Privacy Policy

1. Who We Are

The data controller responsible for personal information collected through this website is:

All requests relating to your personal information — including access, correction and deletion requests — should be sent to the address above.

2. What Information We Collect

We collect personal information only where it is necessary to provide the services or respond to your enquiry. The specific information collected depends on which form or feature you use.

3. Why We Collect It — Purposes and Legal Basis

4. Sensitive Personal Information

The Discovery Intake Form and personal communications may contain information about your physical or psychological health, emotional history, personal challenges or similar matters. Under the Swiss Federal Act on Data Protection (nFADPv) and the EU General Data Protection Regulation (GDPR), this is classified as sensitive personal data and requires explicit consent before processing.

By ticking the sensitive-data consent checkbox on the form, you explicitly consent to this information being processed solely for the purposes of reviewing your intake form, preparing for your consultation and contacting you regarding the most appropriate next step. You may withdraw this consent at any time by contacting [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. Who We Share It With

We do not sell personal information. We do not share it with third parties for their own marketing purposes. We use the following service providers (processors) solely to operate the website and deliver services:

6. International Transfers

The Railway backend service is operated by Railway Corp, a company based in the United States. The server processing your data is currently hosted in the EU (Paris, France). However, Railway as a company is US-based and may process support and operational data in the United States. Switzerland and the EU maintain adequacy decisions or standard safeguards for such transfers where applicable. If you would like more information about the specific safeguards in place, please contact us.

7. How Long We Keep Your Information

We retain personal information only for as long as necessary for the purpose for which it was collected:

• Discovery Intake Form submissions — retained for the duration of any active consultation relationship and a reasonable period after its conclusion, normally not exceeding 12 months from the date of submission unless an ongoing client relationship continues.
• Audio gift requests and email contacts — retained for as long as necessary to fulfil the request and maintain reasonable communication records.
• Deletion requests — honoured within 30 days of receipt unless a legal obligation requires retention for a longer period.

8. How We Protect Your Information

Form data is transmitted over encrypted HTTPS connections. The backend service uses access controls to limit who can read submitted data. We take reasonable technical and organisational precautions to protect personal information against unauthorised access, loss or misuse. No method of electronic transmission or storage is entirely without risk, and we do not make absolute guarantees about the security of information transmitted to or through this website.

9. Your Rights

Depending on where you are located, you may have the following rights regarding your personal information:

• Right of access: Request a copy of the personal information we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete information.
• Right to erasure: Request that we delete your personal information, subject to any legal obligations to retain it.
• Right to restriction: Ask us to restrict processing of your information in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format where technically feasible.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint: You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch, or with your local supervisory authority if you are located in the EU/EEA.

To exercise any of these rights, contact [email protected]. We will respond within the timeframes required by applicable law (normally 30 days).

10. Cookies and Analytics

This website does not currently set tracking or advertising cookies. The website uses no third-party analytics platforms. Hosting infrastructure (AWS CloudFront) may log standard access information such as IP addresses and request timestamps for security and infrastructure purposes. These logs are retained by the infrastructure provider in accordance with their own data retention policies.

11. Legal Framework

This policy is prepared in accordance with the Swiss Federal Act on Data Protection (nFADPv), which came into force on 1 September 2023, and the EU General Data Protection Regulation (GDPR) where applicable to individuals located in the European Economic Area. Where there is a conflict between the two frameworks in relation to a specific individual, the more protective standard applies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent revision. Continued use of this website after a material change is published constitutes acceptance of the updated policy.

13. Contact

For any questions about this Privacy Policy, to exercise your rights, or to request deletion of your data, please contact: