Privacy Notice
This notice explains how I collect, use and protect your personal information when you visit nawarkamona.com, contact me, or work with me.
Who I am
I am Nawar Kamona, and I run an independent practice as Nawar Kamona. I am the data controller for the personal information described in this notice.
Email: healthwithnawar@gmail.com
ICO registration number: ZC253389
If you have any questions about this notice or your information, please email me.
What I collect
I only collect what I need. Depending on how you interact with me, this may include:
When you visit my website: basic technical information, such as your device, browser and the pages you view, collected through cookies (see Cookies below).
When you contact me or book a call: your name, email address, phone number if you give it, and anything you choose to write in your message.
When you sign up to my newsletter: your name and email address.
When you buy something from my website: your name, email address and billing details. Payments are handled by a secure third-party payment provider, and I do not see or store your full card details.
When you become a coaching client: your contact details, your location during sessions, an emergency contact, session notes, and any health-related information you choose to share. Health information is only held with your explicit consent, as set out in my client agreement.
My website and services are not intended for anyone under 18.
Why I use it
Data protection law requires me to have a lawful reason for each use of your information. I use it:
to reply to your enquiry and arrange a call, as a step you have asked me to take before we agree to work together;
to deliver coaching sessions and keep session records, to carry out our agreement;
to hold health-related information you choose to share, with your explicit consent, which you can withdraw at any time;
to send my newsletter, with your consent (you can unsubscribe at any time)
to keep financial records, because tax law requires it;
to meet my insurer's record-keeping requirements and deal with any complaints or claims, in my legitimate interests in running and protecting my practice;
to contact emergency services or your emergency contact in an emergency, to protect your vital interests;
to understand how my website is used, with your consent through the cookie banner.
I do not sell your information, and I do not use it for automated decision-making or profiling.
Who I share it with
I use trusted service providers to run my practice. They only process your information on my instructions:
Squarespace: hosts my website, forms and online store. Squarespace also acts as an independent controller for some information about how you use the site, under its own privacy policy.
Google Fonts and Adobe Fonts: display the fonts on my website. To do this, they receive your IP address and basic information about your browser and device.
Google (Google Meet and email): online sessions and email.
Zoom: occasional online sessions.
Quenza and WriteUpp: secure client records and practice management.
A secure third-party payment provider: taking payments.
Squarespace provider: sending my newsletter.
I may also share information, only as far as necessary:
with my insurer or legal advisers, if there is an incident, complaint or claim;
with emergency services, or your emergency contact, if I have serious concern for your safety;
where the law requires it.
When I discuss my work with a supervisor, mentor or trainer, I do not share your name or anything that could identify you.
Transfers outside the UK. Some of these providers store or process data outside the UK, including in the USA. When they do, they use safeguards recognised under UK law, such as the UK–US data bridge or approved contract terms.
How long I keep it
I keep client records and session notes for 8 years after our last session, to meet my insurer's requirements. If you contact me but we don't go on to work together, I delete your details after our last contact. If you sign up to my newsletter, I keep your details until you unsubscribe. I keep financial records for as long as UK tax law requires. After that, I securely delete your information.
Cookies
Cookies are small files stored on your device when you visit a website. My website uses essential cookies so it works properly. With your consent, it may also use analytics cookies to show me how visitors use the site. You can accept or decline non-essential cookies through the banner when you first visit, and change your choice at any time through your browser settings.
Your rights
You have the right to:
ask for a copy of the information I hold about you;
ask me to correct anything that is wrong;
ask me to delete your information;
ask me to limit how I use it, or object to how I use it;
ask for your information in a format you can take elsewhere;
withdraw your consent at any time, where I rely on it.
To use any of these rights, email me. I will reply within one month, or tell you within that month if I need more time for a complex request. I may need to confirm your identity first. Some rights have limits: for example, I may need to keep client records for the period above to meet my legal obligations and in case of any complaint or claim.
If you have any concerns about how I have handled your information, please contact me first, and I will do my best to put things right. If you remain dissatisfied with my response, you have the right to complain to the Information Commissioner's Office (ico.org.uk).
Changes to this notice
I may update this notice from time to time. The latest version will always be on this page, with the date it was last updated.
Last updated: 7 November 2026