Last updated: September 2026
This policy explains what personal data Group Coaching HQ collects, why we collect it, what we do with it, and the rights you have over it. It applies to groupcoachinghq.com and to our certification programs, corporate engagements, mailing list and events.
1. Who we are
Group Coaching HQ SASU is the data controller for the personal data described in this policy, except where section 9 says otherwise.
We have not appointed a Data Protection Officer. We are not required to — our core activities do not involve large-scale monitoring or large-scale processing of special category data. Data protection questions go to hello@groupcoachinghq.com.
2. What we collect and why
We collect different data depending on how you interact with us. For each purpose we must have a legal basis under Article 6 of the GDPR; the basis is stated in each row.
We do not ask for special category data: health, beliefs, and the other categories listed in Article 9. Group coaching conversations can touch on personal circumstances; please do not share sensitive details in written submissions, and be aware that anything you say in a live session may be heard by other participants and captured in a recording.
Providing your data is never a statutory requirement. Where it is a contractual requirement — you cannot be enrolled in a program without a name and email — declining simply means we cannot provide that service.
3. Where the data comes from
Most of it comes directly from you. For corporate engagements, we also receive participant names, work email addresses and job roles from the client organization that engaged us. If you are a participant in that situation, your employer decided to share your details with us; section 9 explains what that means for your rights.
4. Who we share it with
We do not sell your personal data. We share it with service providers who process it on our instructions, and only as far as their service requires.
We may also share data with our accountants and, where we are legally required to, with tax authorities, regulators or a court. If the business is sold or restructured, data may transfer to the acquiring entity; you will be told before that happens.
Google and Meta act as independent controllers for some of what they do with the data they collect through our site, which means they use it for their own purposes as well as ours. Their handling is governed by their own privacy policies.
5. Sending data outside the EEA
Several of our providers are based in the United States, so your data may be transferred there. Where that happens we rely on one of the safeguards permitted by Chapter V of the GDPR: the provider's certification under the EU-US Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission, supported by a transfer impact assessment where one is needed.
You can ask us for a copy of the safeguards in place for a specific provider by emailing hello@groupcoachinghq.com.
6. How long we keep it
You have the right to:
To exercise any of these, email hello@groupcoachinghq.com. We will respond within one month. If your request is complex we may extend that by up to two further months and will tell you why within the first month. There is no charge unless a request is manifestly unfounded or excessive.
We do not use automated decision-making or profiling that produces legal or similarly significant effects. Application decisions are made by a person.
.png)