Privacy notice

Who is responsible for your information?

Next Thing First is a sole-trader business and is the controller of the personal information described in this notice.

Information we collect

We may collect your name, email address, appointment details, answers you provide on the booking form, communications with us, session notes, your personalised plan, accountability messages, and limited payment information such as payment status and transaction references. Stripe processes your card or payment details; Next Thing First does not receive your full card number.

Please only provide information that is relevant to the support you are requesting. Do not send medical records, financial account details, passwords or information about another person unless it is necessary and you have the right to share it.

Why we use it

We use your information to:

• take payment, arrange and deliver the service you purchased;
• understand what you want help organising and prepare your personal plan;
• send appointment information and provide the agreed accountability support;
• respond to questions, cancellations, complaints or legal requests;
• keep appropriate business, security and financial records.

Our main lawful bases are taking steps at your request and performing our contract with you, complying with legal obligations, and our legitimate interests in safely administering and improving the service. We will ask for consent before using optional health or wellbeing information you choose to provide, or before sending marketing.

Who we use to provide the service

We use trusted service providers including Stripe for payments, Calendly for scheduling, Google for email, Calendar and Meet, and our website-hosting provider. They process information needed to provide their services and may process it outside the UK using the safeguards described in their own privacy information. We may also disclose information where required by law, to obtain professional advice, or where necessary to protect someone from a serious and immediate risk.

How long we keep it

Booking information, relevant communications, session notes and personal plans are normally kept for up to 24 months after your last service, then securely deleted unless there is a legal reason to keep them longer. Payment and accounting records are retained for the period required by tax and other applicable law.

Your rights

Depending on the circumstances, you can ask for access to your personal information, correction, deletion, restriction, portability, or object to how it is used. You can withdraw consent where consent is the basis being used. Email hello@nextthingfirst.co.uk to make a request.

If you are unhappy with how your information is handled, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office.

Cookies and external services

This website does not currently use advertising analytics or marketing cookies. Essential technology may be used to deliver and protect the website. When you follow a link to Stripe or Calendly, those services operate their own websites and may use cookies under their own notices.

Changes

We will update this notice when our services or information practices change. The latest version will remain available on this page.