Privacy Statement

 

Sarah Bryer

Privacy Notice

Version: 2.0
Effective date: August 2026
Review date: August 2027

1. About this Privacy Notice

People trust me with important information about their careers, work and sometimes their personal circumstances. Protecting that information is part of providing a professional service.

This Privacy Notice explains what personal information I collect, why I use it, where it may be stored or shared, how long I keep it and the rights you have.

It applies across my business, including my coaching programmes, online programmes, one-to-one services, workshops, webinars, discovery calls, downloadable resources, newsletters, employability training, outplacement services, consultancy and other services I may provide.

My services are intended for adults aged 18 and over.

I do not sell personal information.

​

2. Who I Am

I am Sarah Bryer, a sole trader based in England.

For the purposes of UK data protection law, I am the data controller for the personal information covered by this Privacy Notice. This means I am responsible for deciding how and why that information is used.

Website: www.sarahbryer.co.uk
Email: sarah@sarahbryer.co.uk

Correspondence address:
Unit 168746, Courier Point, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, UK

3. What Information I Collect

The information I collect depends on how you interact with me and the service you use.

It may include:

• your name and contact details;

• your CV, employment history, qualifications and professional experience;

• information about your job search, career goals, applications and interviews;

• LinkedIn or other professional profile information you choose to provide;

• information you provide through enquiry, registration or programme intake forms;

• coaching notes, actions and progress information;

• emails and other communications between us;

• workshop, webinar and programme registration and attendance information;

• information required to provide access to online services or communities;

• feedback and testimonials;

• marketing preferences;

• billing, payment and transaction information; and

• technical information generated when you use my website or online services.

I only aim to collect information that I genuinely need.

Sensitive information

You may sometimes choose to tell me information about your health, disability, ethnicity, religion or other personal circumstances because it is relevant to your career, job search or the support you are asking for.

Some of this may be legally classed as special category personal data.

I do not routinely require this information and please do not provide sensitive information unless it is genuinely relevant.

Where you choose to disclose it and it is necessary for me to use it to provide the support you have requested, I will handle it with additional care and only process it where I have an appropriate lawful basis and condition under data protection law.

4. How I Use Your Information

I may use personal information to:

• respond to enquiries;

• assess whether a service or programme is appropriate for you;

• provide coaching, CV, job-search and career support;

• deliver online and guided programmes;

• provide workshops, webinars, training and consultancy;

• prepare for and follow up coaching sessions;

• provide resources and programme materials;

• manage programme or community access;

• communicate with you about a service you have purchased or registered for;

• process payments and maintain financial records;

• maintain appropriate client and business records;

• improve my services;

• send marketing communications where I am permitted to do so;

• maintain the security of my systems and services; and

• meet my legal, accounting and regulatory obligations.

5. My Lawful Bases

I must have a lawful reason for using personal information.

The main lawful bases I rely on are:

Contract – where processing is necessary to provide a service you have purchased or asked me to provide, or to take steps at your request before entering into a contract.

Legitimate interests – where I have a reasonable business need to use information and doing so does not unfairly override your privacy rights. This may include responding to enquiries, managing client relationships, improving my services, maintaining appropriate business records and protecting my business.

Consent – where you have made a genuine choice to allow a particular use of your information, including marketing where consent is required. You can withdraw your consent at any time.

Legal obligation – where I need to process information to comply with the law, including tax and accounting requirements.

Where special category personal data is processed, I will also ensure that an appropriate additional condition under UK data protection law applies.

6. Recordings

I use Fathom AI to record coaching calls and live sessions within my coaching programmes.

Recordings help me concentrate on the conversation rather than extensive note-taking and allow me to create accurate transcripts, summaries and action points.

I review meeting summaries rather than relying on AI-generated information without human review.

You will be informed that recording is taking place. If you do not want a session to be recorded, tell me and I can turn the recording off.

In group sessions, other participants' names, voices, images or contributions may appear in a recording. Participants should therefore avoid sharing information in a group setting that they would not be comfortable sharing with other members of that group.

Recordings, transcripts and associated summaries are normally retained for up to 12 months, unless there is a legitimate reason to delete them sooner or retain particular information for longer.

7. Artificial Intelligence

I use Artificial Intelligence as a practical tool within my business.

This includes tools such as ChatGPT, Claude, SprintIQ and Fathom AI. The particular tools I use may change as technology develops.

AI may help me with activities such as drafting, research, brainstorming, organising information, analysing written material, improving productivity and creating meeting summaries.

When I use AI to work with client material, I take steps to avoid providing direct identifiers such as your name, email address, contact details or LinkedIn profile. For example, I may work with the professional content from a CV without providing information that directly identifies whose CV it is.

AI supports my work. It does not replace my judgement.

I do not allow AI to make decisions about clients without human review, and I remain responsible for the services, advice and support I provide.

8. Who I Share Information With

I use trusted technology providers to operate my business and deliver my services.

Depending on the service you use, these may include:

• Google Workspace and Google Drive – email, documents, calendars and file storage;

• Wix – website hosting and management;

• HubSpot – customer relationship and enquiry management;

• MailerLite – email communications and marketing;

• Stripe – payment processing;

• Xero – invoicing, accounting and financial records;

• Notion – client and project management, including programme information, forms and CV information;

• Circle – online programme and community delivery;

• Zoom – online meetings, workshops and sessions;

• Fathom AI – meeting recording, transcription and summarisation;

• Zapier – securely automating workflows and transferring information between authorised business systems; and

• AI providers used as described in the Artificial Intelligence section above.

The providers I use may change as my business and technology develop. Where a provider processes personal information on my behalf, I take reasonable steps to use reputable services with appropriate privacy and security measures.

I may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal rights.

I do not sell your personal information.

9. Corporate, Employability and Outplacement Work

Sometimes an organisation may engage me to provide coaching, training, employability or outplacement services to its employees, members or participants.

The organisation may provide me with limited information needed to arrange or administer the service.

I do not routinely report private coaching conversations, CV information or other confidential information back to the organisation.

If information about an individual needs to be shared with the commissioning organisation – for example, agreed attendance or outcome information – this will be agreed with the individual and organisation in advance.

10. Marketing

I use email, LinkedIn, workshops, webinars, downloadable resources and other content to communicate with people who are interested in my work.

I may use MailerLite and HubSpot to manage these communications.

Where consent is required for electronic marketing, I will ask for it. In other circumstances I may send marketing where the law permits me to do so and I have an appropriate lawful basis.

Every marketing email I send will provide a straightforward way to unsubscribe.

You can also ask me to stop sending marketing communications at any time by contacting me at sarah@sarahbryer.co.uk.

Unsubscribing from marketing will not stop essential communications relating to something you have purchased, booked or are currently participating in.

If you unsubscribe, I may retain limited information on a suppression list so that I can make sure you are not accidentally added back to marketing communications.

11. Website, Analytics and Cookies

My website is hosted using Wix and may provide me with basic information about website usage and performance.

I may also use analytics services in the future to understand how people find and use my website and to improve its performance.

Where cookies or similar technologies require your consent, they will only be used in accordance with the choices you make through the relevant cookie controls.

More information about cookies and website tracking will be provided in my Cookie Policy.

12. International Data Transfers

Although I am based in the UK, some of the technology providers I use operate internationally. This means personal information may sometimes be processed or stored outside the UK.

Where this happens, I take reasonable steps to ensure appropriate safeguards are in place.

Depending on the circumstances, these may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved Standard Contractual Clauses or another lawful transfer mechanism.

13. How Long I Keep Information

I do not keep personal information indefinitely simply because I have collected it.

My typical retention periods are:

InformationTypical retention

Client and coaching recordsUp to 7 years after our work together ends

CVs and associated career informationUp to 7 years after our work together ends, unless deleted sooner

Enquiries that do not become clientsUp to 12 months after our last meaningful contact

Workshop and webinar registration informationUp to 2 years

Meeting recordings, transcripts and AI summariesUp to 12 months

Marketing informationUntil you unsubscribe, object or the information is removed through routine list management

TestimonialsWhile I continue to use them, unless permission is withdrawn where applicable

Accounting, invoice and transaction recordsFor the period required by tax, accounting or other applicable law

I may retain information for longer where required by law or where reasonably necessary in connection with a legal claim or dispute.

When information is no longer needed, I will delete or anonymise it as appropriate.

14. Keeping Your Information Secure

I take reasonable and proportionate measures to protect the personal information I hold.

These include:

• using reputable cloud-based business systems;

• password management;

• two-factor authentication on appropriate accounts;

• restricting access to client information;

• cloud backups and recovery measures;

• keeping business systems and devices appropriately protected; and

• reviewing the systems I use and removing information when it is no longer required.

I am a sole trader, so access to client information is generally limited to me and to technology providers that need to process it to provide their services.

No method of storing or transmitting information can be guaranteed to be completely secure, but I take the protection of client information seriously and will respond promptly if I become aware of a potential data breach.

15. Testimonials and Case Studies

I may use testimonials and success stories to explain the results clients have achieved.

These may be:

• recommendations or testimonials you have already made publicly, such as a LinkedIn recommendation;

• anonymised so that you cannot reasonably be identified; or

• published with identifying information where I have your permission to do so.

Where permission is required, you can withdraw it by contacting me. This will apply to future use, although I may not always be able to retrieve material that has already been distributed or independently republished.

16. Your Data Protection Rights

Depending on the circumstances, UK data protection law gives you rights over your personal information.

These may include the right to:

• ask what personal information I hold about you and receive a copy;

• ask me to correct inaccurate or incomplete information;

• ask me to delete personal information in certain circumstances;

• ask me to restrict how information is used;

• object to certain uses of your information, including direct marketing;

• receive certain information in a portable format;

• withdraw consent where I rely on consent; and

• raise concerns about how your information is being handled.

These rights are not absolute and sometimes the law allows or requires me to retain or continue processing particular information.

You will not normally have to pay to exercise your rights.

To make a request, email sarah@sarahbryer.co.uk. I may need to confirm your identity before providing personal information.

17. Complaints

If you have a concern about how I have collected or used your personal information, please contact me first.

I take privacy concerns seriously and will acknowledge and investigate data protection complaints in accordance with my legal obligations.

Contact:

Sarah Bryer
Email: sarah@sarahbryer.co.uk

Correspondence address:
Unit 168746, Courier Point, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, UK

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Further information about making a complaint is available from the ICO.

18. Changes to This Privacy Notice

I will review this Privacy Notice periodically and update it when necessary, including where my services, technology or legal obligations change.

The current version and effective date will always be shown at the top of this notice.

If I make a significant change to how I use personal information, I will take reasonable steps to bring that change to the attention of people affected before the new processing begins.

19. Contact Me

If you have a question about this Privacy Notice, how I use your information or your data protection rights, please contact me.

Sarah Bryer
Email: sarah@sarahbryer.co.uk
Website: www.sarahbryer.co.uk

Correspondence address:
Unit 168746, Courier Point, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, UK