Privacy Policy

Last updated: 4 February 2026

This Privacy Policy explains how Thriveherd collects, uses, shares, and protects personal data. It applies to our website, community platform, coaching programmes, events, and related services.

This policy is written in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Use of our website and platform is also governed by our Website Terms & Conditions.

1. Who we are

Thriveherd is a UK-based business providing career coaching, professional development programmes, and a membership community. We serve clients internationally, but our data protection practices are governed by UK data protection law.

For the purposes of data protection law, Thriveherd is the data controller for the personal data described in this policy.

If you have any questions about this policy or how we use your data, you can contact us at:

Email: privacy@thriveherd.com

2. The personal data we collect

We collect different types of personal data depending on how you interact with us.

Clients and members

This may include:

  • name, contact details, and location
  • date of birth, gender, and pronouns (where provided)
  • payment and billing records
  • employment details and work history
  • uploaded documents such as CVs or workbooks
  • records of self-discovery activities (for example strengths, skills, values, interests, and salary preferences)
  • session notes, feedback, evaluation forms, and correspondence
  • chat messages and emails
  • audio and video recordings of coaching sessions or group sessions
  • assessments and results from third-party tools
  • IP address and basic technical information

Some information you choose to share with us during coaching or community participation may include special category data, such as health information or personal views.

Prospects and enquiries

This may include:

  • name and contact details
  • information you provide in enquiry or booking forms
  • notes or recordings from consultation calls
  • marketing preferences

Community participation

If you are a member of our community, we may collect:

  • profile information you choose to share
  • posts, comments, and interactions with other members
  • participation in group sessions or events

Website visitors

We collect limited technical information such as IP address, device and browser information, and usage data through cookies and similar technologies.

3. How we use your personal data

We use personal data for the following purposes:

  • to deliver coaching services, programmes, and community access
  • to manage bookings, memberships, payments, and subscriptions
  • to communicate with you about your participation, enquiries, or account
  • to provide personalised coaching and development support
  • to facilitate peer learning and community interaction
  • to maintain professional standards, supervision, and safeguarding
  • to improve our services, programmes, and products
  • to manage our business operations, systems, and security
  • to meet legal, regulatory, and insurance obligations

4. Lawful bases for processing

We rely on the following lawful bases under UK GDPR.

Contract

Where processing is necessary to deliver services you have signed up for, including coaching, community membership, scheduling, and payments.

Legitimate interests

Where processing is necessary to run and improve our services, manage quality and supervision, ensure safeguarding, maintain security, and communicate with people who have engaged with us. We only rely on this basis where our interests are not overridden by your rights and expectations.

Consent

We rely on consent where required, including:

  • email marketing and newsletters
  • public testimonials or case studies
  • optional uses of data beyond service delivery

You can withdraw consent at any time.

Legal obligation

Where we are required to process personal data to comply with legal or regulatory obligations, such as tax reporting.

5. Special category data

Some of the information you choose to share with us during coaching or community participation may be special category data, such as health information or personal beliefs.

We process this data because it is necessary to provide meaningful coaching and support, and because you have explicitly chosen to share it with us. Access to this information is limited to those who need it for service delivery, supervision, or safeguarding.

6. Session recordings

Coaching sessions and group sessions are normally recorded to support service delivery, review, supervision, and quality assurance. Recording is disclosed in advance, and you may opt out if you prefer.

7. Sharing personal data

We may share personal data with:

  • service providers who support our website, systems, payments, communications, analytics, AI tools, and community platform
  • associate coaches and contractors who deliver services on our behalf
  • professional advisors such as accountants or legal advisors
  • regulators, insurers, or authorities where required

We only share data where necessary and ensure appropriate confidentiality and data protection obligations are in place.

8. International transfers

Some of our service providers and associate coaches are based outside the UK. This means personal data may be processed or accessed outside the UK.

Where personal data is transferred internationally, we rely on approved safeguards such as the UK International Data Transfer Agreement or the UK addendum to EU Standard Contractual Clauses, or equivalent protections built into provider terms.

9. Community visibility

Our community is designed to support peer learning and shared exploration. If you participate, other members may see your profile information, posts, comments, and contributions. You can control some aspects of your visibility through your settings, and participation is optional.

10. Cookies and analytics

We use cookies and similar technologies to operate our website, understand how it is used, and support marketing and analytics. Where required, we ask for your consent before placing non-essential cookies. You can manage your preferences through our cookie controls.

For more information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, including service delivery, legal obligations, and legitimate business needs. Retention periods vary depending on the type of data and our obligations.

12. Your rights

You have rights under UK data protection law, including the right to:

  • access your personal data
  • request correction or deletion
  • object to or restrict processing
  • withdraw consent
  • request data portability

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

13. How we protect your data

We use appropriate technical and organisational measures to protect personal data, including access controls, secure systems, and confidentiality obligations.

14. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on our website, and the date will be updated.