Privacy notice

Who I am

I'm Cam Springett, and I run Cam Springett Coaching. I'm responsible for your information, which the law calls being the controller. You can reach me at coaching@camspringett.cloud.

What I keep

When you sign up:

• your first and last name, and your email address
• what you'd like to work on, and what you write about where you are now and what you want to build
• how you found me, if you tell me
• that you're 18 or over

When you use your space:

• your workbook answers and notes
• the files you upload, such as photos and your VIA strengths report
• which step you're on, and when you last saved

When you pay:

• what you bought, the amount, when you paid, and Stripe's reference for the payment. Stripe takes your card details on its own payment page. I never see or keep them.

Each time you agree to something:

• the exact words you agreed to and their version, the version of this notice, what you chose, and the date and time

To keep the space safe and working:

• a record each time I, or my developer, open your record: who, when, and what
• which emails the space has sent you, and when
• a scrambled code made from your email address and your device's internet (IP) address, used to stop anyone sending the sign-up and sign-in forms too often. The code can't be turned back into either, and it is deleted after a day.

Information about your health

Much of what you write here may be about your health, such as your drinking, your sleep or your mood. The law calls this special category information and protects it more strongly.

I only keep it because you agree to it: when you sign up, so I can reply to you and prepare for our call, and again before you start your workbook, so I can keep it and use it to coach you. You can withdraw your agreement at any time (see Your rights, below).

Why I use it

• To give you your space and the workbook you buy, and to reply to you. The legal basis is our agreement, or the steps you've asked me to take before one.
• To keep and use information about your health. The legal basis is your explicit consent.
• To keep records of payments. The legal basis is my legal obligation under tax law.
• To keep the space secure, log who opens records, and stop misuse of the forms. The legal basis is my legitimate interest in protecting your information.

The space only emails you about your space: your sign-in links and what you've bought. I never use your information for advertising, and I never sell it. Nothing you write is ever put into an AI tool.

Who can see it

• You, and me. If you buy the workbook on its own, your answers are private to you: I can see which step you're on and when you last saved, but not your answers or your files. If you book a discovery call, I'll read them before we speak.
• When you sign up or buy the workbook, I'm emailed your first name and initial, never your answers.
• My developer, Ignite Drive, which builds and looks after the space. They can open your record only to fix a problem, and every opening is logged. Their contract with me covers confidentiality and data protection.
• The services that run the space, listed below. Each handles your information only to provide its service to me, under data protection terms.

I'll only share your information with anyone else if the law requires me to.

The services that run the space

• Supabase: the database, sign-in and file storage. Your information is stored on its servers in Ireland.
• Hostinger: the server that runs this website, which is in India. Your information passes through it while you use the space, but isn't stored there.
• Resend: sends the space's emails, from its servers in the EU.
• Stripe: takes payments, and keeps its own records of them under its own privacy notice, at stripe.com/privacy.

Because Hostinger's server is outside the UK and the EU, your information leaves the UK while you use the space. Hostinger handles it under its data processing terms, which include the contract clauses the UK approves for sending information abroad.

Where it's kept, and how it's protected

• Your information is stored in Ireland, encrypted while it's stored and while it travels.
• The database itself makes sure each person can only read or change their own information, and this is tested before anyone real uses the space.
• My account needs a second step to sign in.
• Backups are kept for no more than 30 days, so anything deleted leaves them within 30 days.

If something ever went wrong that put your information at risk, I'd tell you, and report it to the Information Commissioner's Office where the law requires.

How long I keep it

• If you sign up, don't buy anything, and we don't work together, your space and everything in it is deleted 3 months after you last signed in.
• If you buy the workbook on its own, it stays yours to use for as long as your account exists. If you haven't signed in for 12 months, your space comes up for deletion.
• If you coach with me, your space is kept for 2 years after your coaching ends, or after your last sign-in if that's later, and then deleted.
• Payment records are kept for six years, as tax law requires, even when everything else is deleted.

You can ask me to delete everything sooner, at any time.

Your rights

Under UK data protection law, you can ask me to:

• show you what I hold about you, and give you a copy
• correct anything that's wrong
• delete it
• give it to you in a form you can take elsewhere
• stop or limit how I use it

You can also withdraw your agreement to my keeping information about your health, at any time. That doesn't undo anything before you withdrew. Your space can't stay open without it, so I'll send you a copy of everything first, then delete it.

To do any of these, email coaching@camspringett.cloud. It's free, and I'll reply within a month.

If you're unhappy with how I've handled your information, please tell me first, so I can put it right. You can also complain to the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113.

Cookies

The space only uses the cookies it needs to keep you signed in, for up to 30 days. There are no advertising cookies, no tracking and no analytics. Stripe's payment page is Stripe's own, and sets its own cookies.

Adults only

The space is for people aged 18 and over.

Changes to this notice

If I change this notice in a way that affects information about your health, I'll ask for your agreement again the next time you sign in. The date at the top shows when it last changed.