LEGAL

Privacy policy

Last updated: 21 October 2026

 

This policy explains how Mariposa Coaching collects, uses and protects your personal data when you visit our website, book a call or work with us.

 

1. Who we are

Mariposa Coaching is the trading name of Sukan Nair. Sukan Nair is the data controller for the personal data described in this policy, which means he decides how and why it is used.

• Data controller: Sukan Nair, trading as Mariposa Coaching

• ICO registration reference: ZB494621

• Practitioner: Sukan Nair, Registered Advanced BWRT Practitioner and BWRT Master Coach

• Contact for privacy questions: info@mariposabwrt.co.uk

Sukan Nair also works with nutritional therapist Jeyanthi Nair on Natural Menopause Roadmap (NMR) and Soulnourish programmes. Those services have their own websites and privacy policies. This policy covers the Mariposa Coaching website (mariposabwrt.co.uk) and Mariposa Coaching services.

 

2. What we collect and why

We collect only what we need to respond to you, deliver our services and run the practice properly.

Name, email, phone and anything you tell us when you book a discovery call or contact us

Why we use it: To arrange and hold the call and reply to you. Lawful basis: Steps taken at your request before a contract; legitimate interests in responding to enquiries.

 

Name, contact details, date of birth, emergency contact, and billing and payment details

Why we use it: To deliver Go the Distance or other sessions, manage appointments and take payment. Lawful basis: Contract.

 

Session information: your goals, the patterns you want to change, session notes, ratings and progress records

Why we use it: To plan and deliver your sessions and track progress against the outcome we agree. Lawful basis: Contract; explicit consent for any health information (see section 3).

 

Feedback you give us, and testimonials only where you have agreed in writing

Why we use it: To improve our services and, with your permission, share your words. Lawful basis: Legitimate interests (feedback); consent (testimonials).

 

Your email address, if you sign up for updates

Why we use it: To send occasional emails about our work and resources. Lawful basis: Consent, which you can withdraw at any time using the unsubscribe link.

 

Invoices and payment records

Why we use it: To keep accounts and meet tax obligations. Lawful basis: Legal obligation.

 

Website data: IP address, device and browser type, pages visited and cookie choices

Why we use it: To run the website securely and record your cookie choices and, if you agree, understand how the site is used. Lawful basis: Legitimate interests (essential operation and security); see section 4.

 

We will never sell your personal data. We do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.

 

3. Health and sensitive information

Some of what you share may be health information, such as anxiety, fears, sleep, medication or past treatment. The law treats this as special category data, so we take extra care with it.

• We collect it only with your explicit consent, which we ask for in writing before your first session.

• You choose what to share. You do not have to give us anything you are not comfortable with.

• You can withdraw consent at any time. If you do, we may not be able to continue the work safely, and we will talk this through with you.

• Session notes are kept confidential and are accessible only to your practitioner.

• We will only share information without your consent where the law requires it, or where we believe there is a serious risk of harm to you or someone else. Wherever possible, we will discuss this with you first.

Joint programmes: if you join a programme run together with Soulnourish or Natural Menopause Roadmap, relevant information may be shared between Sukan Nair and Jeyanthi Nair to coordinate your support. We will tell you before this happens.

Our work does not replace medical or psychiatric care. We do not share your information with your GP or other professionals unless you ask us to or the law requires it.

 

4. Cookies and your consent

Cookies are small files stored on your device when you visit a website. We use Usercentrics, a consent management platform, to ask for and record your cookie choices.

How it works

• When you first visit, a Usercentrics banner explains the cookies we use and records your choice.

• Strictly necessary cookies are always on, because the website cannot work securely without them. They include cookies that remember your cookie choices.

• Analytics cookies stay off until you choose to allow them. We do not use marketing cookies. Rejecting analytics cookies does not affect your use of the site.

• You can change or withdraw your choice at any time using the Privacy settings link in the website footer.

What Usercentrics records

To prove that consent was given, Usercentrics keeps a record of your choice. This includes the date and time, the choices you made, the banner version, and technical details such as your browser and an anonymised or shortened IP address. Usercentrics processes this on our behalf under a data processing agreement. Consent records are stored in the European Union.

Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. Usercentrics privacy policy for Wix sites

Cookies we use

• Strictly necessary: Security, page loading, booking forms and remembering your cookie choices. Examples: Wix and Usercentrics essential cookies. Needs your consent? No.

• Analytics:  Counting visits and seeing which pages are used, so we can improve the site. We use this in summary form and do not use it to identify or contact you. Example: Wix Analytics. Needs your consent: yes." - Leave the "Strictly necessary" and "Marketing: not used" items as they are.

• Marketing: Not used. Examples: None. Needs your consent? Not applicable.

The full, current list of cookies, their providers and how long they last is shown in the Usercentrics banner under More information.

 

5. Who we share it with

We use trusted service providers to run the practice. They process your data only on our instructions and must keep it secure.

Wix.com

Website hosting, contact forms, Wix Bookings, booking emails and, if you agree, website statistics (Wix Analytics)

 

Usercentrics GmbH

Cookie consent banner and consent records

 

Google Workspace

Email, calendar, secure document storage, and Google Meet for online sessions and discovery calls

 

Stripe

Taking card payments. We never see or store your full card details.

 

Nurishpro

Client records and practice management

 

We may also share information with our professional insurer or legal advisers if needed to handle a claim, or with the authorities where the law requires it.

 

6. International transfers

Some providers, such as Wix and Google, may store or access data outside the UK, including in the United States. Where this happens, we make sure appropriate safeguards are in place. These include UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Agreement or Addendum. You can ask us for more detail.

 

7. How long we keep it

We keep personal data only as long as we need it, then delete or destroy it securely.

• Enquiries and discovery calls that do not lead to working together: 12 months after our last contact

• Client records and session notes: 7 years after your last session, as our professional insurer advises

• Invoices and payment records: 6 years after the end of the financial year, as UK tax law requires

• Email updates: Until you unsubscribe

• Testimonials: Until you withdraw permission

• Cookie consent records (Usercentrics): Up to 12 months, after which you are asked again

 

8. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you

• ask us to correct anything inaccurate or incomplete

• ask us to delete your data, where we have no legal reason to keep it

• ask us to restrict how we use your data

• object to us using your data on the basis of legitimate interests

• ask us to transfer data you gave us to you or another organisation

• withdraw your consent at any time, without affecting anything we did before you withdrew it

To use any of these rights, email info@mariposabwrt.co.uk. There is no charge. We will reply within one month, and may ask you to confirm your identity first.

 

9. Children

Our services are for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18.

 

10. Keeping your data safe

We use password-protected accounts with two-step verification, secure providers and Google Meet video calls, which are encrypted in transit. Only your practitioner can access your session notes. If a data breach puts your rights at risk, we will tell you and the ICO as the law requires.

 

11. Links to other websites

Our website links to other sites, including Natural Menopause Roadmap, LinkedIn and Facebook. Their own privacy policies apply when you visit them.

 

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will tell current clients directly.

 

13. Contact and complaints

If you have a question or concern, please contact us first at info@mariposabwrt.co.uk, and we will do our best to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.