Privacy Policy

    Kristine Reina and Reina Consultancy · Last Updated: March 2026

    1. Introduction

    At Reina Consultancy, we provide professional governance for the mind. Your privacy is protected by the same rigor as professional privilege. This policy outlines how we collect, use, and protect your personal data in accordance with the Gibraltar GDPR, the UK GDPR, and the EU General Data Protection Regulation (Regulation (EU) 2016/679).

    2. Data Controller

    Kristine Reina and Reina Consultancy are the Data Controller for your information.
    Contact: kristine@reina-consultancy.com
    Jurisdiction: Gibraltar

    3. The Data We Collect

    We collect only what is necessary to provide high-performance strategy and recovery services:

    • Identity Data: Full name and professional title.
    • Contact Data: Email address, secure messaging handles and phone numbers.
    • Professional Context: Industry, sector (e.g., Legal, Finance, C-Suite) and current professional challenges.
    • Special Category Data: Information regarding sleep patterns, anxiety, or substance use management. We process this data only with your explicit consent and under strict confidentiality.

    4. Lawful Basis for Processing

    We process your data under the following legal frameworks:

    • Contractual Necessity: To perform the services outlined in your consultancy agreement.
    • Legitimate Interests: To provide tailored professional strategy and improve our service delivery.
    • Explicit Consent: For the processing of "Special Category" (health-related) data during coaching or recovery sessions.

    5. Data Retention

    We do not keep data longer than necessary:

    • Inquiry Data: If we do not enter into a contract, your data is deleted after 6 months.
    • Client Records: Active client files are retained for 6 years after the conclusion of our professional relationship, then securely destroyed.

    6. Third-Party Disclosures

    We do not sell, rent or trade your data. We only share information with:

    • Professional Associates: Only if explicitly agreed upon for your "Case Briefing."
    • Legal Obligations: Only where required by Gibraltar or UK law.

    7. Your Rights

    Under GDPR, you hold the following rights:

    • The Right to Access: You may request a copy of your "case file" at any time.
    • The Right to Erasure: You may request that we delete your data (subject to legal retention requirements).
    • The Right to Data Portability: You may request your data be transferred to another professional.