Privacy Policy

Last updated: August 2026

1. INTRODUCTION & WHO WE ARE

1.1 Gil Devlin (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and safeguard your personal information when you visit Gildevlin.com, purchase digital products, or engage our coaching services.

1.2 Gil Devlin operates as a sole trader and is the Data Controller responsible for your personal data. If you have any questions regarding this policy, you can contact Gil Devlin via email at gil@gildevlin.co.uk or by post at:

Post Point, Unit 18, Chiltern Business Centre, 63-65 Woodside Road, Amersham, Buckinghamshire, HP6 6AA.

2. THE DATA WE COLLECT ABOUT YOU

2.1 Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer the following kinds of personal data:

  • Identity & Contact Data: First name, last name, business name, job title, email address, telephone number, and postal address
  • Financial & Transaction Data: Payment transaction details (note: credit card and direct debit processing is handled securely by our third-party payment gateways; we do not store full payment card details).
  • Coaching & Assessment Data: Psychometric profiles (such as DISC assessment results), coaching notes, questionnaire answers, goals, and session recordings/transcripts.
  • Technical & Usage Data: IP address, browser type, and information about how you use our website via cookies.

3. HOW WE COLLECT YOUR DATA

3.1 We collect data directly from you when you:

  • Fill out a contact form or request information on Gildevlin.com;
  • Purchase or complete a DISC assessment or digital training course;
  • Sign up for our marketing communications or newsletters;
  • Participate in video coaching sessions via Zoom Workplace;
  • Communicate with us via email, phone, or direct message;
  • Connect or exchange contact details in person at networking events, meetings, seminars, or conferences;
  • Collect publicly available business details through professional networks (such as LinkedIn) or direct messages when exploring potential business relationships.

4. LAWFUL BASIS FOR PROCESSING YOUR DATA

4.1 Under UK Data Protection law (UK GDPR), we rely on the following legal bases to process your information:

  • Contractual Necessity: To perform the contract we are about to enter into or have entered into with you (e.g. delivering coaching sessions, processing DISC assessments, and providing course materials).
  • Consent: Where you have given explicit consent to receive marketing emails or news. You may withdraw consent at any time.
  • Legitimate Interests: Where it is necessary for our legitimate business interests (e.g. following up on business enquiries, contacting business professionals met in person or via LinkedIn, improving our services, and maintaining financial records) provided your rights do not override those interests.

5. WHERE AND HOW YOUR DATA IS STORED & PROTECTED

5.1 All personal data is stored digitally in secure, password-protected, and encrypted cloud platforms. We do not keep physical paper records.

5.2 Data processed as part of our website, marketing, and services is held within the following trusted cloud systems:

  • Email Marketing & CRM Platforms (Brevo, Mailchimp, Kit): Used to manage contact databases, record business details collected through direct enquiries, LinkedIn connections, or in-person networking, deliver newsletters, send transactional emails, manage email preferences, and process subscriber opt-ins.
  • Social & Professional Networks (e.g. LinkedIn): Used for direct business-to-business networking, identifying professional contact information, and direct messaging. Details gathered during business outreach may be transferred to our cloud email or CRM systems for ongoing relationship management.
  • Zoom Workplace: Used to deliver remote coaching and training sessions. Video recordings, AI summaries, and session notes generated during coaching are stored in password-protected cloud storage and accessible only by Gil Devlin.
  • Thinkific: Used to host and manage online training platforms and course progress.
  • DISC Assessment Platforms: Used to issue and generate psychometric assessments. Access links are generated via an automated secure third-party portal upon payment clearance.
  • GoCardless / Payment Processors: Used to collect recurring direct debits and transaction processing safely and securely.
  • Cloud Email & File Systems: Operational documentation, one-to-one email correspondence, and business files are stored in secure cloud environments protected by multi-factor authentication.

6. RETENTION AND SECURITY

6.1 We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.
 
6.2 Session notes, client records, and transaction histories are retained for the duration of the coaching relationship and up to six years thereafter for tax and accounting compliance.
 
6.3 Unsuccessful enquiries or non-active mailing contacts are reviewed and deleted periodically.

7. SHARING YOUR INFORMATION

7.1 We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7.2 We may share data with technical service providers (such as hosting providers, payment processors, and assessment portals) solely to enable the delivery of our services to you. All providers are required to respect the security of your personal data and treat it in accordance with the law.

7.3 We may disclose personal data if legally required to do so by government agencies, law enforcement, or regulatory bodies.

8. YOUR LEGAL RIGHTS

8.1 Under UK data protection laws, you have rights regarding your personal data, including the right to:

  • Request access to your personal data;
  • Request correction of inaccurate data;
  • Request erasure of your personal data;
  • Object to processing or request restriction of processing;
  • Withdraw consent at any time where processing is based on consent.

8.2 To exercise any of these rights, please email gil@gildevlin.co.uk.

9. THIRD-PARTY LINKS

9.1 Gildevlin.com may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.