Privacy Policy

Last updated: 7 October, 2026

Your privacy matters to us. This policy explains what information we collect, why we collect it, how we look after it, and the choices and rights you have.

This policy applies to our website and to the coaching Services described in our Terms and Conditions. By using our Services, you agree to the practices described here.

1. Who we are

CALLINGCRAFT - FZCO (“CallingCraft,” “we,” “us,” “our”) is a career development and career coaching business based in Dubai, United Arab Emirates. We are responsible for the personal information we hold about you - in data-protection terms, the “controller.”

2. The information we collect

We collect only the information we need to work with you well and run our business responsibly. It falls into a few categories.

Information you give us directly. This includes:

  • your name and contact details, such as your email address;

  • information you provide when you book, inquire, or correspond with us;

  • background details you choose to share - such as your age range, gender, work situation, and location;

  • your responses to assessments, questionnaires, and reflective exercises;

  • reflections, goals, and other information you choose to share during coaching; and

  • payment details - though these are processed by our payment provider, and we don’t store your full card information ourselves.

Information we collect automatically. Our website is built on Squarespace, and when you visit we may collect limited technical information - such as your device type, browser, general location (for example, your country), and how you use the site - through cookies and similar tools, which may include analytics tools like Google Analytics. You can read more in Section 11 (Cookies).

3. How we use your information

We use your information to:

  • provide and deliver our coaching, programs, workshops, assessments, and resources;

  • communicate with you about your sessions, bookings, and questions;

  • process payments and keep proper business records;

  • understand and improve our Services;

  • send you information you’ve asked for or agreed to receive; and

  • meet our legal and regulatory obligations.

We’ll only use your information for the purposes we collected it for, unless we reasonably consider we need to use it for a related purpose, or the law allows or requires otherwise.

4. How we use AI

As part of our processes, we use artificial-intelligence tools to help analyze information and generate insights that support your coaching. The main tool we currently use is Claude, provided by Anthropic.

Before any of your personal information is entered into an AI tool, we de-identify it - we remove or change details that could reasonably identify you or others, such as your name and other clearly identifying information you share. AI supports our work; it doesn't replace the judgment, care, and interpretation you and your coach bring.

We do not sell your information. Any information processed through an AI tool is handled in line with that provider’s terms and privacy practices.

5. Legal bases for processing

If you’re located in a region with data-protection laws such as the EU or UK, we rely on the following legal bases to process your information:

  • Contract - to provide the Services you’ve purchased;

  • Consent - where you’ve agreed, for example to receive marketing emails (you can withdraw this at any time);

  • Legitimate interests - to run, protect, and improve our business, where this doesn’t override your rights; and

  • Legal obligation - where the law requires us to keep or share information.

6. Sharing your information

We treat your information as confidential and we never sell it. We share it only where needed, and only with parties expected to protect it:

  • Service providers who help us run our business - for example, our payment provider, video-calling software, scheduling or form tools, email services, and AI tools;

  • Professional advisers, such as legal advisers, where reasonably needed;

  • Emergency or crisis services, where we reasonably believe it is necessary to prevent a risk of serious harm to you or someone else;

  • Authorities or others, where the law requires it or to protect our rights; and

  • A successor, if our business is ever transferred or reorganized - your information would remain protected under this policy.

7. Where your information is processed

We’re based in the United Arab Emirates and work with clients and tools around the world. This means your information may be stored or processed in countries outside your own - for example, on the platforms and cloud services we use to run our business - whose data-protection laws may differ from those where you live. Wherever your information is processed, we take reasonable steps to keep it protected in line with this policy.

If you’re in the EU or UK, we’ll only transfer your personal information outside those regions where we’re permitted to do so, and where it can be given a level of protection consistent with this policy.

8. How long we keep your information

We keep your information for as long as needed to provide our Services, maintain proper business records, and meet our legal, tax, and regulatory obligations. How long that is depends on the type of information and why we hold it - some records we’re required to keep for a number of years. When we no longer need information, we’ll either securely delete it or keep it in a form that no longer identifies you.

9. How we protect your information

We take reasonable technical and organizational measures to keep your information secure and to guard against unauthorized access, loss, or misuse. No method of storage or transmission is ever completely secure, so while we work hard to protect your information, we can’t guarantee absolute security.

10. Your rights and choices

You have rights over your personal information, and we’re happy to help you exercise them. Depending on where you live, these may include the right to:

  • ask for a copy of the information we hold about you;

  • ask us to correct information that’s wrong or incomplete;

  • ask us to delete your information, where appropriate;

  • object to, or ask us to limit, how we use it; and

  • ask us to transfer your information to another provider.

Where we rely on your consent for something - such as sending you marketing emails - you can withdraw that consent at any time. Withdrawing it stops that activity going forward and doesn’t affect anything we’ve already done lawfully.

To make a request, just email us at admin@callingcraft.com. We’ll respond within a reasonable time and in line with any applicable laws. If something doesn’t feel right, please tell us first - we’ll always try to put it right. You also have the right, if you’re in the EU or UK, to raise a concern with your local data-protection authority.

11. Cookies

Our website is built on Squarespace, which uses cookies and similar technologies to help the site work, keep it secure, and understand how it’s used. We may also use Google Analytics, or a similar tool, to see how many people visit our site and which countries they come from.

Where the law requires it - including for visitors in the EU and UK - we’ll ask for your consent before setting non-essential cookies, such as analytics cookies, and you can change your choice at any time. You can also control cookies through your browser settings.

12. Other websites

Our website or materials may link to other sites we don’t control. This policy doesn’t cover those sites, so we’d encourage you to read their privacy policies too.

13. Changes to this policy

We may update this policy from time to time as our Services or the law evolve. When we do, we’ll post the updated version here with a new “Last updated” date.

Contact us

For questions or assistance, please contact us at admin@callingcraft.com