Journey Within Privacy Notice
Your privacy matters.
This space is built on trust, and I'm committed to looking after your information with care, respect, and integrity.
Who I am
Journey Within Therapeutic Coaching Limited is the data controller responsible for your personal information.
Kelly Suriol — hello.journeywithin@icloud.com
What I collect
When you book a session or fill in a form, I may collect:
Your name and contact details (email, phone number)
Information you choose to share about what's going on for you
Relevant wellbeing details — for example, other support you're receiving or supplements you're taking
You're always in control of what you share with me.
How I use your information
I use your information to:
Arrange and deliver your sessions
Understand how best to support you
Keep brief notes so we have continuity between sessions
The lawful basis for this is contract performance — your data, including any notes kept between sessions, is necessary to deliver the coaching you've engaged me for.
Where I need your consent for something (session recordings, for example), I'll always ask clearly first, and you can withdraw that consent at any time.
Your data is never used for automated decision-making or profiling.
Confidentiality
Everything you share with me stays confidential. The only exceptions are:
If I have a genuine concern about serious harm to you or someone else
If I'm required by law to disclose something
Wherever possible, I'd talk this through with you before taking any action.
Supervision
To make sure I'm practising safely and ethically, I discuss aspects of my work in professional supervision. This is part of my development as a practitioner — anything I share is anonymised, and you won't be identifiable.
Recordings (if applicable)
If a session is recorded, this only happens with your clear consent beforehand. Recordings are used solely for my own development as a practitioner, stored securely, and deleted within 3 months.
Where your data is stored
Your information is stored securely on password-protected systems. I use a few trusted platforms to run my practice:
Acuity Scheduling — bookings and client information
Squarespace — website and scheduling infrastructure
Zoom — online sessions
Zoom includes an AI Companion feature as standard, which helps generate session summaries and supports note-taking. As part of how Zoom works, this feature processes what's shared during our session — including your name as it appears in Zoom — so this data is personally identifiable rather than anonymous. Any AI-generated content is held to the same confidentiality as everything else in this notice.
Some of these providers may process data outside the UK. Where that happens, appropriate safeguards are in place — such as Standard Contractual Clauses or equivalent protections recognised under UK data protection law.
I take reasonable steps to protect your data from loss, misuse, or unauthorised access.
Discovery calls
If you get in touch or book a free discovery call but don't go on to book a session, I'll hold onto anything you've shared for a short period in case it's useful to follow up — then it's securely deleted. It won't be kept as a client record.
How long I keep your data
I only keep your information for as long as it's needed to:
Support the work we're doing together, and
Meet basic record-keeping requirements
This is typically up to 12 months after we finish working together. You can ask me to delete your data at any time.
Your rights
Under UK data protection law, you have the right to:
Access your personal data
Ask me to correct anything inaccurate
Ask me to delete your data
Withdraw consent at any time, where applicable
Lodge a complaint with the Information Commissioner's Office
More information is available at: https://ico.org.uk
Get in touch
If you have any questions about how your data is handled, I'd love to hear from you:
Journey Within Therapeutic Coaching Limited
Kelly Suriol
hello.journeywithin@icloud.com
Registered with the Information Commissioner's Office (ICO)
Registration number: ZC114445