Privacy Policy
Last updated: 3/16/2026
Who we are (Data Controller): MICTO (“we”, “us”).
Contact: support@micto.co.uk
This policy explains what personal data we collect, why we collect it, how we use it, and the choices you have.
What we collect
- Account details: email address (used for passwordless login)
- Onboarding details: referral form answers, questionnaire responses
- Professional background data you provide: CV uploads and/or a LinkedIn profile URL you submit
- Usage data: basic technical logs (e.g., device, browser, IP address) for security and reliability
- Payments: we use Stripe to take payments; we don’t store full card details on our servers
How we use your data
- create and secure your account (including sending magic links)
- provide access to your dashboard and required onboarding steps
- allow the coach to review your intake and prepare sessions
- generate AI-assisted draft materials for coaching preparation (see “AI use” below)
- maintain the security and performance of the platform
Lawful bases (UK GDPR)
- Contract: to provide the service you request
- Legitimate interests: to keep the platform secure and improve it
- Consent: where required (e.g., marketing emails). You can withdraw consent at any time
AI use (important)
MICTO may use AI to help generate draft coaching materials (e.g., summaries and suggested session structure).
- AI output is supporting material, not a diagnosis or professional medical advice
- A human coach remains responsible for decisions and the coaching process
- We do not claim outcomes or guarantees
Who we share data with
We may share data with trusted service providers who help us run the platform, such as:
- hosting / infrastructure providers
- email delivery providers
- payment provider (Stripe)
We do not sell your personal data.
International transfers
If any of our providers process data outside the UK, we use appropriate safeguards (e.g., contractual protections) to protect your information.
Data retention
We keep data only for as long as needed to:
- deliver the service
- meet legal, tax, or operational requirements
You can request deletion (see below).
Your rights
You can request to:
- access your data
- correct it
- delete it
- object to certain processing
Contact us at: support@micto.co.uk
Security
We use reasonable technical and organisational measures to protect your information (access controls, secure storage, and encrypted connections).
Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page.
This is draft placeholder copy for Phase 1 and not legal advice.