Privacy Policy
1. Introduction
This Privacy Policy describes how Patrick B. Hypnosis ("we", "our", "us") collects, uses, and protects your personal data when you visit our website, contact us, or use our coaching services. We follow the principles of the General Data Protection Regulation (GDPR) and applicable local privacy laws.
Data Controller:
Patrick B. Hypnosis
Add your business address in your settings to display it here.
support@example.com
2. Information We Collect
Information you give us directly
- Name, email address, and contact details when you sign up, book a session, or contact us through a form on this website.
- Information you share during coaching sessions, in messages, in onboarding questionnaires, and through any documents you submit.
- Payment details, processed by our payment providers — we receive only the last four digits of your card and a transaction reference.
Information collected automatically
- Device and browser information, IP address, and rough geographic location.
- Usage patterns within the platform — pages visited, features used, content viewed.
- Cookies and similar technologies. Where required, we ask for your consent before placing non-essential cookies.
3. How We Use Your Information
We process your data on the following legal bases under Article 6 of the GDPR:
- Contract — to provide the coaching services you have requested, including session scheduling, programs, and ongoing communication.
- Consent — to send marketing emails, run optional analytics, and other activities you have specifically opted into. You can withdraw consent at any time.
- Legitimate interests — to keep the service secure, prevent fraud, improve features, and respond to support requests.
- Legal obligation — to comply with tax, accounting, and other applicable laws.
4. Health and Other Special-category Information
This service is intended for non-clinical coaching and wellness workflows. Unless we specifically request limited health or other special-category information for a stated lawful purpose, please do not share it through the service. Where we request such information, we will identify the purpose, applicable Article 9 condition, recipients, retention, and your rights.
Coachful is not a clinical or electronic health-record system. Do not use it to provide:
- formal patient or electronic health records
- diagnoses, clinical assessments, and psychotherapy or treatment notes
- medication, prescription, laboratory, genetic, or clinical test records
- health-insurance, reimbursement, or medical billing records
- crisis, self-harm, safeguarding, or emergency-response records
Do not place special-category or confidential clinical information in AI, broadcast email, WhatsApp, advertising, public/community, or connected-integration features. Coachful is not monitored as an emergency channel. Contact your local emergency service or designated clinical provider when urgent help is required.
The organization owner may enable Coachful's optional Sensitive Data Mode. It is off by default and, when enabled, restricts AI access to client records while leaving general creation and business AI available. This control does not make prohibited clinical use permissible.
5. Service providers and other recipients
Patrick B. Hypnosis relies on Coachful and the providers below to operate the coaching service. Optional providers receive data only when the relevant feature is enabled or invoked. Some payment, communications, and integration providers may act as independent controllers for limited activities required by law or their regulated networks.
| Sub-processor | Purpose | Location |
|---|---|---|
| Coachful (Influencee Agency OÜ) | Platform infrastructure, hosting, support tooling | Estonia / EU |
| Google Cloud and Firebase (applicable Google contracting entity) | Authentication, database, file storage, and supporting cloud infrastructure | EEA / USA / global infrastructure |
| Vercel, Inc. | Application hosting, serverless processing, and edge delivery | USA / global edge network |
| Stream.io, Inc. | Private chat, activity feeds, and video infrastructure | Selected hosting region / USA |
| BunnyWay d.o.o. (bunny.net) | File, image, audio, and video storage and content delivery | Slovenia / EEA / global CDN |
| Plus Five Five, Inc. (Resend) | Transactional and broadcast email delivery | USA |
| Twilio Inc. and applicable Twilio affiliate (optional) | Optional SMS and WhatsApp messaging, delivery, and opt-out processing | EEA / USA / global telecommunications network |
| Groq, Inc. (optional) | Optional AI speech-to-text transcription for uploaded or recorded coaching calls | USA / sub-processor locations |
| Anthropic PBC (optional) | Optional AI assistant, analysis, and content-generation features | USA |
| Google LLC (Gemini Developer API) (optional) | Optional AI image generation for marketing assets and content | USA / global infrastructure |
| Functional Software, Inc. (Sentry) | Error monitoring and application diagnostics | USA |
| Stripe Payments Europe, Limited and Stripe affiliates | Platform billing, connected payments, payouts, fraud prevention, and regulatory compliance | Ireland / USA / global payment network |
| Razorpay Software Private Limited (optional) | Optional payment processing for supported Indian-market transactions | India |
| Meta Platforms Ireland Limited and applicable Meta affiliate (optional) | Optional Instagram automations, advertising tools, and underlying WhatsApp network services | Ireland / USA / global infrastructure |
6. International Data Transfers
Some providers process data outside the European Economic Area. Depending on the recipient and activity, the safeguard may be an adequacy decision, the EU–U.S. Data Privacy Framework for a participating recipient, or provider data-processing terms incorporating the European Commission's 2021 Standard Contractual Clauses, together with supplementary measures where required.
7. Your Rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data ("right to be forgotten")
- Request a portable copy of your data
- Restrict or object to certain processing
- Withdraw consent at any time, where consent is the basis for processing
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email us at support@example.com. We respond to verified requests within 30 days.
8. Cookies and Tracking
This website uses cookies and similar technologies for essential functions (such as remembering your sign-in) and, where you consent, for analytics and marketing performance. You can change your cookie preferences at any time through your browser settings.
9. Data Retention
We keep your personal data for as long as your coaching engagement is active and for a reasonable period afterwards to support follow-up, recurring sessions, and tax record-keeping obligations. Marketing data is deleted when you unsubscribe. You can ask us to delete your data sooner — see Section 7.
10. Children's Privacy
This service is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page, and we will notify clients of significant changes by email.
12. Contact
For questions about this Privacy Policy or how your data is handled, contact us at support@example.com.