This privacy notice explains how I collect, use, and protect personal information in the course of my work. I am committed to handling your data with integrity, transparency, and care. 

Who I Am 

I run a limited company providing HR consultancy, coaching, interim HR leadership and related services to organisations and individuals. The company is registered in England and Wales as Cochise Ltd (Company Number: 12926796). 
You can contact me at stephen@cochise.uk with any questions about this notice or your data. 

The Type of Personal Information I Collect 

Depending on how you engage with me, I may collect the following information: 

• Contact details – name, email address, phone number, organisation. 

• Professional information – role, responsibilities, career background. 

• Coaching or consultancy-related notes – written summaries or reflections from our sessions. 

• Business and project information – relevant context, goals, and content related to the services I’m providing. 

• Billing and invoicing information – as needed for contractual and financial purposes 

I do not collect more information than necessary, and I will not keep it for longer than needed. 

How I Get Personal Information and Why I Have It 

Most of the personal information I process is provided directly by you when: 

• You contact me via email, phone or social media 

• We work together on a consultancy, coaching or interim basis 

• You attend a workshop, talk or other event 

I use this data to: 

• Deliver and manage services you have requested 

• Communicate with you about our work together 

• Maintain financial records and meet legal obligations 

• Improve my services 

Lawful Bases for Processing 

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on include: 

• Contract – to provide agreed services 

• Legal obligation – for record keeping, invoicing and taxation 

• Legitimate interests – to grow and manage my business and professional relationships 

• Consent – for specific activities such as recording coaching sessions 

Marketing and Communications 

If you provide your contact details, I may occasionally use them to send you information about my services, events, resources or updates I think may be of interest to you. 

You can unsubscribe at any time by clicking the link in any email or by contacting me directly. 

The lawful basis I rely on for this type of communication is: 

• Consent – where you have opted in to receive marketing 

• Legitimate interest – where you are a professional contact and the content is relevant to your work 

Systems I Use to Process Data 

Your data may be processed or stored using the following systems, which have their own privacy protections in place: 

• HubSpot – for contact and pipeline management 

• FreeAgent – for accounting and invoicing 

• Microsoft 365 (Email, Teams, OneDrive) – for communication and document storage 

• ReMarkable – for note-taking (e.g. coaching reflections) 

How I Store Your Information 

Data is stored securely using password-protected cloud-based systems with appropriate security settings enabled. I do not store sensitive data locally or on paper. 

Where I take notes from coaching sessions, these are typically anonymised and referenced only by a client ID. Notes are drafted on my ReMarkable tablet and then transferred to a secure folder within Microsoft OneDrive. Once transferred, the notes are deleted from the tablet to ensure they are not stored in ReMarkable’s cloud. 

Data Retention 

Coaching or consultancy notes are retained securely for up to 3 years following the end of the coaching or consultancy engagement, unless we agree otherwise. This ensures your information is only kept as long as necessary for professional, legal, or administrative purposes. 

Financial records are retained for up to 7 years as required by HMRC. Contact information is reviewed regularly and deleted if no longer needed. 

Your Data Protection Rights 

You have rights including: 

• Access to your information 

• Correction of inaccurate information 

• Erasure of your data (where applicable) 

• Objection to processing in some circumstances 

• Data portability (where applicable) 

To exercise any of these rights, please contact me directly. 

Sharing Your Data 

I do not sell, trade or share your personal information with others except: 

• With your consent 

• When legally required (e.g. HMRC) 

• With trusted processors (e.g. HubSpot, FreeAgent) for the purpose of delivering services 

Changes to This Notice 

I review and update this notice as needed. This version was last updated in September 2025.