Privacy Policy

1. Introduction
At shanedowley.com, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data when you interact with us via our website, services, or communications.

We take data privacy very seriously. If you have any concerns regarding how we process your personal information, please contact us at shane@shanedowley.com

All complaints are handled systematically under our Data Protection Complaints Policy to ensure a fair and timely resolution. This policy is outlined below.

2. Who We Are
This website is operated by Shane Dowley Consulting Ltd, a UK-based coaching and consulting company. If you have any questions, you can contact us at:

Email: shane@shanedowley.com

3. What Information We Collect
We may collect the following types of personal data:

  • Contact details: name, email address, phone number

  • Session details: notes from coaching sessions (with your consent)

  • Website usage data: IP address, browser type, pages visited

Payment information: only when purchasing services (processed securely via Stripe/PayPal/etc.)

4. How We Use Your Information
We use your data to:

  • Deliver coaching and consulting services and respond to enquiries

  • Schedule and manage sessions

  • Process payments

  • Send updates, resources, or newsletters (only if you opt-in)

  • Comply with legal obligations

5. Lawful Bases for Processing
We rely on the following legal grounds:

  • Contract – to provide you with services you’ve requested

  • Consent – for marketing communications or note-taking

  • Legitimate interest – to improve services and understand usage

  • Legal obligation – where required for tax or regulatory purposes

6. How We Store and Protect Your Data
All personal data is stored securely, using encrypted systems where applicable. Coaching notes are stored confidentially and separately. We only retain data as long as necessary for the purposes outlined or as required by law.

7. Sharing Your Data
We do not sell your data. We may share it with:

  • Service providers (e.g. scheduling tools, payment processors)

  • Legal or regulatory bodies, if required by law

8. Your Rights (Under UK GDPR)
You have the right to:

  • Access your data

  • Correct inaccurate information

  • Request deletion (where applicable)

  • Withdraw consent (e.g. for marketing)

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

9. Cookies
We use cookies to improve website performance and user experience. You can control cookie preferences in your browser settings.

10. Third-Party Links
Our website may contain links to other websites. We are not responsible for their privacy practices.

11. Changes to This Policy
We may update this policy from time to time. Any significant changes will be posted on this page and, if appropriate, notified to you by email.

This policy was last updated on 25.07.2025.

Data Protection Complaints Policy

1. Introduction and Purpose

At Shane Dowley Consulting we are committed to protecting the privacy and security of personal data. We recognise that individuals have a right to understand how their data is handled and to raise concerns if they believe their data protection rights have been infringed.

This policy outlines how we receive, investigate, and resolve complaints regarding our handling of personal information. Our goal is to resolve data protection concerns effectively, transparently, and without undue delay.


2. Relevant Legislation

This policy is designed to comply with the UK's data protection framework, which includes:

The UK General Data Protection Regulation (UK GDPR)

The Data Protection Act 2018 (DPA 2018)

The Data (Use and Access) Act 2025 


3. What Counts as a Data Protection Complaint?

A data protection complaint is any expression of dissatisfaction from an individual (or someone acting legally on their behalf) regarding how we process personal data. Individuals do not need to use legal terminology or quote specific legislation for a query to be treated as a formal data protection complaint.

4. How to Submit a Complaint

We accept complaints through multiple channels to ensure accessibility. You can submit your data protection complaint to our designated lead via:

Email: shane@shanedowley.com
Post: 14 Tydeman Road, Portishead BS20 7LS

5. Our Complaint Handling Process

We follow a strict statutory framework to ensure all complaints are handled fairly and efficiently:

Stage 1 – Acknowledgement

We will acknowledge receipt of your complaint in writing within 30 days (via email or post). If a third party is complaining on your behalf, we will request proof of authorisation.

Stage 2 – Investigation

We will investigate your complaint without undue delay. We will conduct an internal review of the circumstances, making all necessary enquiries to establish what occurred.

Stage 3 – Communication

We will keep you updated on the progress of our investigation, particularly if the case is complex.

Stage 4 – Outcome

We will write to you to explain the outcome of our investigation without undue delay and detail any remedial actions we have taken.

6. Escalation to the Information Commissioner’s Office (ICO)

If you are not satisfied with the outcome of our internal investigation or how your complaint was handled, you have the right to escalate your complaint directly with the Information Commissioner's Office (ICO)  www.ico.org.uk

7. Record Keeping and Retention

We maintain a log of all data protection complaints received. This record includes:

  •       The date the complaint was received and acknowledged.

  •       Details of the investigation undertaken and evidence considered.

  •       The final outcome, the rationale for our decision, and any remedial actions taken.

8. Policy Review and Accountability

This policy is reviewed annually to ensure ongoing compliance with UK statutory requirements and Information Commissioner's Office (ICO) guidance.

Next Review Date: 1st June 2027