How we handle your data.

Last updated: 25 August 2026

Who we are

This policy explains what Maija Morton, trading as Maija Morton Coaching ("we", "us"), does with your personal data when you use maijamorton.com or take part in a programme. Maija Morton is the data controller for that information.

Our address is Affinity House, Beresford Avenue, London HA0 1PY. For anything about your data, email hello@maijamorton.com.

What we collect

• When you enquire or subscribe: your name and email address, and anything you choose to tell us.
• When you buy: your name, email, billing details and purchase history. Card details go to Stripe and never reach us.
• When you have a member account: your email, your name, which programme you have access to, and which coaching group you are in.
• What you write in the member area: your daily check ins, your evidence bank entries, and, for one to one clients, your alignment worksheet and call notes.
• When you take the quiz: your answers and your email address.
• When you visit the site: basic technical data your browser sends, such as IP address and device type.

What is private even from your coach

Your daily check ins and your evidence bank entries are yours alone. They are stored against your account and nobody else can read them, including Maija. This is enforced by the database itself, not by hiding a page.

One to one notes and alignment worksheets are shared between you and your coach, because you build them together on the call. Other participants can never see them.

Why we use it, and our lawful basis

• To deliver what you bought (account access, session links, materials, recordings): performance of our contract with you.
• To run the business (invoices, accounting records, answering questions): our legitimate interests, and legal obligation for tax records.
• To send marketing emails: your consent. Every email has an unsubscribe link, and using it stops them.
• To keep the platform working and secure: our legitimate interests.

Who we share it with

We do not sell your data. We use a small number of service providers who process it on our behalf:

• Stripe, to take payments.
• Supabase, which hosts the member accounts and the member area database.
• Resend, to send programme emails.
• Kit, for the mailing list.
• Google, for calendar invitations, and Drive where session recordings are stored.
• Zoom, for the live calls.

Some of these are outside the UK and EU. Where that is the case, transfers rely on the safeguards those providers have in place.

How long we keep it

• Financial records: six years, as tax law requires.
• Your member account and its contents: while your account is open. Ask us to close it and we delete it.
• Mailing list: until you unsubscribe.
• Enquiries that go nowhere: up to two years.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form. Email us and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

Cookies

The member area sets a cookie to keep you signed in. It is necessary for the site to work and cannot be turned off without signing you out. We do not use advertising or tracking cookies.

Changes

If this policy changes, the date at the top changes with it.