller responsible for your personal information.

If you have any questions about this policy or how your information is handled, please contact me at:

Email: georgiataylorfoster@gmail.com

The information I collect

Depending on how you interact with me, I may collect:

  • Your name and contact details, including your email address and telephone number

  • Information you provide through my website, by email or during an introductory conversation

  • Your coaching goals, intentions and reasons for seeking support

  • Information about your physical and mental health

  • Information about medication and supplements

  • Information about previous experiences with psychedelics or microdosing

  • Relevant information about your family history, relationships, emotional experiences and behavioural patterns

  • Notes made during or following coaching sessions

  • Appointment, communication and administrative records

  • Invoicing and payment records, although I do not collect or store your bank or card details

Please do not provide information about suppliers or unnecessary details concerning potentially unlawful activity.

I only collect information that is reasonably necessary to understand your circumstances, provide appropriate coaching support and manage our work together.

My services are intended for people aged 18 and over. I do not knowingly collect information from anyone under 18.

Sensitive personal information

Some of the information you provide about your physical or mental health, medication, emotional wellbeing or previous experiences may be classed as special category data under data protection law.

I will ask for your explicit consent before collecting and using this information. You can withdraw that consent at any time by contacting me. Withdrawing consent will not affect anything I have already done lawfully, but it may mean I am unable to continue providing a service that depends on this information.

How I use your information

I may use your information to:

  • Respond to an enquiry and arrange an introductory call

  • Assess whether my coaching services are appropriate for you

  • Prepare for and provide coaching sessions

  • Understand your intentions, circumstances and support needs

  • Tailor our work to your individual exploration

  • Maintain appropriate coaching and session records

  • Communicate with you about appointments and our work together

  • Create invoices and maintain financial and tax records

  • Protect your wellbeing or that of another person in exceptional circumstances

  • Meet my professional, legal, regulatory and insurance obligations

  • Establish, exercise or defend a legal claim

  • Maintain the security and operation of my website and business systems

My lawful reasons for using your information

Under UK data protection law, I must have a lawful basis for using personal information.

Depending on the circumstances, I rely on:

  • Steps before entering a contract, when you contact me about potentially working together

  • Performance of a contract, when information is needed to provide the services we have agreed

  • Legal obligations, including maintaining appropriate financial and tax records

  • Legitimate interests, including operating my practice, responding to enquiries, maintaining appropriate records and protecting my legal rights

  • Your explicit consent, when I process sensitive information about your health or wellbeing

  • Vital interests, in exceptional circumstances involving a serious and imminent risk to someone’s life or safety

Where sensitive information is needed to establish, exercise or defend a legal claim, I may also process it for that limited purpose.

Typeform and your intake form

If you agree to take part in a microdosing coaching programme, I may invite you to complete an intake form using Typeform.

Your answers may include sensitive personal information. I will download your completed response as a PDF and upload it to your confidential client record in Practice Better.

Once I have confirmed that it has been transferred successfully, I will delete the response from Typeform within seven calendar days. I will also delete any temporary copy stored on my computer after verifying the upload.

Deleted information may remain in Typeform’s secure backup systems for a limited period in accordance with its own retention and deletion processes.

How your information is stored

Practice Better is my principal system for holding client records, coaching notes, documents and invoices.

I also use:

  • Squarespace to operate my website and receive website enquiries

  • Typeform for the microdosing intake form

  • Gmail for email communications

  • Zoom for online sessions

  • WhatsApp for limited appointment and practical communications

Zoom sessions are not recorded.

I try to keep sensitive information out of ordinary email and WhatsApp messages wherever reasonably possible. Information that needs to form part of your coaching record may be transferred or summarised in Practice Better.

These service providers process information according to their own privacy and security terms. Some may use systems or service providers located outside the UK, including in the European Economic Area and North America. Where personal information is transferred internationally, I rely on the safeguards used by the relevant provider, such as an adequacy decision or approved contractual protections.

Who I share information with

I do not sell your personal information.

Your information may be processed by the trusted service providers that help me operate my practice, including those listed above.

I may also share limited information:

  • When you have given me clear permission

  • With a lawyer, insurer, accountant or other professional adviser where reasonably necessary

  • Where I am required to do so by law, a court, a regulator or another authorised body

  • Where there is a serious and imminent risk of harm to you or another person

  • Where necessary to establish, exercise or defend a legal claim

If I discuss my work in professional supervision, I will use anonymised information wherever possible and will not intentionally identify you.

Confidentiality

The information you share during coaching is treated as confidential.

Confidentiality may need to be broken in exceptional circumstances, including where disclosure is required by law or where I reasonably believe that there is a serious and imminent risk of harm to you or someone else. Wherever it is appropriate and safe to do so, I will discuss this with you before making a disclosure.

How long I keep your information

I keep personal information only for as long as it is reasonably needed.

My usual retention periods are:

  • Initial enquiries that do not lead to coaching: up to 12 months after our last contact

  • Typeform responses: deleted from Typeform within seven calendar days after successful transfer to Practice Better

  • Client records and coaching notes: six years after our work together ends

  • Invoices and tax records: for the period required by HMRC, normally at least five years after the relevant 31 January tax return deadline

I may retain information for longer where this is required by law, my insurer or in connection with a complaint or legal claim.

At the end of the relevant period, information will be securely deleted or anonymised.

Keeping your information secure

I take reasonable steps to protect personal information from loss, misuse, unauthorised access or disclosure. These include using password-protected systems, appropriate account security and two-factor authentication where available.

No online service can be guaranteed to be completely secure. If I become aware of a personal data breach that presents a risk to you, I will take appropriate action and notify you and the Information Commissioner’s Office where required.

Website cookies and analytics

My Squarespace website uses cookies and similar technologies that are necessary for it to operate properly and securely. Squarespace may also collect limited technical information, such as browser type, device information, pages visited and approximate location.

I do not currently use advertising pixels or intentionally use Google Analytics.

Where non-essential analytics or similar cookies are used, visitors will be given the opportunity to accept or reject them through the website’s cookie settings.

You can also manage or delete cookies through your browser. Disabling certain cookies may affect how the website functions.

Your data protection rights

Depending on the circumstances, you may have the right to:

  • Ask for a copy of the personal information I hold about you

  • Ask me to correct inaccurate or incomplete information

  • Ask me to delete your information

  • Ask me to restrict how your information is used

  • Object to certain uses of your information

  • Receive certain information in a portable format

  • Withdraw your consent at any time

These rights are not absolute, and in some circumstances I may need to retain information for legal, regulatory or professional reasons.

To exercise any of these rights, contact me at [insert your correct email address]. I will normally respond within one month.

You also have the right to complain to the Information Commissioner’s Office:

Website: www.ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

I would appreciate the opportunity to address your concerns directly first, although you are not required to contact me before approaching the ICO.

Changes to this policy

I may update this policy when my services, systems or legal responsibilities change. The latest version will always be available on my website, with the date of the most recent update shown at the top.