PRIVACY NOTICE
🔒 PRIVACY POLICY
StepUpcmg Ltd | Catherine Gallacher
Certified Empowerment Result Coach™ | Psychological Ambassador™
Last updated: September 2026
1. Who We Are
This website is operated by:
StepUpcmg Ltd
Catherine Gallacher
Certified Empowerment Result Coach™ | Psychological Ambassador™
Website:
www.realisedcatherinegallacher.net
Email:
stepupcmg@gmail.com
StepUpcmg Ltd is responsible for determining how personal data collected through this website and our relevant business activities is used and protected.
Our registration with the Information Commissioner's Office (ICO) is:
Z7927157
Registered Address:
Union House
11 New Union Street
Coventry
CV1 2NT
United Kingdom
2. Your Privacy
We are committed to protecting your personal data and handling it lawfully, fairly and transparently.
We aim to ensure that:
You understand what personal data we collect and why.
We collect and use only the information reasonably necessary for the relevant purpose.
Your information is handled securely.
You are informed about how your information is used.
Your rights in relation to your personal data are respected.
3. What Personal Data We Collect
We may collect and process the following information.
Information You Provide Directly
This may include:
Name
Email address
Phone number
Business or organisation details
Job title, role or other relevant professional information
Information provided through enquiries, bookings, contact forms or correspondence
Information you choose to provide in connection with coaching, training, workshops, programmes or other services
Feedback and testimonials where appropriate permission has been obtained
Special Category Personal Data
In some circumstances, you may voluntarily provide information that is considered more sensitive under data protection law, such as information relating to your physical or mental health.
Where we process special category personal data, we will only do so where there is an appropriate lawful basis and an applicable condition for processing that information under data protection law.
We aim to collect only information that is necessary and relevant for the purpose for which it is provided and apply appropriate safeguards to sensitive information.
Information Collected Through the Website
Depending on your choices and the technologies used by the website, this may include:
IP address
Browser and device information
Website usage information
Cookie information
Analytics information
Technical and security information
Non-essential cookies and similar technologies are used in accordance with applicable consent requirements.
Payment and Transaction Information
When you purchase a service or digital product, information processed in connection with the transaction may include:
Your name
Email address
Details of the product or service purchased
Transaction and payment status
Billing information
Information required for payment processing, fraud prevention, security or regulatory compliance
Payments may be processed by third-party payment providers such as Stripe.
We do not directly store your full payment card details.
4. How We Use Your Personal Data
We may use your personal data to:
Respond to enquiries and communications
Provide requested information
Deliver coaching, training, leadership and professional development services
Manage bookings and appointments
Process and administer purchases and payments
Provide and manage access to digital products, recordings, on-demand masterclasses and other digital content
Communicate with you about a service or product you have purchased
Provide customer support
Manage corporate engagements
Send marketing communications where we have an appropriate lawful basis to do so
Manage feedback and testimonials where appropriate
Improve our website, products and services
Maintain appropriate business and financial records
Prevent fraud and protect the security of our website and services
Respond to complaints
Meet our legal, regulatory, accounting and tax obligations
We will not use your personal data for purposes that are incompatible with the purposes for which it was collected unless permitted or required by law.
5. Lawful Bases for Processing
We only process personal data where we have an appropriate lawful basis.
Depending on the circumstances, this may include:
Contract
Where processing is necessary to take steps at your request before entering into a contract or to provide a service or product you have purchased.
Consent
Where you have given consent for a particular use of your information, such as certain marketing communications, testimonials or non-essential cookies.
Where we rely on consent, you may withdraw that consent at any time.
Legitimate Interests
We may process information where necessary for legitimate business purposes, provided those interests are not overridden by your rights and interests.
These purposes may include operating and improving our business, responding to enquiries, maintaining appropriate records, protecting our services and communicating appropriately with customers.
Legal Obligation
We may process personal data where necessary to comply with legal, regulatory, accounting or tax obligations.
Special Category Data
Where special category personal data is processed, we will identify both an appropriate lawful basis for processing the personal data and an applicable additional condition for processing special category data, as required by law.
6. Marketing Communications
You may receive marketing communications from StepUpcmg Ltd where we have an appropriate lawful basis to send them.
This may include circumstances where you:
Subscribe to receive communications
Request information or resources
Express an interest in our work
Have an existing customer relationship with us and applicable law permits relevant communications
Where consent is required, we will seek that consent.
You can unsubscribe from marketing communications at any time using an unsubscribe facility provided in the communication, where available, or by contacting:
Withdrawing from marketing communications will not prevent us from sending essential communications relating to a service, booking, transaction or product you have purchased.
7. Sharing Your Personal Data
We do not sell your personal data.
We may share information with trusted service providers where reasonably necessary to operate our business and provide our services.
These may include:
Website and hosting platforms, including Squarespace
Payment processors, including Stripe
Booking and scheduling systems, including Setmore where used
Email and communications platforms
Video conferencing platforms, including Zoom
Video and digital content-delivery platforms, including YouTube/Google where used
Analytics and website technology providers
Professional advisers, accountants or other professional service providers where necessary
We may also disclose information where required by law, regulation, court order or another lawful authority.
Service providers may process personal data on our behalf or, in some circumstances, act as independent controllers of information they receive.
Their handling of personal information may also be governed by their own privacy policies and legal obligations.
8. International Data Transfers
Some third-party providers we use may process or store personal data outside the United Kingdom.
Where personal data is transferred internationally, we take appropriate steps to ensure that applicable data protection requirements are met.
Depending on the circumstances, safeguards may include recognised adequacy arrangements, appropriate contractual safeguards or other mechanisms permitted under UK data protection law.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, contractual and regulatory requirements.
Retention periods may vary according to the type of information and the reason it is held.
In determining an appropriate retention period, we consider:
The nature and sensitivity of the information
The purpose for which it was collected
Whether the information remains necessary for that purpose
Contractual and customer-service requirements
Legal, accounting and tax obligations
Regulatory requirements
The need to establish, exercise or defend legal claims where applicable
Security and fraud-prevention requirements
Marketing information is retained until you unsubscribe, withdraw relevant consent where consent is relied upon, or the information is no longer required, subject to any information we may need to retain to record and respect your communication preferences.
Information that is no longer required will be securely deleted, anonymised or otherwise appropriately disposed of.
10. Your Data Protection Rights
Depending on the circumstances and the lawful basis on which your information is processed, you may have rights including the right to:
Request access to personal data we hold about you
Request correction of inaccurate or incomplete personal data
Request deletion of your personal data in certain circumstances
Request restriction of processing in certain circumstances
Object to certain processing
Withdraw consent at any time where processing is based on consent
Request transfer of certain personal data where the right to data portability applies
Lodge a complaint with the Information Commissioner's Office
These rights are subject to the conditions and exemptions provided by applicable data protection law.
To exercise a data protection right, contact:
We may need to verify your identity before responding to a request.
11. Complaints
If you have concerns about how we collect or use your personal data, please contact us in the first instance:
We will review your concerns and respond appropriately.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.
Our ICO registration number is:
Z7927157
12. Cookies and Similar Technologies
Our website may use cookies and similar technologies for purposes including:
Providing essential website functionality
Maintaining website security
Remembering appropriate settings or preferences
Understanding website performance and usage
Analytics
Improving the website and user experience
Some cookies are strictly necessary for the website to operate and may not require consent.
Where consent is required for non-essential cookies or similar technologies, they will not be used unless the appropriate consent has been obtained.
Where applicable, visitors will be provided with controls to accept, reject or manage non-essential cookie preferences.
You may also be able to control or delete cookies through your browser settings.
Further information about the cookies used by this website may be provided through our cookie settings, cookie banner or separate Cookie Policy.
13. Data Security
We take appropriate technical and organisational measures designed to protect personal data from unauthorised access, alteration, disclosure, loss or misuse.
These measures may include:
Use of secure systems and reputable service providers
Appropriate access controls
Limiting access to personal data to those with a genuine need to access it
Appropriate account and system security
Secure handling and storage practices
Third-party providers are selected with consideration for appropriate security and data-protection standards.
Although reasonable precautions are taken, no electronic transmission, website or storage system can be guaranteed to be completely secure.
14. Third-Party Websites and Services
Our website or digital products may contain links to or use services operated by third parties.
These may include payment providers, booking services, video platforms, social media services and other external websites.
Where you interact directly with a third-party service, that organisation may collect and process your personal data in accordance with its own privacy policy.
StepUpcmg Ltd is not responsible for the privacy practices of independent third-party websites or services.
We encourage you to review the privacy information provided by relevant third parties where appropriate.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices or legal and regulatory requirements.
The latest version will be published on this website.
Where appropriate, the date at the top of this Privacy Policy will be updated to indicate when material changes were made.
16. Contact
For privacy or data-protection enquiries, please contact:
StepUpcmg Ltd
Catherine Gallacher
Certified Empowerment Result Coach™ | Psychological Ambassador™
Email:
stepupcmg@gmail.com
Website:
www.realisedcatherinegallacher.net
Registered Address:
Union House
11 New Union Street
Coventry
CV1 2NT
United Kingdom
ICO Registration Number: Z7927157
Last updated: September 2026