PRIVACY POLICY

Jana Minhas – Enneagram Coaching

Last updated: 07/10/2026

1. Who I am

I am Jana Minhas Ltd., trading as Jana Minhas/ Enneagram Typing & Coaching, based in the United Kingdom. I am the data controller responsible for the personal information used in my business.

This policy explains how I collect, use and protect your information when you visit my website, contact me or use my Enneagram typing, coaching or Enneagram-informed yoga services.

For privacy questions or requests, contact:

Email: jana.enneagram@gmail.com

2. Information I collect

I collect information you provide through enquiries, email, bookings and sessions. This may include your name, email address, telephone number, appointment details, correspondence, payment records and information relevant to your sessions.

Session records may include your goals, reflections, possible Enneagram type and a summary of our work.

My website and its providers may collect technical information such as your IP address, browser, device information and pages visited. The cookie section below explains how this is handled.

Please avoid including sensitive personal information or identifiable details about other people in website enquiry forms.

3. How and why I use information

I use your information for the following purposes and lawful bases:

• To respond to requests about booking and to arrange and deliver services: taking steps at your request before entering a contract and performing our contract.

• To answer general enquiries, maintain necessary business records and protect the security of my business: legitimate interests in communicating with people who contact me and running a secure, effective practice. I consider your rights when relying on these interests.

• To maintain records required for tax and accounting: compliance with legal obligations.

• Marketing communications are optional and are not a condition of receiving a service.

I need basic contact, booking and payment information to arrange and provide paid services. Without this information, I may be unable to accept a booking.

4. Sensitive information

Coaching and yoga conversations may involve health information or other information that receives additional protection under data protection law, such as religious beliefs.

I only collect or record this information where it is necessary for an agreed purpose and you have given explicit consent. I will explain the purpose and obtain that consent separately before doing so. Please do not send this information through the website contact form.

You can withdraw your consent by emailing me. Withdrawal does not affect the lawfulness of earlier use. If particular information is necessary to provide a service safely, we will discuss whether the service can continue without it.

5. Who I share information with

I use service providers to help operate my business. These include Squarespace for website hosting and contact forms and Zoom for online sessions.

Providers receive the information needed for their services. Some act on my instructions; others may also process certain information for their own purposes, as described in their privacy notices.

Relevant information may also be shared with professional advisers or authorities where necessary for legal obligations or the establishment, exercise or defence of legal claims. Testimonials or identifiable client stories are published only with separate permission.

6. International transfers

Some of the service providers I use, including Squarespace and Zoom, may process or store personal information outside the United Kingdom.

Where personal information is transferred outside the UK, I take reasonable steps to ensure that appropriate safeguards are in place in accordance with UK data protection law. This may include transfers to countries recognised by the UK as providing an adequate level of data protection or the use of approved contractual safeguards.

You can contact me using the email address above if you would like further information about how your personal information is protected when transferred internationally.

7. How long I keep information

I keep personal information only for as long as necessary for the purposes for which it was collected and to meet any legal, tax, accounting or insurance requirements.

Enquiries that do not lead to a booking will normally be deleted within 12 months of the last contact.

Client correspondence, session notes and summaries will normally be kept for 3 years after the last session, unless there is a legal or insurance reason to keep them for longer.

Tax and payment records will be kept for the period required under UK tax and accounting rules.

If I offer marketing communications, your contact details will be kept until you unsubscribe or ask me to remove them.

After the relevant retention period, personal information will be securely deleted or anonymised.

8. Keeping information secure

I take appropriate steps to protect your personal information from loss, misuse, unauthorised access or disclosure.

I use password-protected devices and accounts, secure online services and appropriate access controls. Access to personal information is limited to what is necessary for running my practice.

While I take reasonable measures to protect your information, no method of electronic storage or online communication can be guaranteed to be completely secure.

9. Cookies

This website uses cookies and similar technologies necessary for the website to function. It may also use optional cookies, such as analytics cookies, where appropriate consent has been obtained.

You can manage your cookie preferences through the cookie settings available on the website.

10. Your rights

Depending on the circumstances, you may have the right to access your personal information, correct it, request deletion, restrict its use or receive a portable copy.

You have the right to object to processing based on legitimate interests. You can object to direct marketing at any time.

To exercise your rights, email the address above. I may need to verify your identity. I normally respond within one month; where the law permits an extension, I will explain why. Some rights are subject to legal exceptions.

I do not make solely automated decisions that have legal or similarly significant effects on you. Enneagram typing involves personal discussion and reflection.

11. Questions and complaints

Please contact me if you have concerns about how I handle your information so that I can investigate and respond.

You can also complain to the Information Commissioner's Office, the UK data protection regulator:

Website: https://ico.org.uk/make-a-complaint/

Telephone: 0303 123 1113

12. Changes to this policy

I review this policy when my services or data handling practices change. The latest version will appear on this page with an updated date. Where appropriate, I will also notify affected clients of significant changes.