Blended Learning Studio is committed to protecting your privacy and personal data. This policy explains what personal data we collect, why we hold it, how long we keep it, and your statutory rights under UK GDPR.
Last updated: September 18, 2026
Blended Learning Studio is the data controller for personal data collected through www.blendedlearningstudio.com and in the course of our coaching, learning design, and organisational development work.
This policy explains what personal data we collect, why we hold it, how long we keep it, and the statutory rights you have over it. It covers visitors to the website, individuals who make an enquiry, and participants taking part in coaching, assessments, programmes or research we deliver for client organisations.
Note on Employer Commissions: Where we deliver coaching, assessments or diagnostic work commissioned by an employer, that employer is usually the data controller for participant data, and we act as a data processor under their instructions and our service contract. In those cases, the employer’s privacy notice applies alongside this policy.
We collect only the information necessary to respond to client enquiries and deliver high-calibre professional services:
| Category | What It Includes | Source |
|---|---|---|
| Enquiry Data | Name, work email, organisation, area of interest, brief described in consultation form | You, via website form or direct email |
| Client & Contract Data | Contact details of client sponsors, purchase order, invoicing details, commercial correspondence | You or your organisation |
| Coaching Data | Session notes, development goals, contracting forms, coaching agreements, session reflections | You, during executive coaching sessions |
| Assessment Data | Psychometric assessment responses and diagnostic reports, workplace needs assessment reports | You, via secure assessment platforms |
| Diagnostic & Research Data | Qualitative interview notes, focus group transcripts, survey responses, thematic analysis inputs | Participants in client engagements |
| Website Usage Data | IP address, browser and device configuration, pages visited, referring URLs, cookie identifiers | Automatically via hosting and analytics |
| Marketing Data | Email address and subscription preferences for thought leadership and industry insights | You, via voluntary opt-in |
Some specialist work involves data treated as special category under UK GDPR (e.g. neurodivergence, disability, health/wellbeing information in workplace needs assessments, or demographic diversity data in inclusion diagnostics). We collect this only where strictly necessary for commissioned work, supported by an Article 9 condition (such as explicit consent or employment/occupational health conditions). Diagnostic reporting is always anonymised or aggregated.
What is discussed in an executive coaching session remains strictly between coach and coachee. We share only agreed broad themes, attendance records, and high-level progress with sponsoring organisations as agreed at contracting. The only exceptions are risks of serious harm or statutory legal requirements, strictly in accordance with ICF and EMCC ethical codes.
Under Article 6 of the UK GDPR, we process personal data under the following legal bases:
| Purpose / Processing Activity | Lawful Basis (UK GDPR) |
|---|---|
| Responding to enquiries & arranging initial consultations | Legitimate Interests |
| Negotiating and delivering client service contracts | Contract / Legitimate Interests |
| Delivering coaching, facilitation, assessments & diagnostic projects | Contract; Explicit Consent for Special Category |
| Statutory bookkeeping, accounting, and tax compliance | Legal Obligation |
| Coaching supervision, insurance & professional body compliance | Legal Obligation & Legitimate Interests |
| Sending published insights or direct marketing updates | Consent / Soft Opt-in (PECR) |
| Website security, diagnostics, and technical performance | Legitimate Interests (Consent for Analytics Cookies) |
| Publishing anonymised case studies & client testimonials | Consent |
No Automated Profiling: We do not carry out automated decision-making producing legal or similarly significant effects. Psychometric reports are always interpreted and debriefed by a qualified psychological practitioner.
Cookies are small files stored on your device when you browse our site. We utilise cookies in three categories:
We never sell data and never build advertising profiles. You can adjust browser cookie preferences at any time.
We never sell personal data or share it with third parties for marketing. We share data only under Article 28 data processor agreements with vetted providers:
International transfers outside the UK are protected by UK Adequacy Decisions or the UK International Data Transfer Agreement (IDTA).
We retain personal records only for as long as necessary to fulfil their intended purpose, after which they are securely erased or permanently anonymised:
| Record Type | Retention Period |
|---|---|
| General Enquiries (not progressing to work) | 12 months from date of last communication |
| Client Contract & Engagement Files | 6 years following engagement conclusion (Limitation Act) |
| Coaching Session Notes & Agreements | 12 months after coaching completion (unless contract states otherwise) |
| Psychometric & Workplace Needs Assessments | As agreed with client sponsor, typically no more than 3 years |
| Diagnostic & Qualitative Research Data | Raw notes deleted within 6 months; reports fully anonymised |
| Accounting, Invoicing & Financial Records | 6 years from end of financial year (HMRC compliance) |
| Marketing Subscriptions | Retained until unsubscribed (followed by suppression record) |
We implement robust technical and organisational security measures:
In the unlikely event of a reportable data breach, we notify the Information Commissioner’s Office (ICO) within 72 hours and inform affected individuals promptly.
Under UK data protection law, you possess enforceable rights:
To exercise any right, contact us via our website form. We respond within 30 days without fee.