ClariT

At ClariT (www.clarit.ie), your privacy is very important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website or engage with our leadership coaching services.

Who We Are

ClariT is a leadership coaching website. My mission is to help individuals unlock clarity, purpose and growth.

ClariT is the data controller of your personal data under the EU General Data Protection Regulation (GDPR). Our registered business address is 162 Adelaide Square, Whitefriar Street, Dublin 8 (D08 RD43), Ireland. If you have any questions about this policy, please contact us at: tahera@clarit.ie

What Information We Collect

We may collect and process the following types of personal data:

  • Personal Identification Information: Name, email address, phone number, organization name, job title, etc.
  • Technical Information: IP address, browser type, device information, pages visited, and time spent (via cookies or analytics tools).
  • Communication Data: Information you provide via forms, emails, coaching intake forms, or feedback surveys.
  • Payment Information: If you make a purchase, limited payment information may be processed through a secure third-party provider (we do not store credit card numbers).

How We Use Your Data

We process your data to:

  • Provide coaching sessions and support
  • Respond to inquiries and provide relevant resources
  • Improve our website and services
  • Send occasional newsletters, updates, or event invitations (with your consent)
  • Comply with legal and contractual obligations

Legal Basis for Processing

Under the GDPR, our lawful bases for collecting and processing your data may include:

  • Consent (when you opt into communications)
  • Contractual necessity (to provide our services)
  • Legitimate interest (to improve user experience or promote our services)
  • Legal obligation (for accounting or regulatory compliance)

Sharing Your Data

We will never sell your data. We may share limited data with:

  • Trusted third-party service providers (e.g., email platforms, CRM tools, payment processors)
  • Legal or regulatory authorities, if required by law

All third parties are GDPR-compliant and process data only as instructed by us. Some of our service providers may process data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place—such as Standard Contractual Clauses (SCCs) or adequacy decisions—to protect your data.

Payment processing is handled securely by Stripe. We do not store your full card details, and these providers act as data processors on our behalf.

Data Retention

We retain your data only for as long as necessary:

  • Contact and client data: up to 7 years (for legal and tax purposes)
  • Newsletter data: until you unsubscribe
  • Analytics data: typically retained up to 26 months

Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (the “right to be forgotten”)
  • Restrict or object to certain types of processing
  • Withdraw consent at any time (where processing is based on consent)
  • Data portability (to receive your data in a structured, machine-readable format)
  • Lodge a complaint with your local data protection authority—such as the Irish Data Protection Commission at www.dataprotection.ie

Cookies

Our website uses cookies to enhance your experience. We use only essential cookies by default. Non-essential cookies (e.g., for analytics or social media) will only be used after you give explicit consent via our cookie banner. You can accept, reject or customize cookie settings via our cookie banner or browser settings.

Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies separately.

Changes to This Policy

We may update this policy occasionally. Changes will be posted on this page with the updated effective date. We encourage you to review it periodically.

Is this relevant to our situation?  Do we have third-parties processing data?  Do they process it outside the EU?  Are there SCCs in place?