Privacy policy.
Last updated: 16 October 2026
This policy explains what personal information Highest League collects, why, how it's kept safe and the choices you have. If anything here isn't clear, email [email protected] and I'll explain.
1. Who I am
Highest League is run by Tess Bremner, a sole trader based in London, United Kingdom ("I", "me", "Highest League"). I'm the data controller for the personal information described in this policy, which means I decide how and why it's used.
Contact: [email protected]
2. What this policy covers
This policy covers highestleague.com and its pages, the free Relationship Archetype Quiz, my emails, my courses and resources, the client portal, bookings, payments and my 1:1 coaching. My services are for adults aged 18 and over, and I don't knowingly collect information from anyone under 18.
3. What I collect and why
To deliver my coaching, courses and resources: your name and contact details, your occupation and relationship status, information about other people you choose to tell me about (such as partners, exes or family), what you've bought and paid for, how you use my courses and client portal, your portal login details, your signed coaching agreement, onboarding and form answers, notes from our sessions, the messages we exchange between sessions, and any feedback, compliments or complaints. If we agree to record a session, I also keep the video or audio recording.
To run your client account: your name and contact details, what you've bought, your account and registration details, information used to keep your account secure, your marketing preferences, and technical information such as your browser and device.
To send you emails and updates: your name and email address, your quiz answers and result, your marketing preferences, what you've bought from me, and how you use my website and emails, including your IP address.
To meet legal requirements: your name, contact details, account and payment records, and any other information I'm legally required to keep, including safeguarding information if someone's safety is at risk.
To look after your welfare: your name, contact details, account information, and anything you share about your wellbeing.
To deal with questions, complaints or claims: your name and contact details, account and purchase history, client records, payment records, our correspondence, and any session recordings.
Card payments are handled by Stripe. I never see or store your full card details.
4. Sensitive information shared in coaching
Coaching is personal. In sessions, forms and messages you may tell me about your health and wellbeing, your sex life or your sexual orientation. UK data protection law calls this special category information and gives it extra protection.
I only use it to coach you, to look after your welfare, and if needed to deal with a complaint or claim. I keep it confidential, I never use it for marketing and I never share it, unless the law requires me to or I believe someone is at serious risk of harm. I rely on your explicit consent to use it, which you give when you sign your coaching agreement, and you can withdraw that consent at any time.
5. My lawful bases
UK data protection law says I must have a lawful basis for using your information. These are the ones I rely on:
Delivering my coaching, courses and resources: contract (so I can do what you've signed up for), consent (for sensitive information you share), and legitimate interests (improving my programmes, see below).
Running your client account: contract.
Emails and updates: consent (you opt in through the quiz or a sign-up form) and legitimate interests (emailing past clients about similar offers, see below).
Legal requirements: legal obligation, such as keeping financial records for HMRC.
Your welfare: consent, and vital interests in the rare case that someone's physical or mental health is at urgent or serious risk.
Questions, complaints or claims: contract, legal obligation and legitimate interests.
My legitimate interests
Improving my services. I use clients' names, contact details, feedback and how they use my programmes to improve my coaching, courses and resources. This helps clients get better results and a better experience, and helps me run my business well. I only use information clients have already given me as part of working together, I don't sell it or share it for anyone else's marketing, and clients would reasonably expect a coach to learn from feedback and improve what they offer. I believe the benefits to clients outweigh any impact on their privacy.
Emailing past clients. I send past and current clients occasional emails about my programmes, resources and events that are similar to what they have already bought or enquired about. Every email includes an unsubscribe link, and I stop straight away when someone opts out. I never sell or share contact details with other businesses for their marketing. Because the emails are relevant, infrequent and easy to stop, I believe the benefit outweighs any impact on the people receiving them.
Handling questions and complaints. I keep records of correspondence, purchases and our work together so I can answer questions, resolve complaints fairly and respond to any legal claims. I only use the information needed to deal with the specific issue, keep it secure, and do not use it for anything else. People would reasonably expect a business to keep records for this purpose, so I believe the benefits outweigh any impact on their privacy.
6. Where I get your information from
Mostly directly from you. I also receive some information from the services I use to run my business (for example payment confirmations from Stripe and form answers from Typeform), and I may see information you've made public on social media, such as your Instagram profile, if we're talking there.
7. Email tracking
Some of my marketing emails tell me whether they were opened and which links were clicked. I use this to understand what's useful and to avoid sending you things you're not interested in. Personal emails and receipts are not tracked. Unsubscribing stops this.
8. Who I share it with
I never sell your information. I share it only with the trusted services I use to run Highest League, and only what they need to do their job. They act on my instructions and can't use your information for anything else:
HeyClients (website, emails, bookings, client portal, courses, contracts and payments), Stripe (card payments), Typeform (quiz and forms), Telegram (client messaging between sessions), Google Workspace (email and documents), Netlify (hosting some resources) and Google Meet or Zoom (1:1 video calls).
I may also share information with my accountant or legal advisers, with organisations I'm legally required to share it with (such as HMRC), and with the emergency services if I believe someone is at serious risk of harm.
9. International transfers
Some of the services above store data outside the UK, in the United States and the European Union. Where that happens, the transfer is protected by safeguards recognised under UK data protection law: UK adequacy regulations for the EU, and the UK-US data bridge for US providers. You can email me for more information about these safeguards.
10. How long I keep it
Customers and coaching clients: contracts, payments, session notes, recordings and correspondence are kept for six years after our work ends, because I have to keep business and financial records for that long. Coaching notes and recordings can be deleted sooner if you ask, unless I need to keep them for a legal reason.
Enquiries: up to two years if we don't go on to work together.
Email list and quiz: until you unsubscribe, or after two years without opening my emails.
After these periods, your information is securely deleted.
11. Cookies
A cookie is a small file stored on your device that helps a website work and remember your choices. This website uses:
Strictly necessary cookies that make the site, bookings, checkout and client portal work. These are always on.
Analytics cookies that show me which pages are visited, so I can improve the site.
Marketing cookies that help me understand which emails, posts or adverts brought you here.
Apart from strictly necessary cookies, these only run if you accept them in the cookie banner. You can change your mind at any time, and you can block or delete cookies in your browser settings, though some parts of the site may not work properly without them.
Some pages show content from other services, such as YouTube, Spotify or Instagram. Those services may set their own cookies, which are covered by their own privacy policies.
12. Keeping it safe
I use reputable, secure services, keep access to client information to myself, and use strong passwords and two-factor authentication. No system is ever completely secure, so if you think something is wrong with your account, please tell me straight away.
13. Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the information I hold about you
- ask me to correct anything that's wrong or incomplete
- ask me to delete your information
- ask me to limit how I use it, or object to me using it
- ask for your information in a format you can take elsewhere
- withdraw your consent at any time, including unsubscribing from emails
Some of these rights depend on the lawful basis I'm using. For example, I can't delete records I'm legally required to keep. To use any of your rights, email [email protected]. I'll reply within one month and may need to confirm who you are first.
14. How to complain
If you have any concerns about how I use your information, please email me first at [email protected] and I'll do my best to put it right.
If you're still unhappy, you can complain to the Information Commissioner's Office (ICO):
ICO Head Office, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester M1 7BL
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint
15. Other websites
My site links to other websites, such as podcasts and social media. I'm not responsible for how they handle your information, so please check their privacy policies.
16. Changes to this policy
I may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.