Privacy Policy

Last Updated: July 31, 2025

This Privacy Policy describes how InnerNorth Atlas ("we," "us," or "our") collects, uses, and shares your personal data when you use our online coaching and consulting service platform (the "Platform"). We are committed to protecting your privacy and handling your data in an open and transparent manner.

For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, InnerNorth Atlas is the data controller.

Our Contact Details

InnerNorth Atlas
[Your Virtual Office/Business Address]
[Your Business Email Address]
[Your Business Phone Number (Optional)]

Our Data Protection Commitment: As a UK-based firm, we are the data controller for the purposes of UK GDPR. We are committed to complying with all applicable data protection laws, including the EU General Data Protection Regulation (GDPR) when serving clients in the European Union, and other international data privacy laws as they apply.

1. What Personal Data Do We Collect?

We collect personal data to provide and improve our Platform and coaching/consulting services. The types of personal data we collect depend on how you interact with us (e.g., as a service provider/coach/consultant or a service buyer/client).

a. Data You Provide to Us:

Account Information: When you create an account, we collect your name, email address, password, and chosen username.
Provider/Coach/Consultant Profile Information: If you are a service provider (coach or consultant), we collect information necessary to create your profile, such as your business name, professional background, areas of expertise, coaching/consulting approach, professional qualifications/certifications (e.g., ICF Certified), testimonials (if provided by you), services offered, pricing, bank details for payouts, and contact information.
Client Information: If you are a service buyer (client), we collect information related to your service requests, coaching/consulting needs, goals, preferences, and communication with service providers.
Session Content (Sensitive Data Consideration): While we do not actively monitor or record private coaching/consulting sessions, any data exchanged via the Platform's messaging or file-sharing features related to the substance of your coaching/consulting sessions may be stored on our servers. Please be mindful of the personal or sensitive information you choose to share. (This is a crucial addition for coaching/consulting to manage expectations and liabilities).
Transaction Data: Details about services you purchase or provide through the Platform, including payment card details (processed securely by our payment processor, we do not store full card numbers), billing address, and transaction history.
Communications: Any information you provide when you communicate with us, service providers, or service buyers through our Platform's messaging features, email, or customer support.

b. Data We Collect Automatically:

Usage Data: Information about how you use our Platform, including pages viewed, services searched for, interactions with listings, and referral sources.
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access the Platform.
Cookie Data: Information collected through cookies and similar tracking technologies as described in our [Link to your Cookie Policy - highly recommended to have a separate one] Cookie Policy.

c. Data We Collect from Third Parties:

We may receive data about you from third-party payment processors (e.g., Stripe, PayPal) regarding your transactions.
We may receive data from identity verification services to ensure compliance and security on the Platform.
Referral Data: If you came to our Platform via a partner or affiliate, we might receive information about your referral source.

2. How Do We Use Your Personal Data?

We process personal data based on specific lawful bases under UK GDPR and, where applicable, EU GDPR, for the following purposes:

To Provide and Maintain the Platform and Services (Contractual Necessity):
- To register you as a user and manage your account.
- To enable you to offer, search for, and purchase coaching and consulting services.
- To process payments and payouts.
- To facilitate secure communication between service providers and clients regarding their sessions and agreements.
- To provide customer support and service.
To Improve Our Platform and Services (Legitimate Interests):
- To understand how users interact with our Platform, troubleshoot issues, and enhance user experience.
- To personalise your experience on the Platform (e.g., recommending relevant coaches/consultants or service packages).
- To conduct data analysis, testing, and research.
For Marketing and Promotion (Consent or Legitimate Interests):
- To send you updates, newsletters, and promotional offers about our services (where you have consented or where we have a legitimate interest to do so). You can opt-out at any time.
For Security and Fraud Prevention (Legal Obligation & Legitimate Interests):
- To detect, prevent, and address fraudulent or illegal activity.
- To protect the security and integrity of our Platform and users.
To Comply with Legal Obligations (Legal Obligation):
- To comply with applicable laws, regulations, and legal processes (e.g., tax, accounting, anti-money laundering requirements).

3. Who Do We Share Your Personal Data With?

We may share your personal data with the following categories of recipients:

Other Platform Users:
- Service Providers (Coaches/Consultants): If you are a client, your name, service requests, coaching/consulting needs, and communication will be visible to providers you interact with.
- Service Buyers (Clients): If you are a provider, your profile information, services offered, and communication will be visible to clients.
Third-Party Service Providers: We work with trusted third-party service providers who perform functions on our behalf, such as:
- Payment Processors: To handle secure payment transactions (e.g., Stripe, PayPal).
- Cloud Hosting Providers: To store our data (e.g., AWS, Google Cloud).
- Analytics Providers: To help us understand Platform usage (e.g., Google Analytics).
- Customer Support Tools: To manage customer queries.
- Communication Tools: For internal messaging, video conferencing integration (if applicable).
Legal and Regulatory Authorities: When required by law or to protect our rights, property, or safety, or that of our users or others.
Business Transfers: In connection with a merger, acquisition, sale of assets, or other business transaction involving [Your Company Name], your personal data may be transferred to the acquiring entity.

4. International Data Transfers

We store and process your data primarily within the UK and the European Economic Area (EEA). If we transfer your personal data outside the UK or EEA, we ensure that appropriate safeguards are in place. These safeguards include:

Transferring to countries that the UK or EU has deemed to provide an adequate level of data protection.
Using legal transfer mechanisms such as Standard Contractual Clauses (SCCs) and the UK Addendum to ensure your data is protected to the same high standards as within the UK.
Where applicable, we will rely on your explicit consent for the transfer of your data.

5. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration, disclosure, or destruction. However, no internet transmission is entirely secure, so we cannot guarantee absolute security. Please ensure your account password is strong and unique. Please also be mindful of the information you share directly with coaches or consultants outside of the platform's secure messaging features.

6. How Long Do We Keep Your Personal Data?

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

Typically, we will retain your data for the duration of your account being active and for a period thereafter (e.g., 6 years for tax purposes) to comply with legal obligations or resolve disputes.

7. Your Rights Under UK GDPR

Under UK GDPR, and where applicable EU GDPR, you have the following rights regarding your personal data:

The Right to Be Informed: To receive clear and transparent information about how we process your data.
The Right of Access: To request a copy of the personal data we hold about you.
The Right to Rectification: To request that we correct any inaccurate or incomplete personal data.
The Right to Erasure ( "Right to Be Forgotten"): To request that we delete your personal data in certain circumstances.
The Right to Restrict Processing: To request that we limit the way we use your personal data in certain circumstances.
The Right to Data Portability: To request to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
The Right to Object: To object to our processing of your personal data in certain circumstances (e.g., for direct marketing).
Rights in Relation to Automated Decision-Making and Profiling: To object to decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

To exercise any of these rights, please contact us at t.chu.partner@gmail.com. We will respond to your request within one month.

8. How to Complain

If you have concerns about how we are handling your personal data, please contact us first at t.chu.partner@gmail.com so we can try to resolve it.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this policy indicates when it was last revised. We will notify you of any significant changes by posting the new Privacy Policy on our Platform or by email.