CentraPath
Privacy Policy

1. Introduction

CentraPath (“we”, “our”, “us”) is committed to respecting and protecting your privacy. This Privacy Policy explains how we comply with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, what personal data we collect about you, how we use it, and the rights you have.

CentraPath is the data controller of your personal information as defined in Article 4(7) UK GDPR.

This Privacy Policy applies to all visitors to our website, participants in our workplace workshops, coaching clients, corporate customers, and anyone who communicates or engages with CentraPath. It does not form part of any contract and may be updated periodically.

2. Contact Details

CentraPath – Data Protection Lead
Email: connect@centrapath.co.uk
ICO Registration Number: [Awaiting this]

3. Personal Data We Collect

We may collect personal data directly from you, from your employer, through our website, event registrations, coaching agreements, enquiries, or during the delivery of our services.

Categories of data we may collect include:

  • Identity Data: Name, job title, employer, professional role

  • Contact Data: Email address, telephone number, business address

  • Business Information: Company name, billing details

  • Workshop & Coaching Information: Attendance records, voluntary notes, feedback forms, progress goals

  • Technical Data: IP address, browser type, device type, cookies, analytics

  • Financial Data: Payment details (processed securely; not stored by us)

  • Communication Data: Emails, messages, preferences

  • Marketing Preferences: Subscription and opt-in records

4. Purposes, Lawful Bases and Retention

We process your personal data only where we have a lawful basis. The information below outlines the main purposes for processing.

Purpose: To respond to enquiries
Data Used: Name, contact details, messages
Lawful Basis: Consent / Legitimate Interest
Data Sharing: N/A
Retention Period: 2 years

Purpose: To provide workshops or coaching
Data Used: Identity, contact, business & coaching data
Lawful Basis: Contract / Legitimate Interest
Data Sharing: Subcontractors delivering services
Retention Period: 6 years after contract ends

Purpose: To manage client relationships
Data Used: Identity, contact, communication data
Lawful Basis: Contract / Legitimate Interest
Data Sharing: N/A
Retention Period: 6 years

Purpose: To manage billing and payments
Data Used: Identity and financial data
Lawful Basis: Contract
Data Sharing: Payment processors
Retention Period: 6 years

Purpose: To send marketing communications
Data Used: Name, email, business info
Lawful Basis: Consent / Legitimate Interest
Data Sharing: N/A
Retention Period: 1 year after last interaction

Purpose: Website analytics and improvement
Data Used: IP address, technical data
Lawful Basis: Legitimate Interest
Data Sharing: Analytics providers
Retention Period: 6 months

5. Data Sharing and International Transfers

We may share your personal data with trusted third parties such as:

  • IT, hosting, and cloud providers

  • Email and communication platforms

  • Payment processors

  • Subcontractors delivering coaching or workshops

  • Analytics providers

  • Legal or regulatory authorities if required

Where personal data is transferred outside the UK, safeguards include:

  • Adequacy Regulations

  • Standard Contractual Clauses (SCCs)

  • International Data Transfer Agreements (IDTAs)

6. Data Security

We use appropriate technical and organisational measures including secure servers, encryption, access controls and staff confidentiality processes.

7. Your Rights Under UK GDPR

Your rights include:

  • Absolute Rights:

    • Right of Access

    • Right to Rectification

    • Right to Withdraw Consent

    • Right to Object to Direct Marketing

  • Qualified Rights:

    • Right to Erasure

    • Right to Restrict Processing

    • Right to Data Portability

    • Rights relating to automated decision-making (not used by CentraPath)

You may complain to the Information Commissioner’s Office: https://ico.org.uk

8. Cookies and Website Tracking

This website is hosted by Squarespace. Squarespace collects personal information when you visit this website, including:

  • Information about your browser, network and device

  • Web pages you visited prior to coming to this website

  • Web pages you view while on this website

  • Your IP address

Squarespace needs the data to run this website, and to protect and improve its platform and services. You can read more about how Squarespace uses your data (site usage information of end users) for its own purposes in their Privacy Policy.

This website collects personal information to power our site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity.

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. You can disable cookies in your browser settings. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We provide this information to Squarespace, our website hosting provider, so that they can provide website services to us and help us manage our relationship with you.

This website serves font files from and renders fonts using Google Fonts. To properly display this site to you, these third parties may receive personal information about you, including:

  • Information about your browser, network, or device

  • Information about this site and the page you’re viewing on it

  • Your IP address

9. Third-Party Links

We are not responsible for the data practices of external sites linked from our website.

10. Business Transfers

If CentraPath undergoes a merger or acquisition, your data may be transferred to the new owner under this policy.

11. Changes to This Privacy Policy

We may update this policy periodically. The “Last Updated” date will reflect changes.

12. Contacting Us

CentraPath – Data Protection Lead
Email: connect@centrapath.co.uk