Last updated: 10 September 2026
I'm Siarah Khan, a coach based in the UK, and I'm the "data controller" for any personal information you share with me through this website. This notice explains what I collect, why, and what your rights are. I've tried to keep it simple.
I only collect what I need to respond to you and, if we go on to work together, to deliver coaching. That's usually:
I use this information to reply to your enquiry, arrange and deliver sessions, and keep the records I'm required to keep as a business. My lawful basis under UK GDPR is usually that you've asked me to get in touch (contract / pre-contract steps) or that it's in my legitimate interest to respond to enquiries. Where I rely on your consent, you can withdraw it at any time by emailing me.
Coaching conversations can sometimes touch on health or wellbeing. Under UK GDPR, that's treated as "special category data" and needs an extra layer of protection. By choosing to share this with me — for example, in a session — you're giving your explicit consent for me to process it for the purpose of our coaching work. You're always in control of what you choose to share, and you can ask me to delete it at any time.
Like most small businesses, I use a few trusted services to run things. They only process your data on my behalf:
Some of these providers store data outside the UK. Where they do, they rely on recognised safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
Booking through Calendly and filling in the consultation form take you to their own websites, which may set their own cookies under their own privacy policies — this site itself doesn't set any.
What you share with me in sessions is held in confidence. If I'm engaged by an organisation, I only ever share agreed themes and progress with the business — never the specifics of what someone tells me one-to-one. The only exceptions are where I'm legally required to disclose something — for example, as part of a legal process — or where I believe someone is at serious risk of harm and need to involve the emergency services.
I keep client records and notes access-limited to me, stored on password-protected accounts and devices.
I keep enquiry and coaching records for up to 6 years, in line with standard UK business record-keeping practice, then delete them.
Under UK GDPR you can ask me to:
To do any of these, just email me at siarah@siarahkhan.com. I'll respond within a month.
If you're unhappy with how I've handled your information, you also have the right to complain to the Information Commissioner's Office at ico.org.uk — though I'd always appreciate the chance to put things right first. If you're based outside the UK, you may also be able to complain to your own country's data protection authority.
If I change how I handle personal information, I'll update this page and the date at the top.
← Back to siarahkhan.com