Privacy Policy

Last updated: JUL 2026

Hanover Praxis is committed to respecting your privacy and protecting your personal information. This notice explains how I collect, use, store and share personal information when you visit this website, make an enquiry or take part in coaching.

For data-protection purposes, David Hanover, trading as Hanover Praxis, is the data controller.

Contact: david@hanoverpraxis.co.uk
Business location: York, United Kingdom

Depending on how you interact with Hanover Praxis, I may collect:

• your name and contact details;
• information submitted through the website contact form or by email;
• appointment and scheduling information;
• information contained in a coaching agreement;
• payment and transaction records;
• brief notes made for the purpose of supporting the coaching process;
• correspondence between sessions;
• technical information associated with use of the website, such as device, browser, cookie and analytics data;
• information you choose to share about your work, relationships, wellbeing, goals, behaviour or personal circumstances.

Coaching conversations may sometimes include information about physical or mental health, religious or philosophical beliefs, sexuality or other sensitive matters. Some of this may be classed as special category personal data and receives additional protection under data-protection law. 

Please avoid sending detailed sensitive personal information through the website contact form. Initial enquiries should contain only the information needed for me to respond and arrange a conversation.

I may use personal information to:

• respond to enquiries;
• arrange and provide coaching conversations;
• assess whether coaching is appropriate for your needs;
• prepare for and maintain continuity between sessions;
• administer coaching agreements, appointments and payments;
• meet professional, ethical, insurance and record-keeping requirements;
• maintain the security and operation of the website;
• manage complaints, disputes or legal claims;
• protect a person where there is a serious and immediate risk of harm;
• improve the operation of Hanover Praxis.

I will not sell your personal information.

The lawful basis used will depend on the purpose for which information is being processed.

This may include:

• steps taken at your request before entering into a contract, such as responding to an enquiry or arranging an introductory conversation;
• performance of a contract, where information is needed to provide agreed coaching services;
• legal obligation, where information must be retained or disclosed to meet a legal requirement;
• legitimate interests, where information is reasonably required to administer and protect Hanover Praxis, provided those interests do not override your rights;
• consent, where you have made a clear and informed choice.

Where special category information is processed, I will also identify an appropriate additional condition under Article 9 of the UK GDPR. Where applicable, this may be your explicit consent. UK GDPR requires both an ordinary lawful basis and an additional condition when special category information is processed. 

You may withdraw consent at any time where consent is the basis being used. Withdrawal does not affect processing that took place before consent was withdrawn.

Information shared during coaching is treated as confidential. I may keep brief, proportionate session notes to support continuity, reflection, professional accountability and the delivery of coaching.

Confidentiality is not absolute. Information may be disclosed where:

• you have given permission;
• disclosure is required by law or court order;
• there is a serious and immediate concern about your safety or another person’s safety;
• disclosure is reasonably necessary to prevent or respond to serious harm;
• information is needed to obtain confidential professional supervision, advice or insurance support;
• information is required to investigate a complaint or establish, exercise or defend a legal claim.

Where aspects of coaching work are discussed in professional or university supervision, information will be anonymised or minimised wherever practicable. Supervisors are expected to maintain confidentiality.

As I am completing postgraduate training in coaching psychology, aspects of my coaching practice may contribute to supervision, reflective learning, competency assessment or anonymised academic work.

Clients will not ordinarily be identifiable in submitted academic or supervisory material. Where identifiable information, recordings or detailed case material are required, this will only be used following a separate explanation and appropriate consent.

Declining permission for optional academic use will not affect your ability to receive coaching.

Coaching sessions are not recorded as standard.

No audio, video or automated transcription will be made without your prior knowledge and separate consent. Where a recording is agreed for supervision, training or assessment, you will be told:

• why it is being made;
• who may access it;
• how it will be stored;
• when it will be deleted;
• how you may withdraw consent before it has been used, where applicable.

Personal information will only be shared where necessary and appropriate. Recipients may include:

• website, email, videoconferencing, calendar and secure-storage providers;
• payment processors or accounting services;
• professional or university supervisors;
• professional advisers, insurers or legal representatives;
• regulators, courts, safeguarding bodies or emergency services where disclosure is required or justified.

Service providers may process information on my behalf but should only use it according to agreed instructions and applicable data-protection requirements.

The specific services currently used may include [GoDaddy, Microsoft Teams, Microsoft 365/Outlook, Calendly, Stripe, PayPal, accounting provider—delete or amend as appropriate].

Some technology providers may store or process information outside the United Kingdom. Where this occurs, I will use providers and safeguards intended to ensure that personal information remains appropriately protected.

Information will not be kept for longer than reasonably necessary.

My intended retention periods are:

• unsuccessful or preliminary enquiries: [for example, 12 months after the last contact];
• coaching agreements, administrative records and session notes: [for example, seven years after coaching ends];
• payment and accounting records: for the period required by tax and financial-record rules;
• optional session recordings: for the specific period explained when consent is requested;
• website analytics information: according to the retention settings of the relevant analytics provider.

Records may be retained for longer where this is necessary because of a complaint, safeguarding concern, insurance requirement or anticipated legal claim.

You should choose retention periods you can actually follow. The ICO expects organisations to state how long information is kept or explain the criteria used to decide. 

I take reasonable steps to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. These may include password protection, device security, access controls, secure cloud services and limiting the amount of information recorded.

However, no email, website or internet-based system can be guaranteed to be completely secure. Please do not send highly sensitive information by ordinary email unless this has been agreed and is necessary.

This website may use cookies and similar technologies that are necessary for its operation or that help understand how visitors use it.

Where required, non-essential cookies will only be used after you have made an appropriate choice through the website’s cookie controls. Further information about cookies may be available through the cookie banner or settings provided on the website.

I will not add you to a marketing mailing list merely because you make an enquiry or become a coaching client.

Where I offer newsletters or promotional emails, these will be sent only where there is an appropriate lawful basis and, where required, your consent. You may unsubscribe at any time. Electronic marketing is also governed by the Privacy and Electronic Communications Regulations, not only UK GDPR. 

Depending on the circumstances, you may have the right to:

• ask for access to your personal information;
• ask for inaccurate information to be corrected;
• ask for information to be deleted;
• request restriction of processing;
• object to certain uses of your information;
• receive information in a portable format;
• withdraw consent where processing is based on consent;
• complain about the way your information has been handled.

Some rights are subject to legal limitations and may not apply in every situation.

To make a request, contact [professional email address]. I may need to confirm your identity before responding.

Please contact me first if you have concerns about how your information has been handled. I will consider the concern and respond as promptly as reasonably possible.

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom regulator for data protection.

This privacy notice may be updated when the services, technology providers or legal requirements affecting Hanover Praxis change. The date at the top of the notice will show when it was most recently updated.