FLOW GROWTH HUB
Privacy Notice
Clear information about how your personal data is handled
Last updated: August 2026
Your privacy matters. Whether you are engaging in coaching, attending a programme or event, making an enquiry, or simply getting in touch, this notice explains what personal information Flow Growth Hub may collect, why it is used, how it is protected and the rights available to you.
1. Who is responsible for your information?
Flow Growth Hub is operated by Sarah Curran in Ireland. For personal data processed through the website and through Flow coaching and related professional services, Flow Growth Hub / Sarah Curran acts as the data controller.
Privacy enquiries can be sent to: flowgrowthhub@gmail.com
2. What information may be collected?
Depending on how you interact with Flow Growth Hub, this may include:
- your name and contact details;
- information you provide when making an enquiry or booking a service;
- information provided through coaching intake, reflection or feedback forms;
- appointment, scheduling and communication records;
- payment, invoice and transaction information;
- brief professional coaching notes and agreed actions or resources;
- feedback or testimonials you choose to provide; and
- other information you voluntarily share where it is relevant to the service being provided.
Coaching conversations can sometimes involve sensitive information, including information about health or wellbeing. I aim to collect and retain only information that is relevant and necessary for our work together.
3. Why is your information used?
Personal information may be used to:
- respond to enquiries and take steps requested before you enter into a coaching or service agreement;
- arrange and provide coaching, workshops, programmes or other Flow services;
- communicate with you about appointments and our work together;
- process payments and maintain appropriate business and financial records;
- maintain proportionate professional coaching records;
- meet legal, tax, accounting, insurance or other professional requirements;
- improve services through feedback; and
- send marketing or updates where you have chosen to receive them or another lawful basis permits this.
Under the General Data Protection Regulation (GDPR), personal data must have an appropriate lawful basis for processing. Depending on the purpose, this may include taking steps before entering into a contract, performing a contract with you, complying with a legal obligation, pursuing legitimate interests where these do not override your rights and freedoms, or consent where consent is the appropriate basis.
Where information is special-category personal data under GDPR, an additional lawful condition will be relied upon where required.
4. Coaching confidentiality
Confidentiality is central to my coaching practice. What you share during coaching will not ordinarily be shared with another person without your permission.
Limited exceptions may arise where disclosure is required or permitted by law, in response to a valid legal process, or where there is a serious risk of harm and disclosure is considered necessary and proportionate.
I may discuss appropriately anonymised or minimised aspects of coaching within confidential professional supervision. Where coaching is sponsored by an employer or another organisation, any information that may be shared with the sponsor will be agreed in advance.
5. How is your information stored and protected?
I take reasonable and appropriate measures to protect personal information from unauthorised access, loss, misuse or disclosure.
I use Google Workspace, including Google Meet, Google Docs and Google Sheets, to support the administration and delivery of my services. This may include online coaching sessions, client records, coaching documents and administrative information. Access to client information is limited and appropriate security measures are used to protect the information I hold.
Where third-party service providers process personal information in connection with my practice, I take reasonable steps to consider their privacy and security arrangements. Where personal data is transferred outside the European Economic Area, appropriate safeguards will be relied upon where required under data-protection law.
I will not enter identifiable content from confidential coaching conversations into generative AI or similar tools without appropriate transparency, a valid lawful basis and safeguards, and any consent required for the particular use.
6. How long is your information kept?
Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected and to meet relevant legal, accounting, insurance and professional requirements.
- Coaching records and professional notes will normally be retained for up to 6 years following the end of the coaching relationship, unless there is a legitimate reason to retain them for a different period.
- Financial and transaction records will normally be retained for at least 6 years, in line with applicable Irish tax and record-keeping requirements.
- Enquiries that do not lead to an ongoing professional relationship will normally be deleted when no longer required and generally within 12 months.
- Marketing information will be retained until you unsubscribe, withdraw consent where consent applies, or the information is no longer required for that purpose.
Information is reviewed periodically and securely deleted or otherwise appropriately disposed of when there is no longer a legitimate reason to retain it.
7. Marketing, feedback and testimonials
I do not sell your personal information. If you choose to receive marketing communications, you can unsubscribe at any time.
Providing feedback or a testimonial is entirely optional. Your name, photograph, coaching story, quotation or other identifying information will not be used publicly as a testimonial or case study without appropriate permission.
8. Your data-protection rights
Depending on the circumstances, you may have rights including the right to:
- access personal information held about you;
- ask for inaccurate information to be corrected;
- request erasure of information in certain circumstances;
- request restriction of processing;
- object to certain processing;
- receive certain information in a portable format; and
- withdraw consent at any time where processing is based on consent, without affecting processing already carried out lawfully.
These rights are not absolute in every circumstance. To ask a question or exercise a data-protection right, please contact flowgrowthhub@gmail.com.
9. Complaints
If you have a concern about how your personal information is handled, I would welcome the opportunity to address it directly. You also have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's supervisory authority for data protection.
Data Protection Commission: www.dataprotection.ie
10. Website and cookies
The Flow Growth Hub website may use cookies or similar technologies that are necessary for the website to function or, where enabled, for analytics or other optional purposes. Where non-essential cookies or tracking technologies are used, appropriate information and choices should be provided through the website's cookie settings or cookie notice.
11. Changes to this notice
This Privacy Notice may be updated from time to time as Flow develops, services or systems change, or legal requirements evolve. The most recent version will be made available on the Flow Growth Hub website, with the date of the latest update shown above.
A final note
Privacy is more than a compliance requirement within my work. Trust, respect and psychological safety are important foundations of the relationships and spaces I create through Flow. If you have any questions about how your information is handled, you are always welcome to ask.