Privacy Policy

Who we are and how to reach us

This privacy policy explains how Kirk Morozoff ("we", "us" or "I") collects, uses and protects your personal information when you visit kirkmorozoff.com, book a discovery call, or take part in the Kmbody Reset Program.

Kirk Morozoff is the data controller responsible for your personal data under the EU and UK General Data Protection Regulation (GDPR). If you have any questions about this policy or how your data is handled, you can contact me at kirk@kirkmorozoff.com.

What personal data we collect

I only collect the information I genuinely need to run my coaching practice and to get in touch with you. This includes:

• Contact details you give me, such as your name, email address and phone number.
• Booking information, such as the date and time you select for a discovery call or session.
• Details you share during our calls, in coaching sessions or in messages, where relevant to supporting you.
• Basic technical information automatically collected when you visit the site, such as your IP address, browser type and the pages you view.
• Any information you choose to send me directly by email or message.

How I use your data

I use your personal data to:

• Arrange and run your free discovery call and coaching sessions.
• Respond to your questions and enquiries.
• Deliver the Kmbody Reset Program and the support that comes with it.
• Send you relevant updates or resources when you have asked for them.
• Keep my records accurate and meet my legal and tax obligations.

The legal basis for using your data

Under the GDPR I rely on a few clear legal grounds to process your information:

• Consent, when you choose to book a call, send a message or sign up to hear from me.
• A contract, when we agree to work together so I can deliver the program.
• Legitimate interests, for routine tasks like keeping my records in order and improving the site.
• Legal obligation, where I am required to keep certain records.

You can withdraw your consent at any time, and I will stop using your data for anything that relied on it. Withdrawing consent does not affect any processing that happened before.

Who I share your data with

I do not sell your personal data, ever. I only share it where it is needed to run the coaching practice:

• Our booking and scheduling provider, which hosts the calendar you use to book a discovery call and stores the booking details you enter.
• Tools I use to send emails and messages, which hold the contact details needed to reach you.
• Accounting and payment providers, only where a payment or a tax record requires it.
• Service providers that help me keep the website running and secure.

Any provider I work with is only given what they need to do their job, and I look for providers that take data protection seriously. I may also disclose information if required by law or to protect my rights or safety.

International data transfers

Some of the tools I use may store or process data outside the EU or UK. Where that happens, I rely on safeguards such as Standard Contractual Clauses approved by the European Commission, or another lawful transfer mechanism, to make sure your data stays protected to a comparable standard.

How long I keep your data

I only keep your personal data for as long as I need it. Booking details are kept long enough to run the call and follow up. If we work together, your records are kept for the length of the program and for a reasonable time afterwards so I can support you and meet my record-keeping duties. When the data is no longer needed, I delete it or anonymise it.

Your rights over your data

Under the GDPR you have a number of rights regarding your personal data:

• Access, to ask what data I hold about you.
• Rectification, to correct anything that is inaccurate or incomplete.
• Erasure, to ask me to delete your data in certain circumstances.
• Restriction, to limit how I use your data while a request is handled.
• Data portability, to receive a copy of your data in a usable format.
• Objection, to object to processing based on legitimate interests or for direct messaging.
• Withdraw consent, where processing relied on your consent.

You also have the right to complain to your local data protection authority, such as the Portuguese Comissão Nacional de Proteção de Dados or the UK Information Commissioner's Office, if you believe your data has not been handled correctly.

Cookies

The website uses a small number of cookies and similar technologies to keep it working and to understand basic traffic. The booking widget may also set its own cookies so the calendar works smoothly. You can control or delete cookies through your browser settings, although turning them off may affect how parts of the site behave.

Security

I take reasonable technical and organisational steps to protect your personal data, including restricting access to it and using trusted service providers. No method of transmission over the internet is completely secure, but I work to keep the risk as low as possible.

Children's privacy

My coaching services are intended for adults. I do not knowingly collect personal data from anyone under 16. If you believe a child has shared data with me, please get in touch and I will delete it.

Changes to this policy

I may update this privacy policy from time to time to keep it accurate and compliant. The date at the top of the page shows when it was last reviewed. If I make material changes, I will post the updated version here and, where appropriate, let you know directly.

Contact

If you have any questions about this privacy policy or want to exercise any of your rights, email kirk@kirkmorozoff.com and I will get back to you. I aim to respond within 30 days of any request.