Privacy Policy

Who we are

This website is operated by COAURI Group Pte Ltd. This policy covers personal data collected through this website. If you become a coaching client, the personal data involved in our work together is handled under a separate client agreement.

For any questions about this policy or your personal data, contact our Data Protection Officer at dpo@carlaescot.com.

Registered address: 7 Temasek Boulevard, #12-07, Suntec Tower One, Singapore 038987.

What data we collect

When you book a discovery call via TidyCal, TidyCal collects your name and email address and any other information you add into the booking process, to facilitate the booking. We will also receive this information to confirm your appointment.

When you sign up for our emails, we collect your email address and the page you signed up from, and store them in Mailchimp. You are only added once you click the link in the confirmation email. To stop the signup form being abused by automated bots, Cloudflare Turnstile checks your browser when you submit it.

We use Cloudflare Web Analytics to understand how visitors use this site. This is cookieless analytics. No personal data or tracking cookies are collected.

Why we use your data, and our legal basis

To arrange and confirm your discovery call: we process your booking details to respond to your request and set up the call. Where the GDPR applies, our basis is taking steps at your request before entering into a contract, or your consent.

To keep the site secure and understand how it is used: we process limited technical data. Where the GDPR applies, our basis is our legitimate interest in running a safe, functional website.

To process payments for paid services: these are handled by Stripe via TidyCal, to perform our contract with you.

To send marketing or nurture emails, if you opt in: your consent, which you can withdraw at any time.

Cookies

This site sets no first-party cookies. Cloudflare, which hosts and protects the site, may set strictly necessary security cookies. If you choose to book a call, TidyCal sets cookies when you interact with the booking calendar. This only happens after you click “See available times”, and these cookies exist to make the booking you have asked for work.

We do not use advertising or non-essential tracking cookies. Because none are set, this site does not show a cookie consent banner.

Marketing emails

We only send marketing or nurture emails if you have opted in. Every email includes an unsubscribe link, and you can opt out at any time. We use Mailchimp to manage these emails.

Third-party processors

• Cloudflare: hosts this website and provides CDN, DDoS protection, cookieless analytics, and the Turnstile bot check on the email signup form. Privacy policy: cloudflare.com/privacypolicy
• TidyCal: handles appointment booking. Collects name and email to facilitate bookings. Privacy policy: tidycal.com/privacy
• Stripe: processes payments for paid services, via TidyCal. Stripe is PCI-DSS compliant, and card data never passes through our systems. Privacy policy: stripe.com/privacy
• Mailchimp: manages our marketing and nurture emails, if you have opted in. Privacy policy: mailchimp.com/legal/privacy
• WhatsApp Business: if you choose to message us on WhatsApp, your number and messages are processed so we can respond to you. Privacy policy: whatsapp.com/legal/privacy-policy

Where your data is processed

The service providers we use may store and process your data outside Singapore, including in the United States. Where we transfer personal data overseas, we take steps to ensure it is given a standard of protection comparable to that required under Singapore’s Personal Data Protection Act. Where the GDPR applies, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep your data

We keep personal data only for as long as necessary for the purpose it was collected. Booking and enquiry details are kept only as long as needed to arrange and follow up on your call. If you subscribe to our emails, we keep your details until you unsubscribe.

Your rights

Depending on where you live and how the relevant law applies, you may have some or all of these rights over your personal data:

• to ask what data we hold and receive a copy (access)
• to have inaccurate data corrected (correction)
• to ask us to delete data we no longer need (erasure)
• to object to, or restrict, certain processing
• to receive your data in a portable format
• to withdraw consent, where we rely on it
• to complain to a data protection authority

To exercise any of these, email our Data Protection Officer at dpo@carlaescot.com. We may need to confirm your identity first. We aim to respond within 30 days.

Singapore residents have rights under the Personal Data Protection Act (PDPA), and can raise concerns with the Personal Data Protection Commission (pdpc.gov.sg). Residents of the EU, EEA and UK have rights under the GDPR and UK GDPR, and can complain to their local data protection authority, which in the UK is the ICO at ico.org.uk. If you live elsewhere, you may have rights under your local data protection law. Wherever you are, you can make any of the requests above, and we apply the same baseline standard to everyone.

Some rights, such as erasure and portability, are not guaranteed to Singapore residents under the PDPA. Even so, we apply that same standard to everyone who contacts us.

This site is not directed to children

Our services and this website are intended for adults. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact

For any privacy-related questions, email contact@carlaescot.com .