Privacy policy

1. Who we are

This privacy policy explains how Malone Inc Limited ("we", "us", "our") collects and uses your personal data when you use thegoodki.co and the coaching and business services of The Good Ki Company® offered through it.

Malone Inc Limited is the data controller for your personal data. Garry Malone is our Data Protection Officer and oversees privacy matters. If you have any questions about this policy, or want to use any of your rights, please contact us.

Malone Inc Limited, company number 14300339, registered in England and Wales.
Registered office: Rowan House, London Road East, Amersham, HP7 9DH, United Kingdom.
Email: support@thegoodki.co, or use our contact form.

Our services are for adults in business. By giving us your data, you confirm that you are 18 or over.

2. The data we collect

Personal data means any information that can identify you. Depending on how you use the website and our services, we may collect:

• Identity and contact data: your name, email address, phone number, and business name.
• Application data: what you tell us about your business when you apply for a programme, such as your services, income range, goals, and challenges.
• Booking data: the session you booked, its date and time, your time zone, and your answers to our pre-session questionnaire.
• Transaction data: what you bought, how much you paid, and your billing details. We never see or store your full card details.
• Communication data: anything you send us through our forms, by email, in a session, or on social media.
• Marketing data: whether you have agreed to receive emails from us, and your preferences.
• Technical data: your IP address, browser and device type, and similar information your device sends when it loads a web page.

We do not ask for special category data, such as health information. If you choose to share it with us in a session, we use it only to support you and keep it confidential.

3. How we collect your data

• Directly from you, when you apply, book, pay, fill in a form, or contact us.
• Automatically, when your browser loads our pages (see section 10).
• From our service providers, for example payment confirmations from Stripe or PayPal.

4. How we use your data and our lawful basis

What we do	Lawful basis
Review your programme application and arrange a call with you	Steps taken at your request before entering a contract
Take your booking and payment, send confirmations and reminders, and deliver your session or programme	Performance of a contract
Reply to your messages and keep a record of them	Legitimate interests
Send you news, resources, and offers by email, where you have agreed	Consent
Keep financial records for tax and accounting	Legal obligation
Run, secure, and improve the website	Legitimate interests

We do not make decisions about you by automated means that have legal or similarly significant effects. We never sell your data.

5. Who we share your data with

We share your data only with the service providers we need to run the website and our services, and only as much as they need. They act on our instructions and must keep your data secure.

• Systeme.io (France): hosts this website and runs our forms, bookings, checkout, contact records, and emails.
• Stripe and PayPal: process your payments securely.
• Google: our calendar, email, and Google Meet for video sessions. Our pages load fonts from Google Fonts, which means your browser sends your IP address to Google.
• Cloudflare: manages our domain name.
• Hostinger: hosts our support@thegoodki.co mailbox.
• Our professional advisers, such as accountants, lawyers, and insurers, where needed.
• Government bodies or regulators, where the law requires it.
• A buyer or successor, if our business or part of it is sold or merged.

6. International transfers

Some of our providers store or process data outside the UK, for example in the European Economic Area or the United States. When that happens, we make sure appropriate safeguards are in place, such as a UK adequacy decision, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

7. Sessions and recordings

Video sessions take place on Google Meet. We do not record sessions unless we agree it with you beforehand. You must not record a session without our agreement.

8. How long we keep your data

• Client, booking, and transaction records: six years after the end of the tax year they relate to, as UK tax law requires.
• Applications that do not lead to a programme, and messages: up to two years after our last contact.
• Marketing list: until you unsubscribe or ask us to remove you.

9. Keeping your data secure

We use appropriate technical and organisational measures to protect your data from loss, misuse, and unauthorised access. Only people who need your data for our business can see it, and they must keep it confidential. If there is a data breach that is likely to put you at risk, we will tell you and the Information Commissioner's Office where the law requires it.

10. Cookies

We use only the cookies needed to make the website, forms, and checkout work securely. We do not use advertising or analytics cookies, so we do not ask for cookie consent. If that changes, we will update this policy and ask for your consent first.

11. Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the data we hold about you
• ask us to correct data that is wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use your data
• object to how we use your data
• ask us to transfer your data to you or another organisation
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email support@thegoodki.co. There is usually no charge, and we aim to reply within one month.

If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to this policy

We may update this policy from time to time. The latest version is always on this page.

Last updated 25 October 2026.