top of page

Privacy Policy

Last updated: February 2026

​

1. Introduction

CMMP Advisory (“we,” “us,” or “our”) is committed to protecting your privacy and handling your personal data in a transparent, secure, and lawful manner. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with:

  • UK General Data Protection Regulation (UK GDPR)

  • Data Protection Act 2018

  • International Coaching Federation (ICF) Code of Ethics

 

This policy applies to visitors to our website and to individuals who engage our coaching services. Please note that Chris Mallin Coaching is provided by CMMP Advisory.

 

2. Data Controller

For the purposes of the UK GDPR and the Data Protection Act 2018, the Data Controller is:

Chris Mallin

Email: chris@chrismallin.com

Address: CMMP Advisory Limited, 71-75 Shelton Street, London, WC2H 9JQ

​

3. Personal Data We Collect

We may collect and process the following categories of personal data:

a. Client and Enquiry Information

  • Name

  • Email address

  • Telephone number

  • Job title, employer, and professional background

  • Information provided via contact forms, intake forms, or email correspondence

b. Coaching-Related Data

  • Coaching notes and session summaries

  • Assessment results or reflective exercises (where applicable)

  • Coaching goals and development areas

  • Session dates and attendance records

  • Session recordings only where explicitly agreed in advance

c. Administrative and Financial Data

  • Invoicing and payment records

  • Contractual documentation

d. Website Usage Data

  • IP address

  • Browser and device information

  • Pages visited and usage data

  • Cookies and similar technologies

 

4. Legal Basis for Processing

We process personal data under the following lawful bases:

  • Performance of a contract – to deliver coaching services agreed with you

  • Consent – where you have explicitly provided it (e.g. newsletters, recordings)

  • Legal obligation – including accounting and tax requirements (HMRC)

  • Legitimate interests – for business administration and service improvement, where these interests do not override your rights

You may withdraw consent at any time where consent is the lawful basis.

​

5. Purpose of Processing

We use personal data solely for the following purposes:

  • Delivering professional coaching services

  • Managing client relationships and scheduling sessions

  • Maintaining coaching records in line with ICF ethical standards

  • Invoicing and financial administration

  • Communicating relevant information and resources

  • Complying with legal and regulatory obligations

We do not use personal data for automated decision-making or profiling.

​

6. Confidentiality and ICF Ethics

We adhere strictly to the ICF Code of Ethics and treat all coaching-related information as confidential.

Information shared during coaching sessions will not be disclosed to third parties except:

  • With your explicit written consent

  • Where disclosure is required by law

  • Where there is a serious risk of harm to you or others

The limits of confidentiality are explained in full within the coaching agreement or contract provided at the start of the engagement.

 

7. Data Security

We take appropriate technical and organisational measures to protect personal data, including:

  • Password-protected devices and files

  • Secure, encrypted cloud storage

  • Restricted access to coaching records

  • Locked storage for any physical documents

  • Secure disposal of data when no longer required

Only authorised individuals have access to personal data.

 

8. Data Sharing

We do not sell, rent, or trade personal data.

Personal data may be shared only with:

  • Trusted service providers (e.g. accounting, scheduling, IT services) who are contractually bound to confidentiality and data protection

  • Regulatory or legal authorities where legally required

 

9. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes we collected it for. This includes the purposes of satisfying any legal, regulatory, accounting and reporting requirements, to carry out legal work and for the establishment or defence of legal clams. To determine the appropriate retention period for personal data, we consider its amount, nature, sensitivity, potential risks, processing purposes, possible alternative methods, and legal requirements.

​

10. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent at any time

  • Request data portability where applicable

Requests can be made using the contact details above. We will respond within the legally required timeframe.

We conduct no automated decision making in respect of personal data.

​

11. Cookies

Our website uses cookies to improve functionality and analyse usage. You may control or disable cookies through your browser settings.

​

12. International Data Transfers

We do not transfer data outside the UK or European Economic Area.

​

13. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

​

14. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website.

bottom of page