Privacy policy

A wooden desk with a silver vase holding a single orange-pink flower, a glass of water, a green notebook with gold-rimmed glasses on top, a white electronic device, and a beige or cream background.
Close-up of a wooden tabletop with samples of fabric and paper, and a small notepad and pen.

Last updated: 9 June 2026

Updated to reflect the Data (Use and Access) Act 2025 (DUAA)

This Privacy Policy explains how I collect, use, and protect your personal data. It complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025 (DUAA).

1. Who I Am (Data Controller)

Helene Grandjean, trading as Yellow Coaching

Address: Elmbank Way, London w7 3DQ

Email: Helene@Yellowcoaching.co.uk

I am the data controller for the personal data collected through this website.

2. What Personal Data I Collect

I only collect the following personal data through this website:

•        Name

•        Email address

I collect this data when you sign up to my mailing list, contact me through a website form, or request information about my services.

3. Why I Collect Your Data and the Legal Basis

I collect your name and email address for marketing purposes — specifically, to send you newsletters, updates, coaching tips, and information about my services.

Legal basis: Consent (Article 6(1)(a) UK GDPR, as retained and amended by the DUAA 2025).

This means:

•        You will always be asked to actively opt in before being added to my mailing list.

•        You can withdraw your consent at any time (see Section 7 below).

•        I will not send you marketing communications unless you have given clear, freely given, specific, and informed consent.

4. How Long I Keep Your Data

I will keep your name and email address on my mailing list until:

•        You unsubscribe or ask me to remove you; or

•        I decide to close or pause my mailing list.

I will not keep your data for longer than is necessary for the purpose it was collected.

5. Who I Share Your Data With

I do not sell, rent, or share your personal data with third parties for their own marketing purposes.

My website is hosted by Squarespace (squarespace.com). Contact form submissions are stored within my Squarespace account. Squarespace acts as a data processor and processes data in accordance with their Privacy Policy and Data Processing Addendum.

I use Microsoft 365 (Outlook) to respond to your enquiries. Microsoft acts as a data processor for email correspondence.

Both Squarespace and Microsoft may store data outside the UK. They maintain appropriate safeguards including Standard Contractual Clauses and UK adequacy decisions where applicable.

If I introduce an email marketing platform in the future (such as Mailchimp or Mailerlite), this policy will be updated to name that provider before any marketing emails are sent.

6. Cookies

This website does use cookies.

Under the DUAA 2025, consent is not required for certain low-risk cookies (such as basic analytics or functional cookies). However, I will always be transparent about any cookies in use.

7. Your Rights Under UK GDPR and the DUAA 2025

Under UK data protection law (including the DUAA 2025), you have the following rights:

•        Right to access — request a copy of the personal data I hold about you.

•        Right to rectification — ask me to correct inaccurate or incomplete data.

•        Right to erasure — ask me to delete your data ("right to be forgotten").

•        Right to restrict processing — ask me to limit how I use your data.

•        Right to data portability — request your data in a portable, machine-readable format.

•        Right to object — object to me processing your data for marketing purposes.

•        Right to withdraw consent — unsubscribe at any time via the link in any email, or by contacting me directly.

To exercise any of these rights, please contact me at Helene@Yellowcoaching.co.uk. I will respond within one calendar month, in line with UK GDPR requirements.

Note: Under the DUAA 2025, when responding to data access requests, I am only required to conduct a reasonable and proportionate search for your data.

8. How to Make a Data Complaint (DUAA 2025 Requirement)

Under the Data (Use and Access) Act 2025 (in force from 19 June 2026), you have a statutory right to complain to me directly about how I handle your personal data.

If you have a concern about how I use your data, please contact me in the first instance:

Email: Helene@ Yellowcoaching.co.uk

I will acknowledge your complaint promptly and aim to provide a full response within 30 days.

If you are not satisfied with my response, or wish to escalate, you have the right to complain to the Information Commissioner's Office (ICO):

•        Website: ico.org.uk

•        Helpline: 0303 123 1113

•        Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Security

I take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, or misuse. Your email marketing data is stored securely with Squarespace.

10. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in the law or my practices. The current version will always be available on my website. The date at the top of this page shows when it was last updated.