Legal
Privacy Policy
Last updated August 2026. This policy explains what personal information Ashley Gomez Career Coaching collects, how it is used, and the rights you have, wherever in the world you are located.
Who is responsible for your information
Ashley Gomez Coaching ([ASHLEY TO ADD: ENTITY TYPE, e.g. sole proprietor or LLC]), based in VA, United States, is the controller of the personal information described here. Clients are served globally by video.
Privacy questions and data requests: withashleygomez@gmail.com. Mailing address: [ASHLEY TO ADD: BUSINESS MAILING ADDRESS].
Information collected
Information is only collected when you choose to provide it or when it is created in the ordinary course of coaching.
- Contact details you submit through the contact form or newsletter form: name, email, optional LinkedIn profile, and the message you write.
- Booking details supplied when you schedule a call through the scheduling provider: name, email, time zone, and any intake answers.
- Payment details handled by the payment processor. Card numbers are never received or stored by me; only confirmation of purchase, amount, and billing country.
- Coaching records such as session notes, exercises, and shared workspace documents created during our work together.
- Basic technical information generated when you browse the site, such as pages viewed and approximate location derived from IP address.
- Human Design readings require your birth date, time, and place, and are only collected if you request that service.
How your information is used
Your information is used to reply to enquiries, schedule and deliver coaching, take payment, send emails you have asked for, keep basic business and tax records, and improve the website. It is never sold, and it is never used for automated decision-making or profiling.
Where the law requires a legal basis, that basis is: performance of our coaching contract, your consent for marketing emails and optional information, my legitimate interest in running and securing the business, and compliance with legal and tax obligations.
Service providers
A small number of trusted providers process information on my behalf, each under their own privacy terms: website hosting, the scheduling tool, the email marketing platform, the payment processor, cloud document storage, and the messaging app used for between-session support.
Information may also be disclosed if required by law, or in connection with a sale or reorganisation of the business.
International transfers
Because the business operates from the United States, information about clients outside the United States is transferred to and processed there, and by providers located in the United States and elsewhere. Where required, these transfers rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an equivalent safeguard offered by the provider.
Cookies and analytics
This website uses only the strictly necessary cookies and local storage needed to load pages and remember your preferences. No advertising cookies or cross-site tracking pixels are used, so no consent banner is required.
Embedded tools you choose to interact with, such as the scheduling widget or payment checkout, may set their own cookies once loaded. If tracking or advertising tools are added in future, this policy will be updated and a consent banner shown where the law requires one.
How long information is kept
Enquiries that do not become client relationships are deleted within 24 months. Coaching records are kept for the duration of our work and for up to 3 years afterwards. Financial records are kept for 7 years to meet US tax requirements. Newsletter details are kept until you unsubscribe.
Your rights
Wherever you live, you may ask for a copy of your information, ask for corrections, ask for deletion, ask that marketing stop, or object to certain uses. Requests are answered free of charge, normally within 30 days, and you will never be treated differently for making one.
- UK, EU, and Swiss residents: rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent under the GDPR, plus the right to complain to your local supervisory authority.
- California residents: rights to know, delete, correct, and limit use of sensitive information under the CCPA/CPRA. Personal information is not sold or shared for cross-context behavioural advertising.
- Other US state privacy laws, including Virginia, Colorado, Connecticut, Utah, and Texas: the equivalent access, correction, deletion, and opt-out rights.
- Canada, Australia, Brazil, and comparable regimes: access, correction, and complaint rights under PIPEDA, the Australian Privacy Principles, and the LGPD.
Security and children
Reasonable technical and organisational measures protect your information, including access-controlled accounts, encrypted connections, and limiting who can see coaching records. No method of transmission is completely secure, so please avoid sending sensitive details you would not want stored.
Coaching is for adults. Services are not directed at anyone under 18 and information about children is not knowingly collected.
Changes to this policy
This policy may be updated as the business or the law changes. The date at the top shows the current version, and material changes will be communicated to active clients by email.
Note for Ashley: This policy is a thorough starting point written for a US-based coach selling internationally. Have a licensed attorney in your state review it, and complete every bracketed detail, before you publish. Business details and every bracketed placeholder are edited in src/content/site.ts.