Privacy Policy

Who we are

This website and the programmes, courses and services sold on it are run by GEM Consultancy Ltd, trading as GEM Consultancy UK (company number 14080426). In this policy "we", "us" and "our" means GEM Consultancy Ltd.

We are the controller of the personal data described in this policy. If you have any questions, or want to use any of your rights, email Gemma@gemconsultancyuk.com.

The information we collect

• Contact details such as your name, email address and phone number, when you opt in to a freebie, buy something, book a call or contact us.
• Purchase details such as what you bought, when and how much you paid. Card payments are handled by our payment provider, Stripe. We never see or store your full card details.
• Business and financial information you choose to share with us, for example on application forms, questionnaires, coaching calls or 1:1 work.
• Recordings and notes of coaching and group calls, where calls are recorded. We always tell you when a call is being recorded.
• Programme progress, such as the checklist ticks you make in our member hub, and notes our team keeps about your onboarding.
• Website and email data such as pages visited, links clicked and whether you opened our emails, collected through cookies and similar technologies.

How and why we use it

• To deliver what you have bought, give you access to courses and programmes, and support you. Lawful basis: performance of a contract.
• To take payment, keep accounts and meet our tax and legal obligations. Lawful basis: legal obligation.
• To send you emails about our free resources, programmes and offers. You can unsubscribe at any time using the link in every email. Lawful basis: consent, or our legitimate interests where you are an existing customer.
• To improve our website, content and services and keep them secure. Lawful basis: legitimate interests.

We never sell your personal data.

Who we share it with

We only share your data with trusted suppliers who help us run the business, and only what they need. These include our website, CRM and email platform (FEA Create, powered by HighLevel), our payment provider (Stripe), our video call and recording tools, our booking and form tools, our member hub (hosted by Cloudflare, with data stored in London by Supabase and sign-in emails sent by Resend), and our professional advisers. Some of these suppliers store data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement.

We may also share data where the law requires it, for example with HMRC.

How long we keep it

We keep customer and financial records for six years after the end of the tax year they relate to, as required by UK tax law. We keep marketing contact details until you unsubscribe or ask us to delete them. Call recordings are kept only for as long as they are useful to your programme. Your member hub account, progress and team notes are kept while you are a member and deleted 18 months after you leave the programme.

Cookies

Our website uses cookies to make it work, to understand how it is used and to measure our marketing. You can control cookies through your browser settings. Blocking some cookies may affect how the site works.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct anything that is wrong
• ask us to delete your data, or restrict how we use it
• object to us using your data, including for marketing
• withdraw your consent at any time
• ask for your data in a portable format

To use any of these rights, email Gemma@gemconsultancyuk.com. We will reply within one month.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.