Privacy Notice

Boost and Beyond Business Solutions

This privacy notice explains what personal information we collect about you, why we collect it, how long we keep it, and what your rights are.

Contact Details

Debbie Frith Boost and Beyond Business Solutions
Email: debbie@boostandbeyond.co.uk

What information we collect and why

We collect personal information for the following purposes.

Providing services

Names and contact details
Addresses
Purchase or account history
Account information
Photographs from networking events and professional settings
Recordings and transcripts of video calls
Records of meetings and decisions
Information relating to compliments or complaints

Operating client accounts

Names and contact details
Addresses
Payment details (including bank information for transfers)
Purchase history
Account information, including registration details

Service updates and marketing

Names and contact details
Addresses
Photographs from networking events and professional settings

Complying with legal requirements

Name
Contact information

Dealing with queries, complaints or claims

Names and contact details
Address
Correspondence

Where we get your information from

We collect personal information in the following ways:

Directly from you, through our website contact form, by email, by telephone, or in person.
Through LinkedIn and other social media platforms, where you have connected with us or engaged with our content in a professional context.
From professional contacts who have introduced you to us or recommended our services.
Through recorded and transcribed online video meetings.

Our legal basis for using your information

UK data protection law requires us to have a lawful basis for collecting and using your personal information. The basis we rely on affects your data protection rights, which are set out in the next section.

Providing services

Contract – we need to collect and use your information to enter into or carry out a contract with you. All data protection rights apply, except the right to object.
Legal obligation – we need to collect or use your information to comply with the law. All data protection rights apply, except the right to erasure, the right to object and the right to data portability.
Legitimate interests – we collect and use your information because it benefits you, our business, or both, without causing undue risk of harm. All data protection rights apply, except the right to portability. We collect and use personal information (typically names, email addresses, phone numbers, and professional details about your business) to deliver business mentoring services to clients and to maintain contact with prospective clients who have expressed an interest in those services. The people whose information we hold are business owners and professionals who would reasonably expect a service provider to hold and use their contact and business details in this way. We do not share personal data with third parties for their own marketing purposes, and we provide a clear and simple way to opt out of any communications at any time. Where session recordings or transcripts may contain sensitive personal information relating to health or wellbeing, we rely on explicit consent as the lawful basis for that processing.

Operating client accounts

Contract – see above.
Legal obligation – see above.

Service updates and marketing

Contract – see above.
Legitimate interests – we contact existing and past clients, and professional contacts who have engaged with us in a relevant business context, with updates about our services and events. The people we contact are professionals operating in a business context, the communications we send are relevant to that context, and we do not use their information for any purpose beyond direct communication with them. We provide a clear and easy way to opt out of any such communications in every message we send, and we honour all such requests promptly.

Legal requirements

Contract – see above.
Legal obligation – see above.

Queries, complaints or claims

Contract – see above.
Legal obligation – see above.

Your data protection rights

If you make a request to exercise any of your rights, we will respond within one month. To make a request, please contact us using the details at the top of this notice.

Right of access – You can ask us for copies of your personal information, including details about where we get it from and who we share it with. Exemptions may apply in some circumstances.
Right to rectification – You can ask us to correct or delete personal information you believe is inaccurate or incomplete.
Right to erasure – You can ask us to delete your personal information in certain circumstances.
Right to restriction of processing – You can ask us to limit how we use your personal information.
Right to object to processing – You can object to us processing your personal information in certain circumstances.
Right to data portability – You can ask us to transfer your personal information to another organisation or to you directly.
Right to withdraw consent – Where we rely on your consent as our lawful basis, you can withdraw that consent at any time.

How long we keep your information

Clients, customers and suppliers: 7 years, in line with HMRC requirements for accounts data.
Prospective clients and contacts: 1 year from the date of initial contact with Boost and Beyond Business Solutions.
Client session recordings and transcriptions: 90 days after each session
Client session notes: for the duration of our relationship and 1 year after

Sharing information outside the UK

Some of the third-party services we use are based in the United States. Where personal information is transferred outside the UK, we ensure appropriate safeguards are in place in compliance with UK GDPR.

Dropbox (storage provider)

Country: United States. Dropbox complies with UK GDPR through the UK Extension to the EU-US Data Privacy Framework, robust encryption standards, adherence to ISO 27018, and data governance tools that support individual privacy rights.

Microsoft (email provider)

Country: United States. Microsoft complies with UK GDPR through robust contractual commitments, UK data storage options, built-in security features, and dedicated privacy controls across its platforms, including Microsoft 365.

Anthropic (Claude AI assistant)

Country: United States. We use Claude.ai Pro, a paid personal subscription to Anthropic’s AI assistant. Under Anthropic’s usage policy for paid subscribers, conversation content is not used to train AI models. Anthropic processes data in the United States and publishes a privacy policy setting out how it handles personal data. On occasion, we may input contact details such as email addresses into the tool where they are needed as part of the work we are doing. Session transcripts processed through this tool may on occasion contain sensitive personal information, for which explicit consent is obtained in advance.

Zoom Workplace (online meetings and AI note-taking)

Country: United States. Zoom relies on Standard Contractual Clauses for transfers of personal data from the UK to countries outside the UK. These are incorporated into Zoom’s Data Processing Addendum, which applies automatically to all Zoom customers through the Zoom Terms of Service. We use Zoom to record mentoring sessions and to generate transcripts and summaries using Zoom AI Companion. Session content processed through these tools may on occasion include sensitive personal information relating to health or wellbeing, for which explicit consent is obtained in advance.

How to complain

If you have any concerns about how we use your personal information, please contact us in the first instance:

Email: debbie@boostandbeyond.co.uk

If you remain unhappy after raising a complaint with us, you can complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint

This privacy notice was last updated in September 2026.