Privacy Policy
Last updated: June 2026
Introduction
Welcome to Second Chapter's privacy policy. Second Chapter is a trading name of Expertly Human Limited.
We respect your privacy and are committed to protecting your personal data. This policy explains how we collect and use your personal information when you visit our website (secondchapter.co.uk), enquire about or use our services, or sign up to receive communications from us. It also sets out your rights and how to contact us if you have any questions or concerns.
We are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purposes of those laws, we are the data controller of your personal information.
1. Who we are
Expertly Human Limited (trading as Second Chapter) is the data controller responsible for your personal data.
Company name: Expertly Human Limited (trading as Second Chapter)
Contact name: Kate Lloyd
Email: kate@secondchapter.co.uk
Address: 29-31 High Street, Fordingbridge, Hampshire, SP6 1AS
If you have any questions about this privacy policy or wish to exercise your legal rights, please contact us using the details above.
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). We would, however, appreciate the chance to address your concerns first, so please contact us in the first instance.
2. The data we collect about you
We may collect and process the following types of personal data:
• Identity data: your first and last name
• Contact data: your email address and, where relevant, a telephone number or postal address
• Communications data: the content of enquiries or messages you send us through the contact form or by email
• Session data: notes, transcripts, and recordings made during coaching sessions (see section 4 below)
• Technical data: your IP address, browser type, and basic usage information collected automatically when you visit our website
• Marketing data: your preferences regarding communications from us
We do not collect financial data, payment card details, or any sensitive personal data (such as information about your health, religion, ethnicity, or sexual orientation) through our website. Where sensitive topics arise in the course of a coaching relationship, this is handled under the terms of our client agreement and with your explicit consent.
3. How we collect your data
We collect personal data through:
• The contact form on our website, when you get in touch with an enquiry
• The newsletter signup form on our website, when you choose to subscribe to our mailing list
• Our booking system (Google Workspace), when you schedule an appointment with us
• Direct correspondence by email or phone
• Coaching sessions, where notes and transcripts are created (see section 4)
• Automated technologies: our website (hosted on Squarespace) collects certain technical data automatically when you visit, including via cookies
4. Session recording and transcription
Where we work with you as a coaching client, we use Google Gemini to assist with transcribing coaching sessions for the purpose of creating session notes. We will always ask for your verbal consent before beginning any transcription or recording. You are under no obligation to agree, and we can work with handwritten notes instead if you prefer.
Transcripts created via Gemini are processed by Google on our behalf. Google acts as a data processor for this purpose. Session notes derived from transcripts are stored securely and retained for six years after the end of our working relationship (see section 8).
We use session notes solely to support the quality and continuity of your coaching. We do not share them with third parties except where required by law or professional duty of care.
5. How and why we use your data
Contact form enquiries
When you contact us via our website, we process your name, email address, and the content of your message in order to respond to your enquiry. The legal basis for this processing is your consent, which you give by submitting the form. Enquiries are logged in Kit (our email marketing platform) for record-keeping purposes.
Newsletter
If you sign up to receive our newsletter, we process your name and email address to send you updates and relevant content. The legal basis for this is your consent. You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any of our emails, or by contacting us directly.
Coaching and group services
When you become a client, we process your personal data in order to deliver our coaching or group facilitation services, manage our client relationship, and meet our professional obligations. The legal basis for this processing is the performance of a contract with you.
Booking
When you book an appointment through our Google Workspace scheduling tool, your name, email address, and appointment details are processed by Google on our behalf. The legal basis for this is the performance of a contract with you (or steps taken at your request prior to entering into one).
Website analytics
Our website is hosted on Squarespace, which collects basic technical data about visitors for the purposes of site functionality and analytics. This processing is based on legitimate interests. Please see our Cookie Policy for more detail.
6. Who we share your data with
We do not sell your personal data or share it with third parties for their own marketing purposes. We may share your data with the following categories of third parties, where necessary to deliver our services or comply with our legal obligations:
• Kit (ConvertKit): our email marketing platform, used to manage newsletter subscriptions and log contact form enquiries. Kit is based in the United States (see section 7 below).
• Google: we use Google Workspace for scheduling (booking appointments) and Google Gemini for session transcription. Google is based in the United States (see section 7 below).
• Squarespace: our website host, which processes basic technical data about site visitors.
• Professional advisers: including lawyers, accountants, and insurers, where necessary.
• HMRC and regulators: where we are required to do so by law.
We require all third parties to handle your data securely and in accordance with the law. We do not permit them to use your data for purposes other than those we have specified.
7. International transfers
Both Kit and Google are based in the United States, which means your personal data may be transferred outside the UK when we use these services. These transfers are subject to appropriate safeguards under UK data protection law, including Standard Contractual Clauses approved for use in the UK. This means your data receives a comparable level of protection to that which applies in the UK.
If you would like further information about the safeguards in place for any specific transfer, please contact us.
8. How long we keep your data
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.
• Client data (including session notes, correspondence, and records relating to a coaching or group services engagement): six years after the end of our working relationship, in line with standard contract law requirements.
• Enquiry data (contact form submissions from non-clients): two years from the date of your last contact with us, unless you become a client.
• Newsletter subscriber data: for as long as you remain subscribed. If you unsubscribe, we will remove you from our mailing list promptly.
• Technical data collected via our website: in line with Squarespace's data retention policies.
In some circumstances we may anonymise your personal data so that it can no longer be associated with you. Anonymised data is not subject to this policy and may be used indefinitely.
9. Your rights
Under UK data protection law, you have the following rights in relation to your personal data:
• The right to access: you can request a copy of the personal data we hold about you.
• The right to rectification: you can ask us to correct any inaccurate or incomplete data.
• The right to erasure: in certain circumstances, you can ask us to delete your personal data.
• The right to restrict processing: you can ask us to limit how we use your data in certain circumstances.
• The right to data portability: you can ask us to transfer your data to you or to another provider in a machine-readable format, where technically feasible.
• The right to object: you can object to processing based on legitimate interests or for direct marketing purposes.
• The right to withdraw consent: where we rely on consent as our legal basis, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before you withdrew consent.
To exercise any of these rights, please contact us at kate@secondchapter.co.uk. We will respond within one month. There is no charge for making a request unless it is manifestly unfounded or excessive.
10. How to raise a data protection complaint
If you have a concern about the way we have handled your personal data, we ask that you raise it with us directly in the first instance. We are committed to taking all complaints seriously and dealing with them promptly and fairly.
To make a complaint, please contact Kate Lloyd at kate@secondchapter.co.uk or by post to 29-31 High Street, Fordingbridge, Hampshire, SP6 1AS. Please describe your concern as clearly as you can, including any relevant dates or correspondence.
We will acknowledge your complaint within 30 days of receiving it and aim to provide a full response without undue delay. If we need more time to investigate, we will let you know.
If you remain dissatisfied after we have responded, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO) at www.ico.org.uk.
11. Data security
We take reasonable steps to protect your personal data from unauthorised access, loss, or disclosure. Access to personal data is limited to those who need it in the course of providing our services. This may include a small number of trusted individuals, such as a virtual assistant, who support the running of our practice and are bound by confidentiality obligations. We have procedures in place to respond to any suspected data breach and will notify you and the ICO where we are legally required to do so.
12. Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies when you visit them.
13. Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the date at the top of this document. We encourage you to check this page periodically. Where changes are significant, we will take reasonable steps to bring them to your attention.
14. Contact us
If you have any questions about this privacy policy or the way we handle your data, please contact:
Kate Lloyd
Expertly Human Limited (trading as Second Chapter)
29-31 High Street, Fordingbridge, Hampshire, SP6 1AS