Privacy Policy

The Whitehouse Principle Website (" Whitehouse Principle ", "we", "us" or "our") is committed to protecting the privacy and security of your personal information.

1What Is The Purpose Of This Policy?

This Privacy Policy describes how Whitehouse Principle collects, uses, and discloses your personal information when you visit, use our services, or book a session with us via one of our websites accessible at www.thewhitehouseprinciple.com and www.traumacoachuk.com (the "Sites") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a Client, Brand Partners, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

This Privacy Policy does not apply to any third -party services or links integrated with the Service ("Third-Party Services"), or to the privacy practices of any other third-party products, services or brands. “Personal Information” means any information or set of information that identifies or could be used by or on behalf of a User, Client or You to identify an individual. Personal information does not include information that is anonymized or publicly available information that has not been combined with non-public personal information.

Whitehouse Principle process all User’s information in accordance with the UK GDPR (EU 2016/679), & the EU Consumer Rights Directive (2011/83/EU).

The applicable legal framework is the UK GDPR and relevant European Union data privacy regulations. Please read the following carefully to understand how we handle personal data we collect from you when you:

• Use our Website or engage with us in any way
• Book a session with us on the website
• Enquire or Communicate with us

Nothing in this policy affects your rights under applicable Data Protection Legislation.

2Your Consent

In accordance with Article 9(2) (a) GDPR, and the UK GDPR you hereby give your explicit and informed consent to the processing of any related personal data submitted through the Website.

This consent is given voluntarily and can be withdrawn at any time by emailing [email protected]. As a User of the Website, you accept the conditions and consent to the processing of your submitted data for the sole purpose of providing the service.

You have the right to object/withdraw yo ur consent at any time by writing to us at [email protected].

3Data Controller

The Whitehouse Principle ("the Legal Entity") and its wholly owned subsidiaries own and operate the following Website available at www.thewhitehouseprinciple.com and www.traumacoachuk.com with legal information defined below

Whitehouse Principle No1 Business Centre, 1 Alvin St, Gloucester, Gloucestershire, GL1 3EJ, UK Email: [email protected] Website: www.thewhitehouseprinciple.com and www.traumacoachuk.com

For purposes of the data protection law, Whitehouse Principle is the "data controller", meaning we are responsible for how we handle your data.

4Our Privacy Promise

This section define our privacy promise and confirm our readiness to protect personal data;

• We value your privacy & data security
• We do not use your data for commercial purpose
• We comply with the UK GDPR and (EU 2016/679) and relevant European Union regulations regarding your privacy;
• We will never sell your data;
• You control your data.

5How We Collect Your Personal Information

The information that we collect and use varies depending on how you interact with us. We may collect the following categories of personal data from you when you:

• Contact us; for example, when sending us a message through the website.
• Booking information: including your name, email address, company profile, payment confirmation, email address, and phone number.
• When you communicate with us by phone

6The Information We Hold about Your activity

For the performance of our services, w e may also automatically collect certain information about your interaction with the Services referred as ("Usage Data"). To do this, we may use cookies, pixels and similar technologies (" Cookies"). Some non-personal information about you that may include:

• Technical Data (IP address, browser info, usage stats, network connection)
• Marketing Data (communication preferences, consent records)

We do not knowingly collect non-personal data or anonymous information except when you choose to visit our website.

7How We Use Your Information

We use your data only where permitted by law and also to process the personal data that is necessary for us to provide our services and website to you including:

• To deliver our services; in order to perform our contract with you.
• To process your payments, when you book a session with us;
• To send notifications to you related to your session, or other communication.
• To create, maintain and otherwise manage your account
• Where you have given consent (marketing communications, etc.)
• To comply with legal obligations
• To pursue our legitimate business interests

Where required by law or where we rely on your consent, we will process your data only for the specific purposes outlined above. We will not sell your personal data to third parties. We may send you marketing messages if you have given consent. You can opt out at any time.

8Lawful Basis for Processing

We process your personal data based on one or more of the following lawful grounds:

• Contractual necessity: It is within our contractual necessity to provide our services to you via the Website.
• Marketing and Advertising: To send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services.
• Security and Fraud Prevention. We process your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity related to the use of the service.
• Consent: we collect User explicit consent to process your personal information for marketing communications, in accordance with (Art. 6(1)(a) GDPR) and the UK Privacy laws;
• Legal obligation - When processing is required to comply with a court order.
• Legitimate interests: We process your data based on our legitimate interest in compliance with (Art. 6(1) (f) GDPR) in providing secured Website operations)

9Cookie Policy

Like other websites, we use Cookies on our Site. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services).

We may also permit third parties and services providers to use Cookies on our Site to better tailor the service s, products and advertising on our Site and other websites. For more Information regarding our cookie usage please visit our cookie policy page

10Analytics & Tracking

When you visit our Website, we may automatically collect technical information (Non- essential information and essential information) via the use of a third-party cookie or pixel technology. These technical information include:

• IP address and general location
• Browser type and device information
• Pages visited and time spent on site
• Referral source (how you found our site)

This information is collected through basic server logs and helps us understand how our Website is used. You can control non-essential cookies through your browser settings or our cookie consent banner.

11Who We Share Your Information With

For the operation of our Website and provision of our services, Whitehouse Principle will sometimes share user data to third parties for the provision of the services and based on explicit User consent. All third parties that receive User -submitted data act as independent data controllers under the GDPR.

We may share your data with:

• Service providers (IT support, payment processing provider, data analytics, Client support, cloud storage;
• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful Online Coaching service.
• In connection with a business transaction such as a merger or bankruptcy
• To comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests)
• To enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
• Legal authorities where required by law

You agree to give your Consent for the use and Sharing of yo ur data, notwithstanding you reserve the right to revoke your consent by sending us an email.

12Third-party Links

Our Website may contain links to other service that we do not own or operate. The Whitehouse Principle provide links to third party service as a convenience to the user. These links are not intended as an endorsement of or referral to the linked service. The linked Service have separate and independent privacy policies, notices and terms of use.

We do not have any control over such Service, and therefore we have no responsibility or liability for the manner in which the organizations that operate such linked Service may collect, use or disclose, secure and otherwise treat personal information. We encourage you to read the privacy policy of every Service you visit.

13International Transfers

We rely upon a number of means to transfer personal information which is subject to: (a) the European General Data Protection Regulation (“GDPR”) in accordance with Chapter V of the GDPR; or (b) applicable UK d ata privacy laws in accordance therewith. References to the UK GDPR and its provisions.

Other means. We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or U K data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding, enforceable commitments from the recipient to apply the appropriate safeguards, including as regards data subjects' rights.

You can request further information on specific data transfers and a copy of the appropriate safeguards by contacting us.

14Security Measures

We take appropriate security measures to protect your personal data, including:

• SSL encryption for data transmission on our Website
• AES-256 encryption for stored data, regular security audits.
• Requiring third-party service providers to implement appropriate security measures.
• We log all User consents with timestamps, IP addresses, and context of submission to comply with Article 7(1) GDPR

If you have any further questions about our security and processing activities, please contact us

15Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy or as required by law. Once retention periods expire, we securely delete or anonymize your data. Our retention practices are describe below

Type of Data Definition User Information Retained for at least 2 years until you withdraw your consent or request we delete your data with us Booking Information Retained for at least 12 months for security and technical reason Marketing communications Retained until you withdraw your consent Website logs Retained up to 12 months for security and technical purposes

In some cases, retention periods may be extended where required by law to do so or for dispute resolution purpose. We may anonymise data for statistical analysis, which can be retained indefinitely.

16Your Rights

Under the UK and European Union GDPR law, you have the following rights regarding your personal data:

• Right to access: information about your data stored by us and its processing (art. 15 GDPR),
• Right to rectification: correction of incorrect personal data (art. 16 GDPR),
• Right to erasure: deletion of your data stored by us (art. 17 GDPR),
• Right to restrict processing: restriction of data processing if we are not yet allowed to delete your data due to legal obligations (art. 18 GDPR),
• Right to object: objection to the processing of your data by us (art. 21 GDPR) and
• Right to data portability: data portability, provided that you have consented to data processing or have concluded a contract with us (art. 20 GDPR).
• Right to withdraw your consent: if you have given us your consent, you can revoke it at any time with effect for the future.

To exercise any of these rights, contact us at [email protected]. We may request proof of identity to verify your request. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

17Children's Privacy

Our services are not directed at children under 16, and individuals under 16 cannot use our website. Please contact us immediately. If you believe we have collected data from someone under 16,

18Notice for UK Users’

This section describe Whitehouse Principle’s privacy notice for United Kingdom Users’. If you are a User, who reside in the UK, you holds the right to benefit from any mandatory provisions of the law of the United Kingdom in which you are resident in. you are also entitled to be covered by the UK GDPR Laws as regarding your personal data. If you like to exercise your rights please visits our privacy policy page for more information.

19Notice for European Union Users’

This section describe Whitehouse Principle’s privacy notice for Users’ who live outside the United Kingdom and within the European Union region. If you are a User, who reside in the European Union region, you holds the right to benefit from any mandatory provisions of the law of the country in which you are resident in. you are also entitled to be covered by the European Union GDPR Laws as regarding your personal data. If you like to exercise your rights please send us a message.

20Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted to our Website with a new "last updated" date. For significant changes, we may notify you by email or prominent Website notice.

21Complaints or Concerns

If you have any concerns, please contact us directly at [email protected]. You also have the right to file a complaint with the UK's Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk/make-a-complaint or call their helpline on 0303 123 1113 (Monday to Friday, 9am to 5pm).

22Contact Us

For any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: [email protected] Address: No1 Business Centre, 1 Alvin St, Gloucester, Gloucestershire, GL1 3EJ, UK