PRIVACY POLICY

Bendylegs Ltd / Dr Jo Watkins

Effective Date: 10th June 2026 | Review Date: 10th June 2026

 

  1. Introduction

This Privacy Policy explains how Bendylegs Ltd and Dr Jo Watkins (“we”, “our”, “us”) collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable privacy legislation.

Bendylegs Ltd provides coaching, educational programmes, consultancy, digital learning resources, and related services.

Data Controller:
Bendylegs Ltd / Dr Jo Watkins

Address:
10 Langland Bay Road

Contact Email:
jo@bendylegs.com

If you have any questions regarding this Privacy Policy or the way your information is processed, please contact us using the details above.

 

  1. Our Data Protection Principles

We are committed to processing personal data lawfully, fairly, transparently, and securely.

We aim to:

  • collect only information necessary for legitimate business purposes,
  • process data fairly and transparently,
  • maintain appropriate security measures,
  • keep information accurate and up to date,
  • retain information only for as long as necessary,
  • and respect the rights of individuals whose information we process.
     
  1. Information We Collect

We may collect and process the following categories of information:

  • Contact information including name, email address, telephone number, and billing address;
  • Account and programme participation details;
  • Coaching and educational programme information;
  • Communication records including emails and support enquiries;
  • Payment and transaction information processed securely via Stripe;
  • Technical information including IP address, browser type, device information, and website analytics;
  • Marketing preferences and subscription records;
  • Information voluntarily shared during coaching sessions, workshops, questionnaires, or programme participation.

  1. Special Category Data

In limited circumstances, coaching discussions or programme participation may involve personal wellbeing information or other sensitive personal data voluntarily disclosed by clients.

Where special category data is processed:

  • it will only be processed where necessary,
  • appropriate safeguards will be applied,
  • and explicit consent will be obtained where required by law.

We request that individuals do not provide unnecessary sensitive information.

  1. How We Collect Information

We collect information when you:

  • visit our website,
  • sign up for newsletters or lead magnets,
  • register for programmes, courses, workshops, or events,
  • purchase products or services,
  • participate in coaching sessions or community calls,
  • contact us by email, website form, or social media,
  • submit enquiries or questionnaires,
  • or otherwise engage with Bendylegs Ltd.

Information may also be collected through:

  • Kajabi,
  • Stripe,
  • website analytics tools,
  • email marketing systems,
  • scheduling platforms,
  • and authorised operational software providers.

  1. How We Use Your Information

We may use your information to:

  • provide coaching, consultancy, courses, and educational services;
  • administer programmes and client accounts;
  • process payments and bookings;
  • communicate regarding services, updates, and support;
  • provide access to digital resources and course materials;
  • improve our services and customer experience;
  • maintain business records;
  • comply with legal and regulatory obligations;
  • monitor website performance and security;
  • and send marketing communications where lawful.

  1. Legal Bases for Processing

We process personal data under one or more of the following lawful bases:

  • Consent;
  • Performance of a contract;
  • Compliance with legal obligations;
  • Legitimate interests pursued by Bendylegs Ltd;
  • Protection of vital interests where applicable.

  1. Legitimate Interests

Where processing is based on legitimate interests, we ensure that such processing is proportionate and does not override individual rights and freedoms.

Legitimate interests may include:

  • administration and operation of the business;
  • responding to enquiries;
  • service improvement and programme development;
  • website security and fraud prevention;
  • limited direct marketing to existing clients or business contacts;
  • maintaining appropriate business records.

Where appropriate, Bendylegs Ltd may carry out Legitimate Interests Assessments (LIAs).

  1. Marketing Communications

We may send newsletters, educational updates, programme information, or marketing communications where:

  • you have provided consent,
  • you have requested information from us,
  • or we are otherwise permitted to do so under applicable marketing and privacy laws.

You may unsubscribe from marketing communications at any time by:

  • clicking the unsubscribe link within emails,
  • or contacting jo@bendylegs.com.

Marketing preferences and unsubscribe requests are retained for compliance purposes.

  1. Coaching Calls, Community Calls & Recordings

Where coaching calls, Q&A sessions, Hot Seat coaching sessions, Community calls, or Connect calls are recorded for operational, educational, or support purposes, Bendylegs Ltd applies the following retention approach:

  • Individual coaching summaries and client-specific coaching call recordings are retained securely for up to 6 months and are then permanently deleted unless longer retention is required for legal, contractual, insurance, safeguarding, or regulatory reasons.
  • Group coaching sessions, Hot Seat coaching calls, Community calls, Connect calls, and live Q&A discussions involving participant interaction are routinely deleted at the end of each calendar month unless specifically designated as educational training content.
  • Evergreen masterclasses, workshops, and educational teaching materials intended for ongoing course access may be retained as part of Bendylegs Ltd’s educational programme and course library.

Access to recordings and coaching materials is restricted to authorised individuals and relevant clients only.

  1. Sharing Your Information

We do not sell or rent personal information to third parties.

We may share information where reasonably necessary with:

  • Kajabi,
  • Stripe,
  • email marketing providers,
  • cloud storage providers including Google Drive,
  • authorised subcontractors,
  • professional advisers,
  • technical support providers,
  • or legal/regulatory authorities where required.

All authorised subcontractors and service providers are expected to maintain confidentiality and apply appropriate data protection safeguards.

  1. AI & Third-Party Platform Restrictions

Bendylegs Ltd does not knowingly authorise third-party platforms or providers to use client coaching content, recordings, or personal information for the training or development of artificial intelligence models or similar technologies unless explicit consent has been obtained.

  1. International Transfers

Some third-party providers used by Bendylegs Ltd may process or store data outside the United Kingdom.

Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

  1. Data Security

We implement reasonable technical and organisational security measures designed to protect personal information from:

  • unauthorised access,
  • disclosure,
  • misuse,
  • loss,
  • alteration,
  • or destruction.

Security measures may include:

  • password protection,
  • restricted access controls,
  • secure cloud storage,
  • encrypted platforms where available,
  • and confidentiality obligations for subcontractors.

  1. Data Retention

We retain personal information only for as long as reasonably necessary for:

  • service delivery,
  • legal compliance,
  • accounting and tax purposes,
  • dispute resolution,
  • safeguarding legitimate business interests,
  • and operational administration.

Retention periods may vary depending on the type of information and applicable legal obligations.

Where information is no longer required, it will be securely deleted, anonymised, or destroyed.

  1. Your Rights

Under UK GDPR, individuals may have the right to:

  • access personal information;
  • request correction of inaccurate information;
  • request deletion of information;
  • restrict processing;
  • object to processing;
  • withdraw consent;
  • request portability of certain information;
  • and complain to a supervisory authority.

  1. Subject Access Requests

Requests relating to personal data rights may be submitted to:
jo@bendylegs.com

Bendylegs Ltd operates a documented Subject Access Request (SAR) and Data Rights Procedure and aims to respond to valid requests within one calendar month in accordance with applicable law.

Identity verification may be required before certain requests can be fulfilled.

  1. Complaints

If you have concerns regarding the way your personal information is handled, please contact us directly at jo@bendylegs.com.

Bendylegs Ltd maintains a documented Complaint Handling Procedure and aims to investigate and respond to complaints fairly and within reasonable timeframes.

If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO):

https://ico.org.uk

  1. Cookies & Website Analytics

Our website may use cookies and analytics technologies to:

  • improve website functionality,
  • understand website usage,
  • monitor performance,
  • personalise user experience,
  • and support marketing activities.

Cookies may include:

  • essential cookies,
  • analytics cookies,
  • functionality cookies,
  • and marketing cookies.

You may control cookies through your browser settings or cookie preferences where available.

Third-party analytics or advertising providers may also place cookies subject to their own privacy policies.

  1. External Links

Our website may contain links to third-party websites or platforms. We are not responsible for the privacy practices or content of external websites and encourage users to review their policies separately.

  1. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy periodically to reflect:

  • operational changes,
  • legal or regulatory updates,
  • or improvements to our privacy practices.

The latest version will always be available via our website.

  1. Contact Information

For questions regarding this Privacy Policy or data protection matters, please contact:

Dr Jo Watkins
Bendylegs Ltd
jo@bendylegs.com
 
Â