One Xec Ltd — Website Privacy Policy & Cookie Policy
Privacy Policy
One Xec Ltd · Registered in England & Wales, company no. 11891823 · Registered office: 46 Hullbridge Road, South Woodham Ferrers, Chelmsford, Essex, CM3 5NG
Contact for privacy matters: info@onexec.com
Last updated: July 2026
One Xec Ltd (“One Xec”, “we”) provides executive coaching, team coaching and leadership assessment services. This policy explains what personal data we collect through onexec.com and in the course of our work, why, and your rights over it. We are the data controller for the data described here.
1. What we collect and why
| What | When | Why (purpose) | Lawful basis |
| Name, work email, role, organisation, and anything you write in an enquiry | You contact us by email or submit any enquiry form on this site (including the Counterpoint “Request a conversation” application and the offer-page enquiry / programme-overview forms) | To respond to and manage your enquiry | Legitimate interests (responding to business enquiries) |
| Name and email | You tick the optional “send me occasional insights” box on a form | To send occasional marketing emails about our work | Consent — withdraw any time via the unsubscribe link or info@onexec.com |
| Name, email, and meeting details | You book a call via our booking link (Microsoft Bookings) | To schedule and hold the meeting | Legitimate interests / steps prior to a contract |
| Contact and billing details, engagement records | You become a client | To deliver and administer the engagement | Contract; legal obligation (accounting records) |
| Assessment and diagnostic data (e.g. 360 feedback, psychometric and culture instruments) | You or your organisation take part in an engagement using these tools | To deliver the agreed services | Contract; consent where required by the instrument provider |
| Usage data (pages visited, approximate location, device) | You browse this site, only after you accept analytics cookies | To understand how the site is used and improve it | Consent (see Cookie Policy) |
We do not sell personal data, and we do not send marketing emails without your consent.
2. Who we share data with (processors)
We use a small number of service providers who process data on our instructions:
- Website hosting — the Stack CP hosting platform (20i Ltd infrastructure, UK data centres), managed via our web agency, Kite Web Design
- Microsoft 365 (email and the Bookings scheduling tool)
- Google Analytics (site usage statistics, via the MonsterInsights plugin) — runs only with your cookie consent
- Assessment instrument providers used within client engagements (e.g. Denison, Hogan, Insights, Bates), only for participants in those engagements
- Professional advisers and accounting/bookkeeping services, where necessary for billing and statutory records
Where a provider processes data outside the UK/EEA, we rely on UK adequacy regulations or the appropriate safeguards (IDTA / SCCs).
3. How long we keep it
| Data | Retention |
| Enquiries that don’t become engagements | 24 months, then deleted |
| Client engagement records | Duration of engagement + 6 years (legal and accounting obligations) |
| Assessment/diagnostic data | Per the engagement contract; default 12 months after engagement close unless otherwise agreed |
| Booking/meeting records | Per Microsoft 365 retention; our copies deleted with the related enquiry or engagement record |
| Analytics data | Google Analytics auto-expiry, 14 months |
4. Your rights
Under UK GDPR you can ask us to: access the data we hold about you; correct it; delete it; restrict or object to processing (including any legitimate-interests processing); and port it. Where processing rests on consent, you can withdraw that consent at any time. Write to info@onexec.com — we respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk), though we’d welcome the chance to resolve any concern first.
5. Confidentiality in coaching
Coaching and assessment work is confidential by design. Where an engagement is sponsored by an organisation, the boundaries of what is and isn’t shared with the sponsor are agreed in writing at the start and honoured throughout. Nothing on this website creates a coaching relationship or its confidentiality obligations — those arise under an engagement agreement.
6. Security
Data is held in access-controlled systems; site admin access is restricted and protected; our website runs over HTTPS. No internet transmission is completely secure, but we take proportionate technical and organisational measures to protect your data.
7. Changes
We’ll post any changes here with an updated date. Material changes affecting active clients will be communicated directly.