Privacy Policy

Last updated: June 2026

Adapt and Achieve is operated by Tracy Davies. This privacy policy explains how I collect, use and protect personal information when you use this website, contact me, book a call, or work with me for coaching, business continuity, resilience, emergency preparedness or assurance support.

Information I collect

I may collect and process:

• Your name, email address and phone number if you contact me.
• Information you provide through email, Calendly or an enquiry.
• Information needed to deliver coaching, consultancy, business continuity, resilience or assurance services.
• Documents, records or other information shared by client organisations as part of agreed consultancy or assurance work.

How I use your information

I use personal information to:

• Respond to enquiries.
• Arrange and manage calls, coaching sessions or consultancy work.
• Deliver agreed services.
• Review information and documentation provided as part of agreed consultancy or assurance work.
• Keep appropriate business and financial records.

Lawful basis for processing personal information

UK data protection law requires me to have a lawful basis for collecting and using personal information. Depending on the circumstances, I rely on the following:

Purpose	Lawful basis
Responding to enquiries and arranging appointments	Legitimate interests
Providing coaching, consultancy and business continuity services	Performance of a contract
Maintaining business records, invoices and accounting information	Legal obligation
Maintaining coaching records and consultancy working papers	Legitimate interests
Responding to safeguarding concerns or legal requirements where applicable	Legal obligation or vital interests
Sending marketing communications (where applicable)	Consent

I only collect and use personal information that is necessary to provide my services, meet legal obligations and operate Adapt and Achieve responsibly.

Coaching records

Coaching notes and related client information are treated confidentially and stored securely. Coaching records are normally retained for up to 7 years after the end of the coaching relationship, unless there is a lawful reason to retain them for longer or delete them sooner.

Business continuity, resilience and consultancy work

Where I provide business continuity, resilience, emergency preparedness or assurance support, I may receive information from organisations as part of the agreed work. This may include policies, plans, training records, exercise reports, governance documents, risk information and other evidence needed to complete the review.

Any information shared with me as part of consultancy, business continuity, emergency preparedness, resilience or assurance work will only be used for the purposes of delivering the agreed service. Information will be treated confidentially and will not be disclosed to third parties unless required by law or expressly agreed with the client organisation.

Consultancy and assurance records are normally retained for up to 7 years following completion of the work, unless otherwise agreed with the client organisation or required by law.

Secure storage and document sharing

Information provided as part of coaching, business continuity, resilience or consultancy services may be stored electronically using Microsoft 365 and OneDrive cloud services. Appropriate technical and organisational measures are used to protect information, including password protection, multi-factor authentication and access controls.

Where client documents are shared through Microsoft 365 or OneDrive, access will be restricted to authorised individuals. Access to shared folders or documents will be removed when no longer required for the agreed work. Information is only retained for as long as necessary to deliver the agreed service and meet legal, contractual or professional obligations.

Cookies

This website uses only essential technical features required for the website to operate correctly. It does not currently use analytics cookies, advertising cookies or other tracking technologies.

If this changes in the future, this Privacy Policy will be updated and, where required by law, you will be given the opportunity to consent before any non-essential cookies are placed on your device.

You can control or delete cookies through your browser settings.

Sharing your information

I do not sell personal information. I use trusted third-party service providers, including Microsoft 365, OneDrive, Calendly, email providers and website hosting services where necessary to operate Adapt and Achieve and deliver agreed services.

Where third-party services are used, information will only be shared where necessary and will be handled in line with UK data protection requirements.

Your rights

Under UK data protection law, you have the right to:

• Request access to the personal information I hold about you (a Subject Access Request).
• Request correction of inaccurate or incomplete personal information.
• Request deletion or restriction of your personal information where appropriate.
• Object to certain uses of your personal information.
• Withdraw your consent at any time where processing is based on your consent.

I will normally respond to Subject Access Requests without undue delay and within one month of receiving a valid request. Where necessary, I may ask for proof of identity before releasing personal information to help protect your privacy.

Concerns or complaints

If you have any concerns about how your personal information is handled, please contact me first at: adaptachieve@outlook.com.

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk

Contact

Adapt and Achieve
Tracy Davies
Email: adaptachieve@outlook.com