Privacy Policy
Effective date: 28.02.2025
This Privacy Policy explains how Let’s Spirit collects, uses and protects your personal data when you visit letspirit.com, subscribe to emails, book a session, buy a course or digital product, or work with me 1:1. It is written to meet the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
Let’s Spirit is a small, one-woman practice. In this policy, “I”, “we” and “us” mean Let’s Spirit.
1. Who is responsible for your data
The data controller is:
Adriana Diaconescu, founder and in charge of Let’s Spirit
Copenhagen, Denmark
Email: spirit@letspirit.com
Because of the size and nature of the practice, I am not required to appoint a Data Protection Officer. You can contact me directly with any privacy question at spirit@letspirit.com.
2. What data I collect, why, on what legal basis, and for how long
| Situation | Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|---|
| You write to me (contact form or email) | Name, email, your message | To answer you | Legitimate interest in replying (Art. 6(1)(f)), or steps before a contract (Art. 6(1)(b)) | Up to 12 months after our last contact, unless you become a client |
| You sign up for my journal, newsletter, free course, masterclass or a waitlist (via MailerLite) | Name, email, sign-up date, IP address at sign-up, which emails you open or click | To send you what you asked for and related emails from Let’s Spirit | Your consent (Art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link | Until you unsubscribe. Afterwards only your email is kept on a suppression list, so you are never emailed again by mistake |
| You book a free session or a coaching session (via Calendly) | Name, email, chosen time, time zone, anything you write in the booking form | To schedule and hold the session | Steps before a contract / performance of a contract (Art. 6(1)(b)) | Free session: up to 12 months. Clients: see next row |
| You become a coaching client | Contact details; date, time and place of birth (for your astrological chart); session notes; anything you choose to share with me | To prepare and deliver your coaching | Performance of a contract (Art. 6(1)(b)). Sensitive information (see section 3) only with your explicit consent (Art. 9(2)(a)) | For the duration of our work and up to 3 years afterwards (the Danish limitation period), then deleted. You can ask for your session notes to be deleted earlier |
| You buy a course, workbook or programme | Name, email, billing country, order details, invoice data. Card details are handled by the payment provider; I never see your full card number | To deliver your purchase, invoice it and handle questions | Performance of a contract (Art. 6(1)(b)); legal obligation for bookkeeping (Art. 6(1)(c)) | Accounting records: 5 years from the end of the financial year (Danish Bookkeeping Act) |
| You comment on the blog | Name, email, comment, IP address | To publish your comment and filter spam (via Akismet) | Legitimate interest (Art. 6(1)(f)) | As long as the comment is published |
| You give a testimonial | Your words, first name and any detail you approve (e.g. age) | To share your experience on the website | Your consent (Art. 6(1)(a)) | Until you withdraw consent |
| You visit the website | IP address, browser and device data in server logs; your cookie choices | To run the website securely and to prove your cookie consent | Legitimate interest in security (Art. 6(1)(f)); legal obligation to document consent (Art. 6(1)(c)) | Server logs: as set by the host, normally a few weeks. Consent record: 12 months |
You are never obliged to give me personal data. Without an email address, however, I cannot send you emails or deliver a purchase, and without the information needed for a session, I cannot hold it.
3. Sensitive information
Coaching conversations may touch on your health, your religious or spiritual beliefs, your relationships or your sexuality. Under the GDPR these are “special categories” of data. I only record such information with your explicit consent, which I ask for in writing before our coaching begins, and you can withdraw it at any time. I never use it for marketing and never share it with anyone, except where the law requires it.
4. What I do not do
- I do not sell your personal data, and I do not “share” it for cross-context behavioural advertising.
- I do not use advertising or tracking pixels on this website.
- I do not make decisions about you by automated means or profiling.
5. Who helps me process your data
I use a small number of trusted service providers (“processors”) who handle data on my behalf and under contract:
| Provider | What for | Where |
|---|---|---|
| Hostinger International Ltd. | Website hosting and server logs | Europe (UK) |
| MailerLite (UAB MailerLite) | Email sign-ups, newsletters, course emails, digital product delivery | EU (Lithuania); some sub-processors in the USA |
| Calendly LLC | Session booking | USA |
| CookieYes Limited | Cookie consent banner and consent records | United Kingdom |
| Automattic Inc. (Akismet, Gravatar) | Spam filtering of comments; profile pictures in comments | USA |
| Google LLC (Google Fonts, YouTube) | Website fonts; videos on my YouTube channel | USA |
| Stripe Payments Europe Ltd. | Payments (when you buy directly from me) | EU (Ireland) / USA |
| Video call service | Online sessions | EU (Denmark) |
| Email service provider | Email correspondence | Europe (UK) |
If you buy through Etsy, Etsy acts as an independent controller of your purchase data under its own privacy policy. I may also share data with my accountant, and with public authorities when the law requires it.
6. Transfers outside the EU
Some providers above are located in, or use sub-processors in, the USA or the United Kingdom. Transfers to the UK rely on the EU’s adequacy decision for the UK. Transfers to the USA rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses. You can ask me for more information about these safeguards.
7. Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict processing in certain cases;
- receive your data in a portable format;
- object to processing based on legitimate interest, and at any time to direct marketing;
- withdraw your consent at any time, without affecting processing that happened before.
Please write to me directly at spirit@letspirit.com for any request, question or concern about your data. I handle every request personally, answer within one month, and may ask you to confirm your identity. There is no fee.
The law also gives you the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk), but I warmly ask you to contact me first, so I know about your concern and can put it right.
8. Children
My services are intended for adults. I do not knowingly collect personal data from anyone under 16. If you believe a child has given me data, please contact me and I will delete it.
9. Security
The website uses encrypted connections (HTTPS). Access to your data is limited to me, protected with strong passwords and two-factor authentication where available, and kept with reputable providers bound by data processing agreements. Paper notes, if any, are stored securely and shredded when no longer needed. If a breach puts your rights at risk, I will notify Datatilsynet within 72 hours and inform you without undue delay where required.
10. Cookies
Read how this website uses cookies, and change your choices at any time, in the Cookie Policy.
11. Links to other websites
This website links to other sites, such as YouTube, Calendly and Etsy. Their own privacy policies apply when you visit them.
12. Information for California residents
The categories of personal information I collect and the third parties I work with are listed in sections 2 and 5. I do not sell or share your personal information. I do not track you across other websites, so “Do Not Track” browser signals do not change how this website works, and opt-out signals such as Global Privacy Control are respected. To review or correct your information, write to me at spirit@letspirit.com. Changes to this policy are shown by the effective date at the top.
13. Changes to this policy
I may update this policy when my services or the law change. The effective date at the top shows the latest version. Significant changes are announced on the website and, if you are a subscriber or client, by email.
14. Contact
Questions about your data? Write to spirit@letspirit.com.