Last updated: 21 October 2026

1. Information About Me
HeadFirst Consulting
Sole Trader
Consultant: Chris Benson
Email: chris@headfirstconsulting.com
ICO Registration Number: 00012152398

I respect your privacy and am committed to protecting your personal data. This Privacy Notice explains what data I collect, how I use it, and your rights under UK GDPR and the Data Protection Act 2018.

2. What This Notice Covers
This Privacy Notice explains how I collect, store, process, and protect personal data provided by schools, staff, coaching clients, parents, and individuals who contact or work with HeadFirst Consulting.

3. What is Personal Data?
Personal data is any information that identifies an individual, such as a name, contact details, job role or any information linked to an identifiable person.

4. Your Rights
Under UK GDPR, you have the right to:
• be informed about how your data is used
• access the personal data I hold about you
• have inaccurate data corrected
• request deletion of your data
• restrict or object to processing
• withdraw consent (where applicable)
• request data portability

You can exercise these rights by contacting me using the details in Section 12.

You also have the right to complain to the Information Commissioner’s Office if you are unhappy with my handling of your data. I would appreciate the chance to address your concerns before you escalate them.

5. Personal Data I Collect and How I Collect It
I collect minimal personal data and only what is necessary to deliver my services.

Data collected may include:
• Identity Data: Name, job title, school name.
• Contact Data: Email address, telephone number.
• Professional Information: Role, training interests, consultancy needs.
• Communication Data: Emails, messages, and notes relating to consultancy or training.

How this data is collected:
• Directly from you (email, messaging, meetings, bookings).
• Through website enquiries or contact forms.
• Through the sign-up form for my parent mailing list (see Section 7).
• Documents voluntarily shared for consultancy (e.g., inclusion policies, Ofsted preparation materials).

I do not collect student-identifiable data unless explicitly required, agreed in advance, and necessary for a specific consultancy task.
I do not collect special category data unless you provide it voluntarily (e.g., disclosing a diagnosis during coaching).

6. How I Use Your Personal Data
I use personal data only when legally permitted and only for purposes directly related to my services.

I may use your data for:
• Administering HeadFirst Consulting
• Delivering training, consultancy, or coaching
• Communicating with you about scheduled work
• Sending information you request
• Maintaining necessary business records
• Generating invoices or receipts (if applicable)

Lawful bases for processing:
• Legitimate Interests: To provide consultancy, coaching, or training you have requested.
• Contract: To fulfil an agreement between us.
• Consent: For optional communications you explicitly opt into, such as my parent mailing list.
• Legal Obligation: For financial or tax record keeping.

I do not use profiling, automated decision-making, or marketing without consent.

7. My Mailing List for Parents
If you sign up for my Back to School Guide or parent newsletter, I collect your first name and email address. I use them only to send you the guide and my monthly newsletter, with occasional news about parent talks and webinars. I do this with your consent, which you give when you sign up and confirm your email address.

My mailing list is managed by Kit (formerly ConvertKit), which stores your details securely on my behalf and may process them outside the UK under appropriate safeguards. I never sell or share your details with anyone else.

You can unsubscribe at any time using the link at the bottom of every email, or by emailing chris@headfirstconsulting.com. I keep your details until you unsubscribe, then remove them from my active list.

8. Data Retention
I keep personal data only for as long as necessary for the purpose for which it was collected.

Typical retention periods:
• Contact details / communications: Up to 2 years
• Consultancy-related documents: Up to 2 years
• Mailing list details: Until you unsubscribe
• Invoices and statutory financial records: 6 years (required by law)

You can request deletion sooner unless the law requires otherwise.

9. Data Storage and Security
Your personal data is stored securely using password-protected systems, reputable cloud-based services, and devices protected by encryption and multi-factor authentication.

I do not store or transfer personal data outside the UK unless the service provider (e.g., Microsoft, Google, Kit) meets UK GDPR adequacy standards or has appropriate safeguards in place.

I take all reasonable steps to protect your data, including:
• restricting access to myself only
• secure email and cloud storage
• device encryption
• breach-response procedures

10. Sharing of Personal Data
I do not share personal data with third parties unless:
• it is necessary to deliver the agreed service (for example, the services that host this website and my mailing list)
• you have given explicit consent
• I am legally required to do so (e.g., safeguarding, legal or tax obligations)

I do not sell or trade personal data.

11. Accessing Your Personal Data
You can request details of the personal data I hold about you (a “Subject Access Request”).
There is no fee unless the request is unfounded or repetitive.
I will respond within one month.
Requests should be made via email to chris@headfirstconsulting.com.

12. Contact Details
For all data protection matters, including Subject Access Requests, please contact:
Chris Benson
HeadFirst Consulting
Email: chris@headfirstconsulting.com

13. Changes to This Privacy Notice
This Privacy Notice may be updated periodically to reflect changes in law or business practice. The most recent version will always be available on this page.