The short version: I collect only what I need, I don't sell your data, I don't share it with third parties for marketing, and you can ask me to delete it any time. That's it.
Who I Am
This website is operated by Nicholas Malin, a sole trader providing coaching services and digital products. I am the data controller for personal data collected through this website.
Business name: Nicholas Malin
Address: 8 The Stalls, Corsley, BA12 7NE
Email: info@nicholasmalin.com
Phone / WhatsApp: 07946 788183
What Information I Collect
Depending on how you interact with this site, I may collect:
- Your email address — when you purchase a digital product or book a session
- Your phone number — optionally, if you choose to receive SMS course reminders
- Your name — if you voluntarily provide it in messages or during sessions
- Basic analytics data about how people use this website (page views, device type, country)
I do not collect or store payment card information. All payments are processed securely by Stripe under their own privacy policy at stripe.com/gb/privacy.
Lawful Basis for Processing
Under UK GDPR, I rely on the following lawful bases for processing personal data:
| Activity | Lawful Basis |
|---|---|
| Processing your purchase and providing course access | Contract — necessary to fulfil the purchase you've made |
| Sending course access emails and the 7-day reminder sequence | Contract — these are part of the product you've purchased |
| SMS reminders | Consent — optional and only sent if you explicitly provide your number for this purpose |
| Responding to coaching enquiries and managing sessions | Legitimate interests — to respond to your direct request |
| Website analytics | Legitimate interests — to understand and improve how the site works |
| Marketing or further contact beyond your purchase | Consent — only where you have explicitly opted in |
| Retaining transaction records | Legal obligation — UK tax and accounting law |
CLEAR — Digital Course
This site offers a 7-day digital course called CLEAR. When you purchase CLEAR, the following data is collected:
- Email address — used to confirm your purchase, provide course access, and send your 7-day daily reminder sequence. This is part of the product and does not require separate consent.
- Phone number (strictly optional) — if you choose to provide it, used only to send daily SMS reminders during the 7-day course. You can opt out at any time by replying STOP or emailing info@nicholasmalin.com.
Your email address is not added to a marketing list, not shared with third parties, and not used for any communication beyond your course access and reminder sequence — unless you have separately and explicitly opted in to further contact.
Payment is processed by Stripe. Nicholas Malin does not store your card details. Transaction records are retained for up to 6 years to meet legal accounting obligations. Your email address is retained for the duration of your course access and then deleted, unless you have opted in to further contact.
The Mirror — Self-Assessment Form
This website includes a self-assessment tool called The Mirror. When you complete and submit this form, the following is collected:
- Your slider responses to eight questions about anxiety, inner voice, past experiences, coping, recovery, and readiness
- Which tools or approaches you've previously tried
- An optional free-text response about what prompted you to take the assessment
- A calculated total score and result band
This form is not intended to collect medical or clinical health information. Please do not submit sensitive medical details through this form. If you are experiencing significant mental health difficulties, please seek support from a qualified professional.
Responses are submitted via Netlify Forms and stored securely on Netlify's servers. They are accessed only by Nicholas Malin and used solely to assess whether coaching might be a good fit. Responses are retained for up to 12 months and then deleted. You can request deletion at any time by emailing info@nicholasmalin.com.
No name or contact details are collected through this form unless you choose to include them in the optional free-text field. Netlify may log basic metadata such as IP address and submission timestamp — see Netlify's privacy policy.
Facebook Pixel (The Mirror Page)
The Mirror page uses the Meta Pixel, a piece of tracking code that collects data about visitors and their actions on that page, including a custom event when the assessment is completed. This data is used to measure the performance of advertising and to understand how people find The Mirror.
This is a non-essential cookie-based technology. It is processed by Meta Platforms Ireland Ltd under their privacy policy at facebook.com/privacy/policy. Data may be transferred outside the UK as part of Meta's infrastructure — appropriate safeguards apply.
If you prefer not to be tracked, you can opt out via your Facebook ad settings, use a browser extension such as uBlock Origin, or contact me to discuss your options.
A cookie consent mechanism is being added to this site. Until then, this disclosure is provided for transparency.
Cookies
This website uses cookies in the following ways:
- Essential cookies — necessary for the site to function (e.g. session management)
- Third-party cookies — set by Google Fonts, YouTube embeds, and the Meta Pixel. These may track your activity across other websites.
Non-essential cookies — including the Meta Pixel — ideally require your consent before activation under UK cookie law (PECR). A cookie consent tool is being implemented. In the meantime, you can control or block cookies through your browser settings at any time.
International Data Transfers
Some third-party service providers used by this site — including Stripe, Meta, Google, Calendly, and WhatsApp — may process your data outside the United Kingdom. Where this occurs, transfers are made subject to appropriate safeguards, such as standard contractual clauses or equivalent protections recognised under UK law.
How I Use Your Information
Your information is used only to:
- Confirm and deliver digital product purchases
- Send course access and daily reminders for CLEAR
- Respond to your enquiries
- Book and manage coaching sessions
- Assess whether coaching might be a good fit (Mirror responses)
- Improve this website based on how people use it
- Meet legal and accounting obligations
I will never use your information for unsolicited marketing without your explicit consent, and I will never sell or rent your data to anyone.
Third-Party Services
- Stripe — payment processing
- Netlify — website hosting and form submissions
- Calendly — session booking (privacy policy)
- Meta / Facebook Pixel — analytics and advertising measurement (The Mirror page)
- Google Fonts — typography
- YouTube — embedded video content
- WhatsApp / Meta — if you contact me via WhatsApp
Booking and Scheduling
This site links to Calendly for session booking. When you use Calendly, their privacy policy applies to the data you provide there.
Coaching Sessions
Any personal information shared during coaching sessions is treated with strict confidentiality. I do not share session content with third parties. Notes I keep are stored securely and used only to support your coaching journey.
If you provide a testimonial or written review and consent to its use, it may appear on this website or associated social media. You can withdraw this consent at any time by contacting me.
Data Retention
- CLEAR purchase email addresses — retained for the duration of course access, then deleted, unless you have opted in to further contact
- Transaction and payment records — retained for up to 6 years to meet UK legal and accounting obligations
- Mirror assessment responses — retained for up to 12 months, then deleted
- General enquiries — retained for up to 2 years
- Coaching session notes — retained for up to 3 years after your last session, then securely deleted
Your Rights (UK GDPR)
Under UK data protection law, you have the right to:
- Access the personal data I hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict how I process your data
- Data portability — receive your data in a usable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact me at info@nicholasmalin.com. I will respond within 30 days.
Complaints
If you have a concern about how I handle your data, please contact me directly first at info@nicholasmalin.com.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Changes to This Policy
I may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of this website after changes are posted constitutes acceptance of the updated policy.
Contact
Any questions about this privacy policy — just ask.
info@nicholasmalin.com
07946 788183
8 The Stalls, Corsley, BA12 7NE