Privacy Policy
This policy explains what information carlaroyal.com collects, how it is used, and what rights you have over it.
Who is responsible for your information
Carla Royal Coaching and Consulting is the data controller for information collected through this site.
Contact: carla@carlaroyal.com
Information Collected
Information you provide. Name, email address, phone number, and anything else you choose to send when you contact Carla, book a call, subscribe to writing, or enter into an engagement.
Payment information. Payments are processed by third-party payment providers. Card details are entered directly with those providers, encrypted in transit, and are not stored on this site or on Carla's servers.
Site activity. Pages visited, approximate location derived from IP address, browser and device type, referring site, and time spent. This is collected through the site platform and analytics tools.
Cookies. This site uses cookies, which are small files stored on your device. Some are necessary for the site to function. Others support analytics and remembering your preferences. You can control cookies through your browser settings, and disabling some of them may affect how the site works.
How Information Is Used
To respond to enquiries and communicate with you.
To schedule and deliver coaching services.
To process payments.
To send writing or updates where you have asked to receive them. You can unsubscribe at any time using the link in any message.
To understand how the site is used and improve it.
To meet legal, accounting, and regulatory obligations.
Your information is not sold. It is not rented, traded, or shared for anyone else's marketing.
Legal Basis for Processing
For visitors in the United Kingdom and European Economic Area, information is processed on the following bases: performance of a contract where you have engaged Carla's services, consent where you have subscribed to communications or accepted non-essential cookies, legitimate interests in operating and improving the site and responding to enquiries, and legal obligation where retention is required by law.
Who Information Is Shared With
Information is shared with service providers who make the site and the practice function. These include:
Squarespace, which hosts this website and provides email and scheduling services.
Buzzsprout, which hosts and distributes the podcast.
Riverside and Zoom, which are used to hold and record conversations and sessions.
Payment processors, which handle transactions and are named at the point of payment.
These providers process information on Carla's behalf and are not permitted to use it for their own purposes.
Information may also be disclosed where required by law, or to establish or defend a legal claim.
These providers are located in the United States. Where information is transferred outside the United Kingdom or European Economic Area, that transfer relies on the provider's own safeguards, such as standard contractual clauses.
Client Confidentiality
This policy covers information collected through the website.
The content of coaching engagements is separately confidential and is governed by the engagement agreement and the terms of service. Session content, client identities, and anything shared in the course of the work are not used for marketing, published, or disclosed to third parties without written permission, except where disclosure is required by law.
How Long Information Is Kept
Enquiry and correspondence records are kept for as long as needed to respond and for a reasonable period afterwards.
Client records are kept for the duration of the engagement and afterwards for as long as required for legal, tax, and professional purposes.
Subscription records are kept until you unsubscribe.
Analytics data is retained according to the settings of the analytics provider.
Your Rights
You may request access to the personal information held about you, ask for it to be corrected, ask for it to be deleted, object to certain processing, ask that processing be restricted, or ask to receive your information in a portable format.
To make a request, email carla@carlaroyal.com.
If you are in the United Kingdom or European Economic Area, you also have the right to withdraw consent at any time and the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information is collected and how it is used, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising these rights. Carla Royal Coaching and Consulting does not sell or share personal information as those terms are defined under California law.
Security
Reasonable technical and organisational measures are used to protect information, including encrypted connections. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.
Other Sites
This site links to other websites and platforms. This policy does not cover their practices. Review their policies directly.
Age
This site is intended for adults. Personal information is not knowingly collected from anyone under 18. If you believe a child has provided information, email carla@carlaroyal.com and it will be deleted.
Changes
This policy may be updated. Changes are posted on this page with a revised date. Where changes are significant, subscribers will be notified by email.
Last updated: July 2026