Privacy Policy
Chinara Enterprises is committed to protecting and respecting your privacy
Chinara Enterprises Ltd Privacy Notice
Chinara Enterprises Ltd is committed to protecting personal information and being clear about how we use it. This Privacy Notice explains what personal information we collect, why we use it, who we share it with, how we keep it secure and the rights individuals have under UK data-protection law.
- Who we are
Chinara Enterprises Ltd is a small UK consultancy providing leadership development, organisational development, coaching, training, mentoring and programme-management services. Company number: 6567519.
- How to contact us
Data Protection Contact: Dr Carol Stewart. Email: info@chinaraenterprises.com. Postal address: 124 City Rd, London EC1V 2NX
- Who this privacy notice applies to
This notice applies to website visitors, clients and client contacts, learners and programme participants, leadership coaching participants, prospective and current associate coaches, trainers, mentors and consultants, suppliers, people completing surveys or enquiries, and applicants for work or associate opportunities.
- Personal information we may collect
Depending on the relationship we have with you, we may collect contact details, role and organisation, correspondence, contract and payment information, attendance and completion records, survey responses, enquiry details, recruitment or associate-application information, professional experience and qualifications, supplier information, and information needed to deliver, manage and evaluate our services.
- Special-category and criminal-offence information
We do not routinely seek special-category information, such as health, disability, ethnicity, religious beliefs, trade-union membership or similar sensitive information, unless it is relevant and necessary. For example, we may receive accessibility or reasonable-adjustment information, equality-monitoring information, safeguarding-related information, or information provided voluntarily in a programme context. We only use this information where we have a lawful basis and an additional condition under data-protection law. Criminal-offence information is only used where necessary, lawful and proportionate, for example where required for safeguarding, contractual, legal or suitability purposes.
- How we collect personal information
We collect information directly from you when you contact us, complete a form, take part in a programme, apply for an opportunity, enter into a contract, respond to a survey or communicate with us. We may also receive information from clients, organisations commissioning our services, associate partners, referees, professional bodies, service providers or publicly available professional sources.
- Why we use personal information and our lawful bases
We use personal information to respond to enquiries, provide proposals and services, manage client and supplier relationships, deliver coaching, training and programme activity, administer learning platforms, process invoices and payments, manage associate and recruitment processes, keep business records, meet legal and regulatory duties, protect our systems, evaluate service quality and communicate with people about relevant services where lawful.
Our lawful bases may include contract, legal obligation, legitimate interests, consent and, where applicable, public task where services are commissioned in a context that requires it. Chinara may act as a controller for its own business, client-contact, employment, associate, supplier, website and enquiry information. Chinara may act as a processor where it handles programme or participant information on a client’s documented instructions.
- Coaching and programme information
Coaching-session content will not normally be collected or reported by Chinara. Coaching notes, reflections or action plans usually remain between the participant and coach unless a different arrangement is agreed and made clear. Programme reporting will normally use attendance, completion, satisfaction, agreed outcome measures and anonymised or aggregated themes.
- Learning platform and website information
Where we provide learning-platform access, we may use account registration details, learning activity, access logs, completion data and technical information needed to operate the platform. The learning platform uses UK-hosted one.com managed infrastructure. Controls include individual usernames and passwords, role-based access controls, account lockout after four failed login attempts for ten minutes, MFA availability, HTTPS/TLS, regular updates, access logs, vulnerability scanning and daily backups retained for up to 14 days.
- Cookies and website analytics
Our website and learning platform use cookies and similar technologies that are necessary to operate the website, provide secure account access, maintain user sessions and protect restricted content.
Where analytics, functionality, marketing or third-party cookies are used, these will be identified through the website’s cookie-management tool. Where consent is required, these cookies will not be activated unless the website visitor has made the relevant choice. Visitors can manage or withdraw their cookie preferences through the cookie settings available on the website.
Further information about the cookies used, their purpose, provider and duration is available in our Cookies Policy.
- Who we share information with
We only share personal information where necessary and lawful. This may include sharing information with clients who commission services, associate coaches or trainers involved in delivery, professional advisers, insurers, auditors, IT and hosting providers, payment providers, regulators, public authorities or others where required by law or contract. We do not sell personal information.
- Service providers and sub processors
We use trusted service providers to support our work. Approved business-document systems include Microsoft 365, OneDrive, SharePoint and Teams. Current approved sub processors include Microsoft 365 and one.com. Where Chinara acts as a processor for a client, we use sub processors only as permitted by the relevant contract or documented instructions.
- International transfers
We aim to use UK or appropriately protected systems where possible. Some service providers may process information outside the UK. Where this happens, we will take appropriate steps required by data-protection law and relevant contracts. Where personal information is transferred outside the UK, Chinara will ensure that an appropriate lawful transfer mechanism and relevant safeguards are in place, taking account of the provider’s contractual terms and the requirements of UK data-protection law.
- How we protect information
We use proportionate organisational and technical measures to protect personal information. These include access controls, secure business-document systems, password protection, role-based access where available, appropriate sharing controls, secure storage, staff and associate confidentiality expectations, and review of access where information is no longer required. We do not claim ISO 27001 or SOC 2 certification.
- How long we retain information
Personal information will be retained only for as long as necessary for the relevant purpose, contractual requirement or legal obligation, then securely deleted or anonymised. Retention periods may vary depending on the type of information, the service provided, client requirements, legal obligations, insurance requirements and any need to resolve disputes or keep appropriate business records.
- Individual data-protection rights
Depending on the circumstances, individuals may have the right to ask for access to their personal information, correction of inaccurate information, deletion, restriction, objection, portability, and information about how decisions are made. Individual-rights requests should be sent to info@chinaraenterprises.com and will normally be handled without undue delay and within one month, subject to any lawful extension or exemption.
- Marketing preferences
We will only send marketing or promotional communications where this is supported by the person’s preferences, consent or another appropriate lawful basis. Individuals can withdraw marketing consent or opt out at any time by contacting info@chinaraenterprises.com or using any unsubscribe option provided.
- Complaints
If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection: www.ico.org.uk.
- Changes to this notice
We may update this Privacy Notice from time to time to reflect changes in our services, systems, legal requirements or working arrangements. The latest version should be published on the Chinara Enterprises website.
- Effective date and review date
Effective date: August 2026 . Next review date: 12 months after publication.
