Privacy Policy

Introduction

Coaching for Collective Impact is a trading name of Lubos Lendvay, a sole trader based in the United Kingdom.

Lubos Lendvay ("I", "me", "my") is committed to protecting your privacy. This Privacy Policy explains how I collect, use, store, and protect your personal data when you use this website or engage with my coaching services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to this website (coachingforcollectiveimpact.co.uk) and to CPR Reflect, an AI-assisted leadership reflection platform available at cprreflect.com (also accessible via coachingforcollectiveimpact.co.uk/guided-reflection). CPR Reflect is a product of Coaching for Collective Impact and is operated by Lubos Lendvay.

1. Information I Collect

1.1 Information You Provide

When you use this website or contact me, I may collect:

• Name and contact details (email, phone number)
• Information provided through contact forms or enquiry submissions
• Newsletter subscription details
• Booking and scheduling information via Calendly
• Any other information you choose to provide

1.1a Information from CPR Reflect

CPR Reflect is an AI-assisted self-reflection service available at cprreflect.com (also accessible via coachingforcollectiveimpact.co.uk/guided-reflection). It is a distinct offering from human coaching and operates on a paid subscription basis.

When you use CPR Reflect, I collect:

• Email address (for account management and subscription purposes)
• Conversation history: all messages you send and AI-generated responses
• Journal entries: any reflections you save within the tool
• Subscription and payment information (processed via Stripe; I do not store full card details)
• Usage data: timestamps, session length, features accessed

This data may include sensitive personal information relating to your leadership context, values, faith or spiritual beliefs, ethical dilemmas, or personal circumstances. You should only share information you are comfortable with being processed as described in this policy.

1.2 Session Transcripts

During coaching sessions, I use live transcription technology (currently Notion) to generate a real-time text transcript of the conversation. This supports accurate note-taking while allowing me to remain fully present throughout the session.

Transcripts may include personal information shared during the session, including information about your professional or personal circumstances. They are used for the purposes set out in section 2 below.

Transcription is discussed and agreed with clients prior to the commencement of coaching. Sessions are not audio or video recorded unless this has been separately and explicitly agreed in writing. Only text transcripts are generated through the transcription process described here.

1.3 Information Collected Automatically

When you visit this website or CPR Reflect, certain information may be collected automatically, including:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on the website
• Referring website or source

2. How I Use Your Information

I use your personal data for the following purposes:

• Responding to enquiries and providing information about my services
• Scheduling and managing coaching sessions
• Preparing coaching notes, session summaries, and supporting continuity between sessions
• Reflective follow-up and professional record-keeping as required by ICF standards
• Sending newsletters and updates (with your consent)
• Improving website functionality and user experience
• Complying with legal and regulatory obligations

2a. How I Use Information from CPR Reflect

• To provide the AI-assisted reflection service and generate responses grounded in ethical coaching principles and the CPR Leadership Alignment framework
• To maintain your conversation history and journal entries for your access and continuity within the tool
• To manage your subscription, process payments, and send service-related communications
• To improve CPR Reflect (e.g., refining AI prompts, identifying technical issues, understanding user engagement)
• To comply with payment processing requirements and tax obligations

Your conversation and journal data is retained for as long as your subscription is active. Upon cancellation or account deletion, you may request permanent deletion of your reflection data in accordance with section 7 below.

3. Legal Basis for Processing

I process your personal data based on:

• Consent: Where you have explicitly agreed (e.g., newsletter sign-up)
• Contractual necessity: To provide coaching services or CPR Reflect access you have requested
• Legitimate interests: To operate and improve my business
• Legal obligation: Where required by law

4. Third-Party Services

I use the following third-party services that may collect or process your data:

• Calendly: For scheduling and managing appointments
• Email service providers (Resend): For newsletter distribution and communication
• Analytics tools: To understand website usage and improve services
• Hosting providers: To host this website, CPR Reflect, and store data securely
• Stripe: For payment processing (subscription payments for CPR Reflect). Stripe processes card details; I retain only tokenised payment information and transaction records. See Stripe's Privacy Policy at stripe.com/privacy
• Large Language Model (LLM) provider: For generating AI responses within CPR Reflect. Your conversation content is sent to the LLM provider to generate responses. The LLM provider does not use your data to train models or share it with third parties. See OpenAI's privacy policy at openai.com/policies/privacy-policy for details on data retention

These providers have their own privacy policies and are responsible for how they handle your data.

4a. Live Transcription and Use of AI Tools

Section 1.2 describes how session transcripts are collected. This section explains how they are processed and stored, and the role of Notion as a data processor.

Transcripts are stored securely within Notion and retained only for as long as necessary for the purposes outlined in sections 1.2 and 2. Notion acts as a data processor under a data processing agreement. Data may be stored on servers outside the United Kingdom; where this occurs, I rely on appropriate safeguards under UK GDPR. For further details, see Notion's Privacy Policy at notion.so/privacy.

Notion AI is also used for general internal productivity tasks such as summarising notes and organising workflows. I do not intentionally submit sensitive personal data to AI tools beyond what is generated during the transcription process described in section 1.2. All coaching decisions, professional judgements, and client interactions are led by a human practitioner. No automated decision-making or profiling is applied to client data.

If you have questions about transcription or wish to discuss how your session data is handled, please contact me using the details in section 11.

5. Cookies

This website and CPR Reflect use cookies to enhance your experience. You can manage cookie preferences through your browser settings. For more details, see the Cookie Policy.

6. Data Security

I take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. However, no data transmission over the internet is completely secure.

7. Data Retention

I retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law:

• Newsletter Subscriptions: Until you unsubscribe or 2 years of inactivity
• Contact Form Submissions: 3 years for business records
• Coaching Client Records: 7 years as required for ICF professional coaching standards
• CPR Reflect Conversations and Journal Entries: Retained for the duration of your subscription. Upon cancellation or account deletion, your conversation and journal data will be deleted within 30 days unless you request otherwise
• CPR Reflect Subscription and Payment Records: 6 years as required for UK tax and accounting obligations

You may request deletion of your data at any time by contacting me or using the unsubscribe mechanism for newsletters. For CPR Reflect data specifically, you can delete individual conversations or journal entries within the tool, or request complete account deletion by contacting me.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to processing of your data
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact me at hello@CoachingForCollectiveImpact.co.uk

9. International Transfers

Some third-party services I use may transfer data outside the UK. Where this occurs, I ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR.

10. Changes to This Policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact:

Data Controller: Lubos Lendvay
Trading as: Coaching for Collective Impact
Address: Coaching for Collective Impact, 124 City Road, London, EC1V 2NX
Email: hello@CoachingForCollectiveImpact.co.uk