Kristin Morris Coaching
Privacy Policy
Last updated: 26 October 2026
This privacy policy explains how Kristin Morris Coaching collects, uses, stores and protects personal data. It applies to kristinmorris.co, the blog and free resources on it, our social media accounts, and the services we provide through it, including 1:1 coaching, advisory retainers, done-for-you setup, website builds, speaking and guest appearances (together, our Services).
Freedom CEO®, Freedom Business System®, Momentum Membership and Freedom Business Platform each have their own privacy policy.
1. Who we are
Kristin Morris Coaching is a trading name of Kristin Morris, a sole trader based in Jersey, Channel Islands, who also trades as Freedom CEO®, Freedom Business System®, Momentum Membership and Freedom Business Platform (we, us, our).
- Correspondence address: PO Box 163, Jersey, JE4 8RJ
- Email: [email protected]
- Registered with the Jersey Office of the Information Commissioner (JOIC), registration number 70630
We are subject to the Data Protection (Jersey) Law 2018 (the Jersey Law). Where we process personal data of people in the United Kingdom or European Economic Area, we also aim to meet the standards of the UK GDPR and EU GDPR.
2. Our two roles: controller and processor
For most of what is described in this policy, we are the controller, which means we decide how and why your personal data is used.
When we carry out done-for-you work, build a website or set up systems for a client, we may also be given access to personal data that belongs to that client's business (for example, their email list, CRM contacts or client records). For that data, our client is the controller and we act as their processor. We only use it to carry out the work we have been asked to do, keep it confidential and secure, and delete or return it when the work ends. The processing terms are set out in our Terms and Conditions.
3. The personal data we collect
| Category | Examples |
|---|---|
| Identity and contact data | Name, business name, job title, email address, phone number, country, social media handle |
| Application and enquiry data | Answers you give in an application or enquiry form, such as information about your business, goals, revenue stage and budget |
| Client and coaching data | Notes from calls, messages, goals, plans, progress and information about your business that you share with us |
| Project data | Brand assets, copy, images and logins or access you give us to your systems so we can carry out done-for-you work |
| Purchase and payment data | What you bought, billing details and transaction history. Card details are handled by our payment provider and we never see or store your full card number. |
| Speaking and media data | Event or podcast details, your contact details as organiser or host, and any recordings of the appearance |
| Usage and technical data | IP address, browser and device type, pages viewed, links clicked, email opens and clicks, referral source |
| Marketing data | Your marketing preferences, the resource or post that brought you to us, and your responses to our emails and messages |
More sensitive information
Coaching conversations sometimes touch on personal matters such as health, wellbeing or family circumstances. You never have to share these, and we will not ask you to. If you choose to share them, we will only record what is genuinely useful for your coaching, keep it confidential, and rely on your explicit consent to do so, which you can withdraw at any time.
4. How we collect it
- Directly from you, when you fill in a form or application, book a call, sign a proposal, pay an invoice, send us messages or give us access to your systems.
- Automatically, through cookies, pixels and similar technology on our website and in our emails (see section 8).
- From third parties, such as social platforms when you message us, our payment provider, people who refer you to us, and event organisers or podcast hosts who book us.
5. Why we use it and our lawful basis
Under the Jersey Law we must have a lawful basis (a condition in Schedule 2 of the Jersey Law) for each use of your personal data. These are the ones we rely on.
| Purpose | Lawful basis | Data used |
|---|---|---|
| Responding to enquiries and reviewing applications | Steps at your request before entering a contract; legitimate interests | Identity and application data |
| Delivering coaching, advisory, done-for-you and website services | Performance of a contract | Identity, client, coaching and project data |
| Recording sensitive information you choose to share in coaching | Explicit consent | Client and coaching data |
| Taking payment and collecting overdue amounts | Performance of a contract; legitimate interests (recovering money owed) | Identity and payment data |
| Arranging and delivering speaking and guest appearances | Performance of a contract; legitimate interests | Identity and speaking data |
| Sending our newsletter, blog updates and information about our services | Consent, or legitimate interests where you are an existing client and have not opted out | Identity and marketing data |
| Advertising, including retargeting on social media | Consent (through our cookie banner) | Usage and marketing data |
| Improving our website, content and services | Legitimate interests (understanding what works) | Usage data, usually in aggregated form |
| Keeping business and tax records | Legal obligation | Identity and payment data |
Where we rely on legitimate interests, we have weighed our interests against your rights and are satisfied that the use is fair and expected. You can ask us for more detail on that assessment.
6. Marketing
If you download a free resource or sign up to hear from us, we will add you to our email list and make that clear on the form. Every marketing email has an unsubscribe link, and you can email us at any time to opt out. Unsubscribing will not stop essential messages about work we are doing for you.
We never sell your personal data, and we do not share it with other businesses for their own marketing.
7. Calls, recordings, testimonials and AI
Private calls are only recorded with your agreement, and the recordings are shared only with you. We may use AI tools to transcribe or summarise calls and to help with project work. Where we do, we use paid business accounts and, where a provider offers the setting, we switch off the use of our data to train its models. We do not use AI to make decisions that have legal or similarly significant effects on you.
We will only use your name, image, words or results in our marketing (for example as a testimonial or case study) with your specific permission, and only using your real words. You can withdraw that permission for future use at any time.
Logins and access you give us for done-for-you work are stored securely, used only for that work, and we ask you to change or remove our access when the project ends.
8. Cookies, pixels and tracking
Our website uses cookies and similar technology. Strictly necessary cookies keep the site working and do not need consent. We only set analytics and advertising cookies (such as the Meta Pixel and Google Analytics) if you agree through our cookie banner, and you can change your choice at any time using the cookie settings link in the footer of our website.
Our emails may contain small tracking images that tell us whether an email was opened and which links were clicked. You can block these by turning off automatic image loading in your email app. Some blog posts contain affiliate links; if you buy through these, the provider may set a cookie to record the referral.
9. Who we share your data with
We use trusted service providers to run the business. They may only use your data to provide their services to us and must keep it secure. Our main providers are listed below.
| Provider | What they do | Where data may be held |
|---|---|---|
| Freedom Business Platform (built on HighLevel, Inc.) | Website, CRM, forms, email and calendar booking | United States |
| Stripe | Payment processing and invoicing | United States and European Union |
| Workspace email and files, analytics | United States and elsewhere | |
| Meta Platforms | Facebook and Instagram, advertising and the Meta Pixel | United States and elsewhere |
| ManyChat | Instagram and Facebook direct message automation | United States |
| Zoom | Hosting calls | United States |
| Descript | Editing recordings | United States |
| ClickUp | Project and task management, including client project boards | United States |
| Anthropic (Claude) and OpenAI (ChatGPT) | AI tools described in section 7 | United States |
| Our accountant and bookkeeping software | Accounts and tax | Jersey and United Kingdom |
We may also share personal data with team members or contractors who help us deliver your project (under confidentiality obligations), with professional advisers, with a buyer if the business or part of it is sold, and with regulators, courts or law enforcement where the law requires it.
10. Transfers outside Jersey
Several of our providers are based in, or store data in, the United States and other countries that are not recognised as having equivalent data protection laws to Jersey. Where that happens, we make sure appropriate safeguards are in place, such as standard contractual clauses approved for use under the Jersey Law, UK GDPR or EU GDPR, or the provider's certification under a recognised data transfer framework. You can ask us for more information about the safeguards for a particular provider.
11. How long we keep it
| Data | How long we keep it |
|---|---|
| Enquiries and applications that do not go ahead | 12 months from your last contact with us |
| Client, coaching and project records | 6 years after our work together ends, in case of questions or claims, after which they are deleted |
| Sensitive information shared in coaching | Until our work together ends, or sooner if you withdraw consent |
| Logins and access to your systems | Deleted when the project ends |
| Your clients' personal data that we handle as a processor | Deleted or returned to you when the project ends |
| Payment and invoice records | 6 years after the end of the financial year they relate to, for tax and accounting purposes |
| Marketing list data | Until you unsubscribe, or after 24 months with no engagement from you |
12. Your rights
Under the Jersey Law (and the UK and EU GDPR where they apply) you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct anything that is inaccurate or incomplete;
- ask us to delete your data, where there is no good reason for us to keep it;
- ask us to restrict how we use your data while a concern is looked into;
- object to our use of your data where we rely on legitimate interests, and object at any time to direct marketing;
- ask us to transfer data you gave us to you or to another organisation in a commonly used format;
- withdraw your consent at any time, where we rely on consent (this does not affect anything we did before you withdrew it);
- not be subject to decisions based solely on automated processing that significantly affect you.
To use any of these rights, email us at [email protected]. We will reply within four weeks. We may need to confirm your identity first. There is normally no charge.
13. Security
We use sensible technical and organisational measures to protect personal data, including secure hosting, encrypted connections, two-factor authentication on our accounts, and limiting access to people who need it. If a data breach is likely to put you at risk, we will tell you and the JOIC as the law requires.
14. Children
Our Services are designed for adults running or starting a business. They are not intended for anyone under 18 and we do not knowingly collect their personal data.
15. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change, we will let current clients know by email.
16. Contact and complaints
If you have a question or concern about how we handle your personal data, please contact us first at [email protected] and we will do our best to put it right.
You also have the right to complain to the Jersey Office of the Information Commissioner (jerseyoic.org). If you live in the UK, you can complain to the Information Commissioner's Office (ico.org.uk), and if you live in the EU, to your local data protection authority.
Kristin Morris Coaching is a trading name of Kristin Morris. PO Box 163, Jersey, JE4 8RJ.