Last updated: Sept. 2, 2025
NorthSpark Coaching and Consulting (“we”, “us”, or “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you visit our website, book coaching sessions, or engage with our services.
Who we are
Our website address is: https://www.northsparkcoaching.com. NorthSpark Coaching and Consulting is operated by Sagan Rossi, based in Espoo, Finland. You can contact us at sagan (at) northsparkcoaching (dot) com for any privacy-related questions.
What data we collect
We may collect and process the following types of personal data:
Website visitors:
- Email addresses (newsletter sign-ups, contact forms, assessments, and course/training signups)
- Results from assessments:
- If you participate in an assessment, quiz, or survey on our site, your responses may be stored in our website database. These may include self-assessment results or personal details (e.g., name or email) if provided. This data is used solely to deliver personalized feedback and follow-up communication from NorthSpark Coaching and Consulting directly.
- Cookies and usage data (analytics tools)
Clients:
- Contact details (name, email, phone)
- Contracts and agreements
- Coaching session notes
- Scheduling and billing information
- Audio recordings (if consented)
Cookies
We use cookies to enhance your experience and understand how visitors use our website. Cookies are small text files stored on your device. You can manage your cookie preferences via your browser settings or through a cookie banner. Types of Cookies we may use:
Strictly necessary cookies:
These are essential for the website to function properly (for example: session management, booking functionality). These cookies do not require consent and typically expire when you close your browser.
Functionality cookies:
These remember your preferences (for example, language settings) and may last up to 12 months.
Analytics cookies:
These help us understand how visitors interact with our site. They require consent and typically expire within 6–12 months.
Marketing cookies:
These track user behavior for advertising purposes. They require explicit consent and should expire within 6 months.
Specific Cookie behaviors:
If you visit our login page (for example, to take a course or training) a temporary cookie is set to check browser compatibility. It is discarded when you close your browser. If you log in, cookies are set to save login info and screen preferences:
- Temporary cookies for login compatibility
- Login cookies: 2 days
- “Remember Me” login: 2 weeks
- Screen options: 1 year
You can manage cookie preferences through your browser settings or the website’s cookie banner.
Embedded content from other websites
Pages or articles on this site may include embedded content (for example: videos, images, articles). Embedded content behaves as if you visited the other website directly. These sites may collect data, use cookies, and track your interaction with embedded content.
Why we collect your data
We collect and process your data to:
- Respond to inquiries and communicate with potential clients
- Deliver coaching services, training and courses, assessments, and manage client relationships
- Improve our website and services through analytics
- Comply with legal and professional accreditation obligations
Legal bases include consent, contractual necessity, and legitimate interest.
Data sharing
We do not sell or share your personal data for marketing. We may use trusted third-party services:
- Calendly, Google Calendar – for booking sessions
- Amelia – for bookings on the website
- WooCommerce – for payments
- TutorLMS – for course participation
- Google Analytics – for website usage insights
- Quiz and Survey Master (QSM) – used to deliver interactive quizzes, surveys, and assessments. NOTE: All responses are stored securely in our website’s database hosted by Louhi.fi and are not shared with third parties. No data is transmitted to external QSM servers.
- AI transcription tools – for coaching note support (with anonymization)
These services may store data outside the EU. We ensure GDPR compliance through appropriate safeguards.
For clients:
Audio recordings
If you consent to session recordings for note-taking purposes, these recordings are used only to support accurate transcription. We currently use Microsoft Teams transcription and Copilot to assist with this process. Your name and identifying details are removed before any AI tools are used. Once the notes are finalized, the audio files are permanently deleted. We do not store or archive recordings.
Contract signing
We use OpenSign (EU servers) to manage digital agreements. Once signed, all data is deleted from OpenSign and the agreement is stored securely in our cloud storage in line with this policy.
Data storage and security
Client data and coaching notes are stored securely on encrypted devices and/or cloud services accessible only by Sagan Rossi. Notes are retained for up to three (3) years and deleted thereafter.
We use secure passwords, encrypted storage, and access controls. Our systems are reviewed regularly to maintain strong data protection.
You may request access to or deletion of your data at any time.
How long we retain your data
- Assessments, quizzes and survey responses: retained for up to 12 months unless part of an ongoing coaching relationship, in which case they may be retained for up to 3 years.Contact form submissions and assessment responses are retained for up to 12 months, unless they are part of an ongoing coaching relationship, in which case they may be retained for up to 3 years.
- Coaching-related data: up to 3 years
- Registered users: can view, edit, or delete their personal information at any time (except usernames).
- Website administrators can also view and edit user data. At present, that is only myself, Sagan Rossi.
Data breach protocol
In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities promptly, in line with legal requirements.
Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Correct or delete your data
- Withdraw consent at any time
- Object to processing
- Request an export of your data
- Lodge a complaint with the Finnish Data Protection Ombudsman
To exercise your rights, contact sagan (at) northsparkcoaching (dot) com.
Where do we send your data
We do not intentionally send your personal data to external parties beyond the trusted third-party services needed to conduct our business online that are listed in this policy.
Updates to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.