Privacy Policy

Last updated: 7 September 2026

This website is operated by Thomas O'Toole-Mills, a sole trader based in the United Kingdom. This policy explains what personal data is collected through this website, why, and what rights you have over it.

Who is responsible for your data

Thomas O'Toole-Mills is the data controller for the personal data described in this policy. You can get in touch at hello@tomotm.co.uk with any questions or requests relating to your data.

What is collected and why

Contact form. When you submit the contact form, your name, email address, and message content are collected. This is used solely to respond to your enquiry. The legal basis for this is legitimate interest in responding to people who make contact, and/or taking steps at your request prior to entering into a coaching arrangement.

Booking a session. The booking pages on this site are provided directly by Zoom. When you book a session through them, your booking details (name, email, and any information you provide) are collected and processed by Zoom under their own privacy policy, available at zoom.us/privacy. These details are received in order to prepare for and deliver your session.

Website analytics. This site uses Squarespace's built-in analytics, and also Google Analytics, to understand how visitors use the site (e.g. which pages are viewed, general visitor numbers, how people found the site). Google Analytics uses cookies to do this and may process data outside the UK, including in the United States; where it does, Google provides contractual safeguards for this transfer under UK data protection law. See Squarespace's privacy policy at squarespace.com/privacy and Google's at policies.google.com/privacy for details of how each processes this data.

Cookies

This site uses cookies for the purposes described above, including cookies set by Google Analytics. You'll see a cookie banner on your first visit, where you can choose to accept or decline non-essential cookies — declining will prevent Google Analytics cookies from being set. You can also control or delete cookies through your browser settings at any time.

How long data is kept

Contact form enquiries and coaching-related correspondence are kept for as long as reasonably necessary to respond to you and, where you become a client, for the duration of the working relationship plus a reasonable period afterward for record-keeping purposes. Personal data is not kept longer than necessary for the purpose it was collected for.

Who your data is shared with

Your personal data is not sold or rented to anyone. Data is shared only with the service providers necessary to run this website and deliver coaching services — currently Squarespace (website hosting and analytics), Google (website analytics), and Zoom (session booking and delivery). These providers may process data outside the UK; where they do, they are required to provide appropriate safeguards for your data under UK data protection law.

Your rights

Under UK GDPR, you have the right to: access the personal data held about you; ask for it to be corrected or deleted; object to or restrict how it's used; and request a copy of it in a portable format. To exercise any of these rights, contact hello@tomotm.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.

Changes to this policy

This policy may be updated as the website and services change — for example, if an email newsletter or online payments are introduced in future. The date at the top of this page will be updated when that happens.