Privacy Policy

Effective date: July 2026

Jo Randall Health Coaching ("I", "me", "my") respects your privacy and is committed to protecting your personal information. This policy explains how I collect, use and store your personal data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I am and what I do

I am Jo Randall, trading as Jo Randall Health Coaching, based near York, England, and I am the data controller for the personal data described in this policy. I provide health coaching to help clients improve their health through diet and lifestyle interventions and the principles of Lifestyle Medicine, with a focus on preventative healthcare, the optimisation of physical and mental health, and support alongside chronic health conditions. My services include one-to-one consultations, group coaching, workshops and retreats.

2. Information I collect

Information you provide

You may provide personal data by completing a health and lifestyle questionnaire, signing a terms of engagement form, taking part in a coaching consultation, contacting me by email, telephone or post, booking a session through Calendly, making a payment, downloading a free resource such as an ebook, or signing up to my newsletter.

This may include:

• Basic details such as your name, address, email address, phone number, other contact details and next of kin
• Details of contact I have had with you, such as referrals and appointment requests
• Health information, including your previous medical history, dietary, lifestyle, supplement and medication details, coaching notes and health improvement plans
• Payment details when you pay for services

Information from other sources

With your express consent, I may receive information from other healthcare providers involved in your care. If you choose not to give that consent, I will not be able to coordinate your coaching with theirs, which may make the coaching less effective.

3. How I use your information and the legal bases

I use your personal information to provide and manage coaching services (performance of a contract), to respond to enquiries and arrange sessions (legitimate interests), to send newsletters and marketing communications (your consent), to keep business and accounting records (legal obligation), and to hold health and lifestyle information you share during coaching (your explicit consent, which you may withdraw at any time).

I may also use your personal data where there is an overriding public interest, for example to safeguard an individual or prevent a serious crime, or where there is a legal requirement such as a court order.

I do not sell your information and I do not carry out any automated decision-making based on your personal data.

4. Newsletters and marketing

If you sign up to my newsletter, I will use your name and email address to send it. Signing up is always by your consent, every email includes an unsubscribe link, and you can withdraw consent at any time by using that link or emailing me. Your newsletter details are held on my email marketing platform and are never shared for anyone else's marketing.

5. Sharing your information

I keep information about you confidential and share it only with your express consent, with the exception of the following categories of third parties: service providers who assist me in running the business (such as email, scheduling and website hosting platforms), regulatory authorities where required by law, and professional advisors such as legal or accounting support under confidentiality obligations.

I will seek your express consent before sharing your information with your GP or other healthcare providers. If I believe your life or someone else's is in danger, I may pass information to an appropriate authority, such as the police, social services in the case of a child or vulnerable adult, or a GP in a case of self-harm, on the legal basis of vital interests.

I may discuss case histories in anonymised form with professional peers for supervision and development, for example at clinical supervision meetings or conferences. I will seek your explicit consent before using your information in this way.

I make sure any third-party providers I use meet UK GDPR requirements. Some are based outside the UK; where that is the case, transfers are protected by recognised safeguards such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

6. Data retention

Records are kept for the duration specified by law and by guidance from my professional association, the UK & International Health Coaching Association (UKIHCA), and my insurer, Balens. Enquiries that do not lead to coaching are deleted within 12 months. After the relevant retention period, your data is securely deleted or anonymised.

7. Your rights

Under UK GDPR you have the right to access your personal data, request correction or deletion, object to or restrict processing, withdraw consent at any time, receive a copy of your data in a portable format, and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

To exercise any of these rights, make a request in writing to jr@jorandallhealthcoaching.com. You do not need to give a reason. I will respond within one month of receiving your request and any information needed to verify it, and my response will include the sources of the information, the purposes of processing, and any persons or organisations it has been shared with. In limited circumstances permitted by law, some information may be withheld.

8. Cookies and this website

This website is a simple static site and does not set cookies, use analytics or contain contact forms. The typefaces are served by Google Fonts, which may log your IP address when a page loads. When you follow links to third-party services, such as Calendly to book a session or my social media profiles, those services may set their own cookies under their own policies. You can manage and delete cookies through your browser settings; allaboutcookies.org explains how.

If I add analytics or other cookie-setting tools in future, this policy will be updated and a consent banner introduced first.

9. Security

Within the health sector I also follow the common law duty of confidence: where identifiable information is given in confidence, it is treated as confidential and used only for the purpose of providing your coaching. I keep information in secure locations, restrict access to it, and protect the devices it is held on. External providers that process data for me are contractually bound to maintain appropriate security. Your data may be stored in the UK or on trusted cloud services compliant with recognised international standards.

10. Third-party links

This website contains links to third-party websites. I am not responsible for their privacy practices and encourage you to read their policies.

11. Changes to this policy

I may update this policy from time to time. The latest version will always be published on this page with an updated effective date.

12. Contact

If you have any questions about this policy or how your information is handled, contact Jo Randall at jr@jorandallhealthcoaching.com.

Back to the Website