Privacy Policy
Last updated: 18 September 2026
MD Impact is committed to protecting your personal data and your right to privacy. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have under the UK GDPR and the Data Protection Act 2018.
Data Controller
Mihail Dicusar — MD Impact
What We Collect
When you apply for coaching, complete a Breakthrough Diagnostic, or submit a check-in, we collect: • Name, email address and phone number • Occupation, business and role information • Your coaching goals, challenges and assessment answers • Life-area self-assessment scores (balance wheel) • Check-in responses, Big 3 actions, progress and KPI data • Session notes and scheduling details We only collect the information needed to provide coaching and to contact you.
Sensitive (Special-Category) Data
Some self-assessment scores (such as health & energy and relationships) may reveal information about your health. This is special-category data under Article 9 of the UK GDPR. We process it only with your explicit consent, given through the checkbox on the relevant form, and only for the purpose of providing coaching.
Why & On What Legal Basis
We process your data on the following legal bases: • Consent — when you complete a form and check the consent box • Contract — when you become a coaching client and we deliver sessions • Legitimate interest — to respond to your enquiries and follow up about coaching You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Data
We use your data to: • Deliver and personalise your coaching • Schedule sessions (including Google Calendar integration for bookings) • Track your progress, Big 3 actions and KPIs over time • Send session reminders and coaching communications • Review and improve our coaching programme We do not use your data for automated decision-making or profiling.
Sharing Your Data
Your data is shared only with your coach and, where needed to deliver the service, with: • Google Calendar — for scheduling coaching sessions • The secure hosting platform that stores the application and its database We never sell your personal data. Service providers act as processors and are bound to protect your data.
Data Retention
We keep your personal data for the duration of your coaching engagement and for a reasonable period afterwards to support your ongoing progress and our records. You can request earlier deletion at any time (see Your Rights below).
Data Security
Your data is stored on a secured platform with authentication and encryption in transit. Access to client records is restricted to the coach (administrator). We apply row-level security so that personal records are not openly accessible. Despite our efforts, no system can be guaranteed 100% secure, and you provide your data with that understanding.
Your Rights
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion ("right to be forgotten")
- Restriction — limit how we use your data
- Portability — receive your data in a structured format
- Objection — object to processing
- Withdraw consent — at any time
Exercising Your Rights & Contact
To access, correct, delete or export your data, or to withdraw consent, contact your coach using the email address you provided at registration. We respond within 30 days.
Back to Home