Privacy Notice

Jake Morrison, trading as Jake Morrison Training & Consultancy Last updated: 14 August 2026 Email: info@jakemorrison.co.uk

1. About this notice

This Privacy Notice explains how I use personal information when you contact me, commission or take part in training, workplace mediation, conflict coaching, e-learning, consultancy, speaking or facilitation, or use my website and booking tools.

I am Jake Morrison, a self-employed sole trader trading as Jake Morrison Training & Consultancy.

For most of the processing described in this Notice, I decide why and how the information is used and act as the data controller.

For some narrow organisational services, I may instead process information only on an organisation's documented instructions. Where I am genuinely acting as a processor, the relevant organisation remains the controller for that processing and a Data Processing Schedule can apply.

2. How to contact me about personal data

Email: info@jakemorrison.co.uk

You can use that address to ask a privacy question, exercise a data-protection right or make a data-protection complaint.

3. The information I may use

Depending on how you interact with me, I may use:

• name, job title, organisation and contact details;
• enquiry and correspondence information;
• Proposal, booking, contract, invoice and payment records;
• course or event booking details;
• learner enrolment, attendance, progress, completion and certificate administration;
• Calendly appointment details where you use my booking link;
• reasonable-adjustment or accessibility information that is genuinely needed for participation;
• limited mediation or conflict-coaching administration information;
• information you choose to share during an enquiry, mediation or coaching process;
• agreed mediation outcome information where Participants ask for an outcome to be recorded;
• technical and security information generated by the website, learning platform or hosting systems; and
• records needed to deal with a complaint, legal issue, safeguarding concern or insurance matter.

I do not need a diagnosis or detailed medical history simply to arrange most adjustments. Please give me only the information that is relevant to what you need.

4. Where the information comes from

I may receive information:

• directly from you;
• from an employer or organisation commissioning training, mediation, coaching or another service;
• from a named organisational learning administrator;
• through Framer website forms;
• through Calendly;
• through my Moodle learning platform;
• through MHFA England systems where relevant to an MHFA England course; or
• from professional advisers, regulators or other parties where this is necessary for a complaint, legal or professional matter.

Where an organisation gives me information about a Participant, I ask it to provide only what is reasonably necessary and to have an appropriate basis for sharing it.

5. Why I use personal information and my lawful bases

Enquiries and preparing a booking

I use contact and enquiry information to respond, understand what is needed, prepare a Proposal and arrange a service.

My lawful basis is normally legitimate interests in responding to and managing genuine business enquiries. Where you are personally asking me to take steps before entering into a contract with you, contract steps at your request may also apply.

Organisational client relationships and service delivery

Most clients are organisations. I use business-contact, booking and administration information to agree scope, organise delivery, communicate with the commissioning contact and provide the service.

My lawful basis is normally legitimate interests in running and delivering the contracted service and maintaining the professional client relationship. Where the contract is directly with an individual, contract may apply instead.

Invoices, accounts and tax records

I use client identity, transaction, invoice and payment information to bill for services, maintain accounts, deal with debt or invoice queries and meet tax/accounting requirements.

My lawful bases are legal obligation where records are required by law and legitimate interests for ordinary financial administration and recovery of sums due.

Training and learning administration

I use Participant details to administer bookings, joining information, attendance, learning access, progress, completion and certificates where relevant.

For organisational bookings, my lawful basis as controller is normally legitimate interests in providing and administering the service commissioned by the organisation. For some organisation-directed learner administration I may instead act as the organisation's processor.

Workplace mediation

I use the minimum personal information reasonably needed to assess suitability, contact Participants, arrange meetings, conduct the mediation, record agreed administrative status and, where the Participants ask for it, record an agreed outcome.

The commissioning organisation remains responsible for its own HR, employment, legal and management decisions. I do not investigate allegations or make findings of fact as part of mediation.

My Article 6 basis as controller is normally legitimate interests in providing an independent professional mediation service and managing the engagement.

Conflict coaching

I use contact and administration information to arrange and provide conflict coaching. Where an employer commissions the service, routine reporting to the employer is limited to agreed administration information such as attendance/completion unless a different three-way arrangement is expressly agreed with the Participant.

My Article 6 basis as controller is normally legitimate interests in providing the professional service and managing the engagement.

Complaints, legal rights, safeguarding and insurance

I may use relevant information to investigate a complaint, establish or defend legal rights, respond to a regulator or insurer, or address a serious safeguarding or risk issue.

The lawful basis depends on the circumstances and can include legal obligation, legitimate interests, or processing necessary for legal claims where the applicable legal conditions are met.

6. Special-category information, including health or disability information

Health information and some other types of particularly sensitive personal information are special-category data under UK data-protection law.

I do not routinely ask for detailed health information.

If you voluntarily give me health or disability information so that I can understand an access need or reasonable adjustment, I use only what is reasonably necessary. Where appropriate, I will rely on explicit consent for that special-category processing. You can withdraw consent for future processing, although this does not make earlier lawful processing unlawful.

During mediation or conflict coaching, a Participant may choose to discuss mental health, disability, trade-union membership or other sensitive matters. I minimise what I record and do not routinely retain substantive working notes after the process is closed.

If special-category information has to be retained or used without consent for a specific legal, safeguarding, complaint or insurance reason, I will only do so where an appropriate Article 9 condition and any required Data Protection Act 2018 condition apply.

7. Criminal-offence allegations or information

I do not routinely ask for criminal-offence information and I do not investigate criminal allegations as part of mediation or coaching.

A Participant or organisation may nevertheless mention an allegation during a workplace dispute. Criminal-offence data can include allegations about a suspected offender, not only convictions.

I minimise any recording or retention of that information. If criminal-offence data needs to be retained or otherwise processed beyond a transient discussion, I will only do so where there is an Article 6 lawful basis and an applicable Article 10 / Data Protection Act 2018 Schedule 1 condition.

8. Mediation and conflict-coaching notes

I may make short working notes to help conduct a mediation or coaching session.

These are not formal evidence or findings.

My normal practice is to securely destroy or delete substantive working notes promptly after the mediation or coaching process is closed and any agreed output has been finalised.

I may retain limited information where genuinely necessary for administration, an agreed outcome, a complaint, a legal or regulatory issue, or an insurance matter.

9. E-learning and organisational reporting

Where an organisation buys e-learning, the actual licence period, learner group/user cap and reporting arrangement are set out in the Proposal or activation information.

A named organisational contact may receive agreed learning-administration information such as:

• enrolment;
• progress;
• completion; and
• certificate status.

I do not routinely provide an employer with the content of a learner's private support conversation or unrelated personal information.

10. Who I share information with

I share personal information only where it is reasonably necessary for the purpose involved.

Depending on the service, suppliers and recipients can include:

• Google Workspace for email, documents, files and business administration;
• Calendly where you use my appointment booking link;
• Framer for website hosting/forms and website-related processing;
• Hostinger as the infrastructure provider for my self-hosted Moodle learning platform;
• MHFA England and its systems where required to administer an MHFA England course;
• FreeAgent for Proposals, invoices, accounting and related business records;
• professional advisers, insurers or regulators where genuinely necessary; and
• an organisational client where a specific administration/reporting arrangement has been explained, for example agreed e-learning completion information.

I do not sell personal information to advertisers.

11. International processing and transfers

Some technology suppliers operate internationally or use sub-processors in more than one country.

Where personal information is transferred from the UK to a country that does not have an applicable UK adequacy regulation, I use suppliers whose contractual arrangements provide an appropriate UK transfer safeguard where one is required, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Google Workspace, Calendly and Framer publish data-processing / transfer terms for their business services. Hostinger also publishes a data-processing addendum covering UK GDPR. You can contact me if you want more information about the safeguards relevant to a particular service.

12. How long I keep information

I do not use one retention period for everything.

Financial and tax records

Relevant accounting and tax records are kept for the period required by applicable tax/accounting law. For self-employed business records this will normally mean at least the period required by HMRC after the relevant tax-return deadline, and longer where legally required.

Contracts, Proposals and core commercial records

I keep core booking and contract records for as long as reasonably necessary to perform the agreement, deal with queries or complaints and establish, exercise or defend legal rights. The appropriate period can reflect the limitation period that may apply to contractual claims.

Routine enquiries

Routine enquiry correspondence is kept only as long as reasonably needed to deal with the enquiry, the resulting relationship and proportionate complaint/legal risk.

Training and learning administration

Learning records are kept for the period reasonably needed for course administration, completion/certification, client reporting and any applicable course-owner requirements. The exact period can differ between products.

Mediation and conflict coaching

Substantive working notes are normally deleted or destroyed promptly after the process is closed. Limited administration records, agreed outcomes, financial records or complaint/legal records may be retained for their separate legitimate purpose.

Website/technical records

Technical logs and platform records are kept according to the relevant platform configuration and security/operational need and are not kept indefinitely simply because they exist.

13. Your data-protection rights

Depending on the circumstances and the lawful basis, you may have rights to:

• ask for access to your personal information;
• ask for inaccurate information to be corrected;
• ask for information to be erased;
• ask for processing to be restricted;
• object to particular processing;
• receive certain information in a portable format; and
• withdraw consent where consent is the basis being used.

These rights are not absolute in every situation.

Email info@jakemorrison.co.uk if you want to exercise a right. I may need to confirm your identity before disclosing personal information.

14. Data-protection complaints

If you are concerned about how I have handled personal information or a data-protection right, email info@jakemorrison.co.uk. You do not need to use legal language or a special form.

I will normally acknowledge a data-protection complaint within five working days and, in any event, within the period required by law. I will investigate it appropriately without undue delay, keep you informed where necessary and communicate the outcome without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO). You do not have to wait for my process to finish before contacting the ICO.

15. Direct marketing

I may send business marketing only where data-protection law and the Privacy and Electronic Communications Regulations (PECR) allow it.

The rules differ depending on who is being contacted and how the contact details were obtained.

For electronic marketing to individuals, sole traders and some partnerships, I will use valid consent or another PECR route such as a lawful soft opt-in where its conditions are met.

For some corporate business contacts, PECR does not require prior consent for email marketing, but UK GDPR still applies where personal data is used. I will respect objections and provide an appropriate way to opt out of direct marketing.

Marketing consent is not bundled into acceptance of my Service Terms.

16. Website forms, cookies and analytics

If you use a Framer form, the information you submit is used to respond to your enquiry and manage any resulting business relationship.

Cookie and analytics wording must match the tools actually enabled on the live website. I will not state that a particular analytics or advertising technology is used unless it is actually configured.

Where a non-essential cookie or similar technology requires consent, it should not be set before valid consent is obtained.

17. Changes to this Notice

I may update this Privacy Notice when my services, systems or legal obligations change.

The current version and last-updated date will be shown on the website.

18. Contact

Privacy questions, rights requests and complaints:

info@jakemorrison.co.uk