Privacy Policy
Last updated: 20 October 2026
Who I am
I’m Dr Rakinder Reehal, an integrative coach, and I’m the “data controller” for the personal information described here. This means I decide how and why it’s used. You can contact me at hello@rakinderreehal.com.
This policy explains what information I collect through this website and my coaching work, why, who I share it with, how long I keep it, and your rights.
What information I collect
When you contact me: your name, email address, phone number (optional), the service you’re interested in, and whatever you write in your message.
When you subscribe to my newsletter: your email address.
When you book a consultation or work with me: your contact details, booking and payment records, and the information you choose to share in sessions. I keep brief session notes. This may include information about your health, wellbeing or personal life, which the law treats as sensitive (“special category”) data.
When you use this website: basic technical information such as your IP address, browser type and the pages you visit, through cookies and server logs (see “Cookies” below).
If you contact me on social media: your message and profile details are held by that platform under its own privacy policy.
How I use your information, and why
| What I do | Why (legal basis) |
|---|---|
| Reply to your enquiry and arrange a consultation | Taking steps at your request before entering a contract; my legitimate interests in responding |
| Deliver coaching sessions and programmes | Performing our contract |
| Keep session notes and information you share about your health or wellbeing | Your explicit consent, which I’ll ask for before we begin |
| Send the monthly newsletter | Your consent. You can withdraw it at any time by clicking “unsubscribe” |
| Take payments and keep financial records | Performing our contract; my legal obligation to keep accounting records |
| Keep the website secure and working | My legitimate interests |
| Share information if someone is at serious risk of harm, or if the law requires it | Protecting vital interests; legal obligation |
Confidentiality
What you share in sessions is confidential. The only exceptions are where I believe you or someone else is at serious risk of harm, or where I’m legally required to share information. Where possible, I’ll discuss this with you first.
Who I share your information with
I never sell your information. I share it only with service providers that help me run my practice, and only as much as they need:
- Website hosting: Hostinger
- Video sessions: Zoom
- Email and newsletter: Hostinger
- Authorities: where I’m legally required to
Transfers outside the UK
Some of these providers may process information outside the UK. Where that happens, I rely on safeguards the UK GDPR allows, such as an adequacy decision or standard contractual clauses.
How long I keep your information
- Enquiries that don’t lead to coaching: 12 months, then deleted.
- Client records and session notes: 5 years after our work ends as required for insurance purposes, then securely deleted.
- Payment and accounting records: 6 years, as required for tax purposes.
- Newsletter subscriptions: until you unsubscribe.
How I keep it safe
Notes are stored in a password-protected, encrypted device. My email is protected by two-factor authentication. Sessions take place on Zoom with a passcode, and are not recorded unless we agree otherwise. I take reasonable steps to protect your information, but no online service is completely secure.
Cookies
This website uses only essential cookies that make the site work. You can also block or delete cookies in your browser settings.
Your rights
Under UK data protection law, you can ask me to:
- tell you what information I hold about you and give you a copy,
- correct information that’s wrong,
- delete your information,
- restrict or object to how I use it,
- give you your information in a portable format,
- stop using it if I rely on your consent, by withdrawing that consent at any time.
To use any of these rights, email hello@rakinderreehal.com. I’ll respond within one month. I don’t make decisions about you using automated processing.
Complaints
If you’re unhappy with how I’ve handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Who this service is for
My services are for adults aged 18 and over, and I don’t knowingly collect information from children.
Links to other sites
This website links to Facebook and Instagram. I’m not responsible for those sites’ privacy practices, so please read their policies.
Changes to this policy
I may update this policy from time to time. The latest version will always be on this page, with the date at the top.