Privacy Policy of Numa Solutions

Numa Solutions Ltd ("we", "us", "our") is committed to protecting and respecting your privacy.

This policy explains how we collect, use, and protect any personal data we collect from you or that you provide to us, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Numa Solutions Ltd is the data controller responsible for your personal data.

2. What Information We Collect

We may collect and process the following personal data:

● Identity Data: Your name, title, and (where applicable) company name.

● Contact Data: Your email address, phone number, and billing/business address.

● Financial Data: Payment card details and bank account information for processing payments.

● Transaction Data: Details of the Services you have purchased from us.

● Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system, and platform you use to access our website.

● Usage Data: Information about how you use our website and Services.

● Marketing and Communications Data: Your preferences in receiving marketing from us.

● Sensitive Data (Special Category Data): In the course of providing coaching or mentoring, you may voluntarily disclose personal information related to your health, beliefs, or personal life. We will only process this information with your explicit consent and will treat it with the highest level of confidentiality.

3. How We Collect Your Data

● Directly from you: When you fill in forms on our website, contact us by email or phone, or engage our Services.

● Automatically: As you use our website, we may automatically collect Technical Data using cookies and similar technologies.

● From third parties: We may receive data from third-party services such as analytics providers (e.g., Google Analytics) or payment processors.

4. How We Use Your Data (Lawful Basis)

We will only use your personal data when the law allows us to. Most commonly, we will use your data in the following circumstances:

● To Perform a Contract: To provide our Services (consulting, training, coaching, mentoring) to you as per our Service Agreement.

● For Our Legitimate Interests: To manage our business, improve our website and Services, and protect our business, provided your interests and fundamental rights do not override those interests.

● With Your Consent: To send you marketing communications (which you can opt-out of at any time).

● To Comply with a Legal Obligation: To meet our legal, regulatory, or tax responsibilities.

5. Data Sharing and Disclosure

We do not sell your personal data. We may have to share your data with trusted third parties, including:

● Service Providers: Such as IT and system administration services, website hosts, and payment processors.

● Professional Advisers: Including lawyers, bankers, auditors, and insurers.

● Legal Authorities: HM Revenue & Customs, regulators, and other authorities who require reporting of processing activities in certain circumstances.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. International Data Transfers

Our clients and website visitors may be global. If we transfer your personal data out of the UK (e.g., to a service provider based in the EEA or USA), we will ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is in place:

● The country has been deemed to provide an adequate level of protection for personal data by the UK.

● We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK (e.g., International Data Transfer Agreements or Addendums).

7. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised way. This includes SSL encryption for our website and access controls to our systems.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (e.g., 6 years for tax purposes).

9. Your Legal Rights

Under UK data protection law, you have rights including:

● Right to Access: Request a copy of the personal data we hold about you.

● Right to Rectification: Request correction of inaccurate or incomplete data.

● Right to Erasure: Request that we delete your personal data ("right to be forgotten").

● Right to Restrict Processing:Request that we suspend the processing of your data.

● Right to Data Portability:Request the transfer of your data to you or a third party.

● Right to Object: Object to our processing of your data (e.g., for direct marketing).

● Right to Withdraw Consent: You can withdraw your consent at any time where we are relying on consent to process your data.

To exercise any of these rights, please contact us.

10. Cookies

Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and improve our site. We will ask for your consent to use non-essential cookies.

11. Children's Privacy

Our Services are not intended for individuals under the age of 18, and we do not knowingly collect data relating to children.

12. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page.

13. How to Complain

If you have any concerns about our use of your personal data, please contact us first at stewart@numa-solutions.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

Last Updated: 28 October 2025