Privacy Policy

This policy explains the website questionnaire, free-audio requests, optional resource emails, booking enquiries and private client records. You can use the free audio without agreeing to resource emails.

1. Who is responsible for your data

Signe Putna is the controller for the personal data handled for Signe Coach. Contact the email above for privacy questions or requests.

2. The questionnaire

Your selected goals, support preferences, timing and financial-readiness answers are used in the current browser page to suggest a starting point. The questionnaire does not send these answers to Signe or a mailing list, and does not save them in browser local storage. Closing the questionnaire clears its answers.

The suggestion uses your preferred support, timeframe, available time and comfortable investment. It does not infer a diagnosis or change prices based on income. It has no binding legal or similarly significant effect; suitability and any paid service are agreed with Signe, not decided automatically.

3. Free audio and optional emails

When you request the audio, your email address is sent to the site's server function and stored in Brevo to record and fulfil your request. This is processed to provide the resource you requested and administer that request. The audio link appears on screen after successful submission; this form does not promise an email delivery.

The resources checkbox is optional and initially unchecked. If you select it, your email is added to the useful-resources mailing list on the basis of your consent. The system records the wording/version, date and time, and source of that consent. Declining it does not prevent audio access. An audio-only request does not change an existing subscriber's preferences.

You can withdraw marketing consent at any time through an unsubscribe link in a resource email or by emailing Signe. Withdrawal does not affect the lawfulness of earlier consent-based processing. A minimal suppression record may be retained to honour your choice. The form does not enrol you in the older session-follow-up sequence.

4. Enquiries, bookings and private work

When you email or book a call, Signe receives the contact details, appointment information and messages you provide. These are used to respond, assess suitability at your request, arrange services and perform an agreed contract. Please avoid medical histories in general booking fields or marketing forms.

Private intake forms and session notes may contain goals, relevant history, contact details and, where necessary, health-related or other sensitive information. These records are kept separately in Apple iCloud and private folders used for client work. They are not repurposed for marketing.

For special-category information, an appropriate additional GDPR condition is required, normally your separate explicit consent for relevant private intake and session records. General acceptance of website terms or marketing opt-in is not that consent. Any legally necessary safeguarding or legal-claims processing uses the applicable separate legal ground. You will be told what is needed before private intake; declining necessary information may limit whether a service can safely be provided.

Invoices, payments and administrative records are processed to perform the contract and meet applicable legal obligations. If a payment or communication provider is used for your booking, its role and relevant privacy information are provided as part of those arrangements. This website does not itself collect card details.

5. Technical data and cookies

Cloudflare hosts and delivers the website and runs the audio-request function. Requests necessarily involve technical information such as IP address, browser/request metadata and security logs. Hosting, fault diagnosis and abuse prevention serve the legitimate interests of providing a secure, functioning website.

The current site does not install advertising pixels or optional analytics cookies and does not use local storage for quiz answers. Fonts and site scripts are served from this website. The Pinterest domain-verification meta tag is a verification marker, not a Pinterest advertising pixel. Hosting or security services may use strictly necessary technical mechanisms where needed.

Calendly and Google Drive open only when you follow their links; they are not embedded in the initial page. Those services may apply their own cookies and privacy terms after you leave this site. If optional tracking is introduced, the relevant notice and consent choices must be updated before it is enabled.

6. Who receives information

• Cloudflare: website delivery, server functions and security.
• Brevo: email-request records, subscription preferences and consent evidence; resource-email distribution when used.
• Calendly: appointment booking details you submit.
• Google: Drive audio access and email correspondence through the published Gmail address.
• Apple iCloud: storage used for private client documents; private folders may also hold working copies.
• Professional advisers, competent authorities or safeguarding recipients: only where necessary for an applicable legal obligation, lawful claim or proportionate safeguarding purpose.

Personal data is not sold. Service providers process information according to their roles and applicable terms; some also act as independent controllers for their own accounts or security purposes. Private session information is not a testimonial or case study: any identifiable publication needs a separate, specific permission.

7. International processing

These providers operate internationally, so information may be processed outside Portugal or the European Economic Area. Transfers must use an applicable GDPR mechanism, such as an adequacy decision covering the recipient or appropriate contractual safeguards, rather than assuming that every provider keeps every record in Europe.

You may ask Signe for information about the providers and safeguards relevant to your data. Provider information is available from Cloudflare, Brevo, Calendly, Google and Apple.

8. How long information is kept

Retention depends on the purpose and applicable requirements, not a single lifetime period:

• Questionnaire selections exist only in the page session and are cleared when the questionnaire closes.
• Audio-request and enquiry records are retained only while needed to administer the request, resolve follow-up questions or a relevant dispute; they are not an indefinite licence to market to you.
• Resource subscriptions continue until you unsubscribe or the list is closed or reviewed as no longer needed. Consent evidence and minimal suppression information may remain where needed to demonstrate consent or honour an opt-out.
• Private intake and session records are retained for the service and any applicable professional-insurance, legal-claims or statutory period. The relevant period or criteria are explained during private onboarding.
• Invoices and legally required records follow applicable Portuguese accounting/tax retention requirements. Hosting/security records follow the relevant provider's operational retention arrangements.

When information is no longer required it should be deleted or anonymised, subject to lawful retention and backup cycles. Ask Signe for the retention position applying to your own records. A deletion request does not necessarily require deletion of a record that must lawfully be kept, but the reason must be explained.

9. Your rights

Subject to the conditions in data-protection law, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests and object to direct marketing at any time. You can withdraw consent without affecting processing that was lawful before withdrawal.

Send a request to signecoach@gmail.com. Only proportionate information needed to verify identity should be requested. Requests are normally answered within one month; if a lawful extension is needed because of complexity or number of requests, you will be informed within that first month.

You can complain to Portugal's Comissão Nacional de Proteção de Dados (CNPD), or the competent supervisory authority where you live or work. You do not have to contact Signe first to exercise that right.

10. Security, children and updates

Reasonable access controls and account protections are used to limit access to personal information. No online transmission or storage system can be guaranteed completely secure. Please do not send sensitive client information through public social-media comments.

The services and signup form are intended for adults aged 18 or over. If a child's information has been submitted in error, contact Signe so it can be reviewed and appropriately removed.

This notice is updated when the way the site or services handle data changes. The date above identifies the current version. Material changes affecting existing permissions require appropriate notice or fresh consent where necessary.