Privacy Policy

1. Data Controller

The Data Controller responsible for this website and for the processing of personal data is:

Claire Cretella
Estepona, Spain
Email: hello@clairecretella.com

2. Personal Data Collected

I may collect and process the following categories of personal data:

  • Identification and contact details: name, email address, phone number.

  • Session‑related information: information you choose to share during enquiries or sessions.

  • Session notes: stored using a coded reference system; identifying information is kept separately offline.

  • Scheduling information: if you book through Calendly (if used).

  • Payment information: processed securely by third‑party providers such as Revolut.

  • Technical data: only what is necessary for website functioning (no analytics tools are used).

3. Purpose and Legal Basis for Processing

Your personal data is processed for the following purposes:

  • Responding to enquiries (based on your consent).

  • Providing coaching or hypnotherapy services (necessary for the performance of a contract).

  • Managing payments and invoicing (legal obligation under Spanish tax law).

  • Scheduling sessions (legitimate interest in managing appointments).

  • Video sessions via Zoom (legitimate interest in providing online services).

4. Data Retention

  • Client session notes: kept for 2 years and stored using a coded reference system.

  • Financial records: retained for 5 years in accordance with Spanish tax regulations.

  • General enquiries: deleted after 12 months if no working relationship is established.

5. International Data Transfers

Because I work with clients internationally and use service providers such as Zoom, Calendly, and Revolut, personal data may be transferred outside the EU.

These transfers are protected using GDPR‑compliant safeguards, such as:

  • Standard Contractual Clauses

  • Adequacy decisions

  • Provider‑specific security measures

6. Your Rights

Under the EU General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact me at hello@clairecretella.com

7. Data Sharing

I only share personal data with service providers essential to running my business, including:

  • Zoom (video sessions)

  • Revolut (payment processing)

  • Calendly (if used for scheduling)

  • Email provider (for communication)

  • Website hosting provider

These providers process data on my behalf and follow GDPR‑compliant practices.

8. Security Measures

I take appropriate technical and organisational measures to protect your personal data, including:

  • Coded session‑note system

  • Offline storage of identifying information

  • Secure password‑protected devices

  • Encrypted communication tools where applicable

9. Cookies

This website uses only essential cookies required for basic functionality, such as security, page loading, and session management. No analytics, advertising, or tracking cookies are used. You can manage or delete cookies through your browser settings at any time.

10. Complaints

If you believe your data protection rights have been violated, you may contact the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD) www.aepd.es