Privacy Policy

Upstairs Circus - ADHD Supportive Coaching

Last updated: 12 June 2026

​

1. Who We Are

Upstairs Circus is an ADHD and neurodiversity coaching service operated as a sole trader in the United Kingdom. We are committed to protecting your personal data and being transparent about how we use it.

If you have any questions about this policy, please contact us:

•       Email: ezzy@upstairscircus.co

•       Website: upstairscircus.co

 

As a UK-based business, we process your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

2. What Personal Data We Collect

We only collect the personal data that is necessary to provide our coaching services and respond to enquiries. This includes:

•       Your name and email address, submitted via our contact or booking form.

•       Any additional information you choose to share when making an enquiry or booking a session (for example, a brief description of what you are looking for from coaching).

•       Booking and scheduling data collected via Calendly when you book a session (see section 5 for more detail).

•       Basic connection data collected during video sessions via Google Meet (see section 5).

 

We do not collect payment card details directly. We do not collect sensitive personal data (such as health records or diagnosis information) through our website. Any personal disclosures made during coaching sessions are treated with strict confidentiality in line with our coaching agreement.

 

3. How We Use Your Data

We use your personal data for the following purposes:

•       To respond to your enquiry or contact form submission.

•       To schedule and manage coaching appointments via Calendly and Google Calendar.

•       To conduct coaching sessions via Google Meet.

•       To communicate with you about your coaching engagement (session reminders, rescheduling, follow-up).

•       To comply with any legal obligations that apply to us.

 

We do not use your data for automated decision-making or profiling. We do not send marketing emails unless you have explicitly opted in to receive them.

 

4. Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

•       Contractual necessity: to fulfil our obligations to you as a coaching client (Article 6(1)(b)).

•       Legitimate interests: to respond to enquiries and manage our business operations in a way that does not override your rights (Article 6(1)(f)).

•       Legal obligation: where we are required to retain records to comply with UK law (Article 6(1)(c)).

 

5. Third-Party Services

We use the following third-party tools to operate our business. Each has its own privacy policy and acts as a data processor on our behalf:

Calendly

We use Calendly to manage Discovery Call bookings. When you book a session, Calendly collects your name, email address, and scheduling preferences. Calendly is a US-based service and data may be transferred outside the UK; Calendly maintains appropriate safeguards including Standard Contractual Clauses.

Calendly's privacy policy: calendly.com/privacy

Google Calendar

We may use Google Calendar to schedule and manage coaching appointments. When a session is booked, Google Calendar may process your name, email address, and event details. Google is a US-based service; Google maintains Standard Contractual Clauses and other appropriate safeguards for international transfers of personal data from the UK.

Google's privacy policy: policies.google.com/privacy

Google Meet

We use Google Meet to conduct coaching sessions remotely. Google Meet may collect connection data, device information, and session metadata. We do not record sessions without your explicit consent. As with Google Calendar, Google maintains appropriate UK data transfer safeguards.

Google's privacy policy: policies.google.com/privacy

We do not sell, rent, or share your personal data with any other third parties for their own marketing purposes.

 

 

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

•       Enquiry and contact data: up to 12 months from the date of last contact, unless you become a client.

•       Client booking and session data: up to 3 years from the end of the coaching relationship, in line with standard UK business record-keeping practice.

•       Any data we are required to retain for legal or tax purposes: up to 6 years in accordance with HMRC guidance.

 

After these periods, your data will be securely deleted or anonymised.

 

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

•       Right of access: you can request a copy of the personal data we hold about you.

•       Right to rectification: you can ask us to correct any inaccurate or incomplete data.

•       Right to erasure: you can ask us to delete your data in certain circumstances.

•       Right to restrict processing: you can ask us to limit how we use your data.

•       Right to data portability: you can request your data in a commonly used, machine-readable format.

•       Right to object: you can object to our processing of your data based on legitimate interests.

 

To exercise any of these rights, please contact us at ezzy@upstairscircus.co. We will respond within one calendar month.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

 

8. Data Security

We take reasonable steps to protect your personal data from unauthorised access, loss, or disclosure. This includes using secure email communications, password-protected devices, and trusted third-party platforms with their own security measures.

While we do our best to protect your data, no transmission over the internet is entirely secure. If you have concerns about sharing sensitive information, please raise them with us before submitting.

 

9. Cookies

Our website may use basic cookies necessary for the site to function (for example, to remember form inputs). We do not currently use analytics, advertising, or tracking cookies. If this changes, we will update this policy and, where required, seek your consent.

 

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will always indicate when it was last revised. We encourage you to review this policy periodically.

If we make significant changes that affect how we use your data, we will contact you directly where we have your email address.

 

​