Privacy and cookies
How I look after your information
Last updated 23 October 2026
This page explains what personal information I collect through kairoshq.ie, why I collect it, who else handles it, and what your options are. I've kept it plain. If anything is unclear, email me and I'll explain.
Who I am
I'm Eoin Sandford, an executive coach based in Dublin, trading as Kairos. I'm the data controller for the information described here, which means I decide how it's used and I'm responsible for looking after it.
You can reach me at eoin.sandford@kairoshq.ie.
What I collect and why
If you send an enquiry
The enquiry form asks for your name, email address and message. I use them to reply to you. My legal basis is legitimate interests: you've asked me something, and replying is what you'd expect. I keep enquiries for up to 12 months after our last message, unless you become a client.
If you book a discovery call
Calendly collects your name, email address and any answers you give when you book. Before we speak, I ask you to fill in a short form in Google Forms so we can use the time well. The call itself runs on Zoom.
I use this information to arrange and prepare for the call, which is a step you've asked me to take before any agreement. If we don't end up working together, I keep the booking details for up to 12 months.
If you become a client
I keep what I need to work with you: your contact details, our agreement, invoices and my session notes. My legal basis is our contract, and for financial records, my legal duty to keep them for six years for Revenue.
Coaching is confidential. I'll only share what you tell me if the law requires it, or if I believe someone is at serious risk of harm. If I ever want to record a session, for example as part of my coaching accreditation, I'll ask for your written permission first, and you can say no.
I keep session notes for up to six years after our work ends, then delete them.
If you visit the website
With your permission, I use Google Analytics to see how people find the site and which pages they read. It records things like the pages you view, your device and browser, your approximate location, and the site or advert you came from. I use it to improve the site and my marketing, nothing else. If you arrive from an advert, I note which one so I know what worked.
My legal basis is your consent. If you decline, the Google Analytics script doesn't load at all.
Cookies and similar technologies
When you first visit, a banner asks whether you're happy for me to use Google Analytics. Accept and Decline carry equal weight, and the site works the same either way. You can change your mind at any time with the button below, or with the Cookie settings link at the foot of every page.
| Name | What it does | Lasts | Needs your yes |
|---|---|---|---|
_ga | Lets Google Analytics tell one visitor from another | Two years | Yes |
_ga_C15J8Z9KXB | Keeps track of a single visit | Two years | Yes |
kairos_cookie_consent | Remembers your choice so I don't keep asking. Stored in your browser's local storage, not as a cookie | 180 days | No, the site needs it to work |
A few services load as soon as a page opens, whatever you choose, because the site needs them to display properly. Google Fonts supplies the typefaces, unpkg supplies the script behind the enquiry form, and Calendly supplies the booking calendar. Each of them receives your IP address when it loads. Calendly may also set its own cookies when you open the calendar, and it shows its own cookie choices.
The site links to my LinkedIn profile. LinkedIn only gets information from you if you follow that link, and its own privacy policy applies from there.
Who else handles your information
I use a small number of services to run Kairos. They handle your information on my behalf, for the reasons above.
- Netlify hosts the website.
- Formspree delivers enquiry form messages to my inbox.
- Calendly handles bookings and Zoom runs the calls.
- Google provides Analytics, Forms, email and file storage.
- Blacknight looks after the domain name.
I don't sell your information, and I don't share it for anyone else's marketing.
Some of these providers are based in the United States. When your information leaves the European Economic Area, it's protected by safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Keeping it safe
I keep your information in password protected accounts and only access what I need. If I ever have reason to believe your information has been put at risk, I'll tell you, and the Data Protection Commission, as the law requires.
Your rights
You can ask me to show you the information I hold about you, correct it, delete it, limit how I use it, or send it to you in a format you can reuse. Where I rely on legitimate interests, you can object. Where I rely on your consent, you can withdraw it at any time.
Email me and I'll reply within one month. If you're unhappy with how I've handled something, please tell me first so I can put it right. You also have the right to complain to the Data Protection Commission at dataprotection.ie.
Changes to this page
If I change how I use your information, I'll update this page and the date at the top.