Privacy notice

How your information is held and used.

Who holds your data

Your data is held by Habib Onifade, a sole trader, trading as The Canvas Coach. The Canvas Coach decides what is collected, why, how it is checked and how long it is kept, and is responsible for keeping it safe. In data protection terms, The Canvas Coach is the controller. Where a programme or funder also sets a purpose for particular data, The Canvas Coach and that programme share responsibility for that purpose only; for everything else, The Canvas Coach acts alone.

For anything in this notice, or to make any of the requests below, write to habib@habibonifade.com. The Canvas Coach is registering with the UK Information Commissioner's Office; the registration number will be shown here once it is issued.

What is held

Two kinds of information. First, information about your business: the figures in your financial model and baseline, what you sell, your costs, your stock and working capital, and how your engagement is progressing. A limited company's figures are business information, not personal information; a sole trader's figures can be personal, and are treated with the same care as any personal data. Second, information about people: the names and email addresses of the people who use the platform, and, only where you have agreed to it, recordings and transcripts of interviews and sessions.

Why it is held, and the lawful basis

Business figures and business contact details are held to deliver the work you engaged The Canvas Coach for, and to provide a continuing service after a programme closes, which is part of what The Canvas Coach provides: keeping your baseline and record so your progress can still be shown and your evidence stands up later. The lawful basis for this is legitimate interests. A short note explaining why that basis is fair is kept and available on request.

Recordings and transcripts are held only with your consent, which is asked for expressly before any interview and recorded at the time. You can withdraw that consent at any time; when you do, it takes effect in the system, it is not merely noted.

How long it is kept

Business financial records and frozen baselines are kept for seven years from the last activity on that engagement, because for many businesses this is the only durable record of their financial history. Recordings are kept for twenty four months, or until you withdraw consent, whichever is sooner, and are then deleted; the written transcript made from a recording is kept for seven years as part of the evidence. Contact details for individuals are kept until you ask to be removed, or three years after we last had contact. Website enquiries that do not become engagements are kept for twelve months.

Where it is held

Your data is stored in the European Economic Area, in Ireland. Some trusted suppliers who help run the service are outside it; where they are, the appropriate safeguards are put in place before your data reaches them.

Who it is shared with

Your data is not sold, and it is not shared with funders beyond what you have agreed. To run the service, a small number of trusted suppliers process data on The Canvas Coach's behalf under agreement:

• Supabase stores the database, logins and files.
• Vercel runs and serves the application.
• Resend sends invitations and notifications.
• OpenAI transcribes interview recordings, where you have consented to recording.
• Anthropic assists with drafting, when a permitted user asks for it.
• LiveKit carries live audio and video for remote sessions.
• Cal.com handles call bookings made on the website.
• Kit runs the marketing mailing list, which holds email addresses only.

Your rights

You can ask for a copy of everything held about you or your business, ask for it to be corrected, or ask for it to be deleted. Where a business record must be kept as evidence, the personal details can be deleted from it while the figures, which name no one, are kept, so your right to be forgotten does not force the business history to be destroyed. You can also object to the use of your data for the continuing service. To make any of these requests, write to habib@habibonifade.com. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

If the business changes hands

The Canvas Coach may in future become a company as the business grows. If that happens, your data may transfer to a successor company carrying on the same business, under the same terms as this notice.

Changes

This notice is updated when what The Canvas Coach does changes, and the date at the top of the page changes with it.