PRIVACY POLICY
KATE GONDOUIN EI
Last Updated: July 2026
Privacy is important to us and we are committed to protecting your personal information and respecting your privacy.
This Privacy Policy explains how Kate Gondouin EI collects, uses, stores and protects your personal information when you visit our website, purchase our services, attend our events, participate in our programmes or otherwise engage with us.
By using our website, purchasing our services or providing your information to us, you agree to the practices described in this Privacy Policy.
WHO WE ARE
Kate Gondouin EI is the data controller responsible for your personal information.
Business Name: Kate Gondouin EI
Email: kate@kategondouin.com
Website: www.kategondouin.com
SIRET Number: 909 698 631 00019
Registered Address: 41 Avenue du Chateau d’Eau, 31490 Brax, France
THE INFORMATION WE COLLECT
Depending on how you interact with us, we may collect and process the following information:
Identity Information
• Name • Business name • Job title • Social media profiles
Contact Information
• Email address • Telephone number • Billing address
Financial Information
• Payment information • Transaction history • VAT / tax identification details, where relevant
Programme Information
• Coaching applications • Questionnaires • Assessment forms • Written submissions • Worksheets • Feedback forms • Survey responses
Session Information
• Coaching and mentoring session notes • Session recordings • Session transcripts • Voice notes • Messages exchanged through approved communication channels
Community Information
• Comments • Posts • Discussions • Contributions within communities, memberships, masterminds, certifications and training programmes
Technical Information
• IP address • Device information • Browser information • Website usage information • Cookies and analytics information
OUR ROLE IN DIFFERENT ENGAGEMENTS
Depending on how you engage with us, our role in relation to your personal information differs, and it is important you understand which applies to you:
Private and Organisational Coaching Clients: Where you engage Kate Gondouin EI directly for individual coaching, or where an organisation engages us to provide coaching or facilitation directly to you or your team using our own methodologies (including the AIRE Framework and the White Light Leadership Methodology™), we act as the data controller of your personal information, and the remainder of this Policy applies in full.
Associate Facilitation and Coaching Work: We also work as an associate facilitator or associate coach for a small number of partner organisations, delivering programmes designed and owned by those organisations rather than our own methodologies. Where this applies, the partner organisation is the data controller of your personal information, and their own privacy policy governs how your information is collected, used and protected. Our role is limited to delivering the programme on their behalf; we process any personal information we encounter in that context solely for that purpose, under the partner organisation's instructions, and in accordance with the confidentiality and data protection obligations agreed between us and that organisation. If you have taken part in a programme through one of our partner organisations and have questions about your personal information, please contact that organisation directly in the first instance.
HOW WE COLLECT INFORMATION
We collect information: when you visit our website; when you complete forms; when you purchase services; when you book calls; when you attend events; when you participate in programmes; when you contact us; when you join our email list; when you engage in our communities; when you voluntarily provide information to us.
HOW WE USE YOUR INFORMATION
We use your information to: deliver our services; administer programmes and events; process payments; provide customer support; communicate with you; deliver educational resources; improve our services; conduct quality assurance; maintain business records; meet legal and regulatory obligations, including tax and accounting obligations; protect our legitimate business interests; and use testimonials, feedback and reviews where consent has been provided or where otherwise permitted by applicable law.
We only process personal information where we have an appropriate legal basis for doing so under the EU General Data Protection Regulation (GDPR) and applicable French data protection law (Loi Informatique et Libertés).
The legal bases we rely upon may include: performance of a contract; compliance with a legal obligation; our legitimate interests, provided these are not overridden by your interests or fundamental rights; your consent, where required; and protection of vital interests where applicable.
ARTIFICIAL INTELLIGENCE, RECORDINGS AND TECHNOLOGY ASSISTED PROCESSING
As part of delivering, administering and improving our coaching, mentoring, consultancy, training and educational services, we may use secure third party technology platforms, including AI assisted tools.
These technologies may be used to support: session note generation; transcript analysis; programme administration; educational resource development; quality assurance; service improvement; research and development; client support; and internal business operations.
Information processed may include: session recordings; session transcripts; written submissions; worksheets; voice notes; messages exchanged through approved communication channels; community discussions; feedback forms; and programme participation materials.
Where coaching sessions, mentoring sessions, workshops, trainings or group calls are recorded, recordings may be used for purposes including: participant catch-up; programme administration; educational resource development; quality assurance; service improvement; and internal training and supervision.
We do not sell personal information to third parties.
Where AI assisted tools are used, they are used solely to support the delivery, administration, development and improvement of our services.
We take reasonable steps to work with technology providers that maintain appropriate privacy, confidentiality and security standards, including, where personal information is transferred outside the European Economic Area, providers that offer appropriate safeguards as described below under International Data Transfers.
If there is a particular recording, discussion or contribution that you would prefer not to be included in optional development or analysis activities, please contact us and we will consider reasonable requests where reasonably practicable to do so.
THIRD PARTY SERVICE PROVIDERS
In order to operate our business and deliver our services, we may use carefully selected third party providers including: payment processors; email marketing providers; customer relationship management systems; learning management systems; community platforms; video conferencing providers; cloud storage providers; website hosting providers; analytics providers; and AI assisted technology providers.
These providers may process personal information on our behalf where necessary to deliver their services. We only share information that is reasonably necessary for those providers to perform the services they provide to us.
We take reasonable steps to ensure that such providers maintain appropriate security and privacy standards, including entering into data processing agreements where required under Article 28 of the GDPR.
INTERNATIONAL DATA TRANSFERS
Some of the providers we use may process or store information outside the European Economic Area (EEA), for example in the United Kingdom or the United States.
Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place in accordance with the GDPR, such as an applicable adequacy decision from the European Commission, or Standard Contractual Clauses approved by the European Commission, together with any additional measures reasonably required.
Because we work with clients based outside the European Union, providing us with your personal information may itself involve a transfer of that information to us in France and onward processing as described in this Policy. By engaging our services, you acknowledge this cross-border processing. If you are located outside the EEA, data protection laws in your own country of residence or establishment may separately give you additional rights, and nothing in this Policy is intended to limit those rights.
DATA RETENTION
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, regulatory, accounting and operational requirements. Standard French accounting and commercial record-keeping obligations generally require certain business records to be retained for a minimum period (commonly several years); where these obligations apply, they take precedence over shorter retention preferences.
Programme materials, recordings, transcripts, coaching notes and related information may be retained for business record keeping, programme administration, service improvement, quality assurance and legal compliance purposes.
When information is no longer required, we will take reasonable steps to securely delete, anonymise or destroy it.
YOUR RIGHTS
Under the GDPR and applicable French data protection law, you may have the right to: request access to the personal information we hold about you; request correction of inaccurate information; request deletion of personal information where applicable; request restriction of processing; object to certain forms of processing; request portability of information you have provided to us; and withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), at www.cnil.fr, or with the supervisory authority in your own country of residence within the EEA, if you believe your personal information has been handled improperly.
We may require reasonable verification of identity before responding to certain requests.
DATA SECURITY
We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.
Whilst we take reasonable precautions, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.
COOKIES
Our website may use cookies and similar technologies to improve user experience, analyse website traffic and support website functionality. Where required under French and EU law, we will request your consent before placing non-essential cookies.
You may choose to disable cookies through your browser settings, although doing so may affect certain website functions.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time.
The most current version will always be published on our website.
CONTACT US
If you have any questions regarding this Privacy Policy or how your personal information is handled, please contact:
Kate Gondouin EI
kate@kategondouin.com
www.kategondouin.com
Kate Gondouin EI. SIRET 909 698 631 00019. 41 Avenue du Chateau D’Eau, 31490 Brax, FRANCE.