Privacy Policy – Mind Mastery

Effective Date: 04/08/2026

Summary

I collect only the data I need to deliver coaching, process bookings and orders, and send you things you have asked for. I never sell your data. Everything here is handled in line with GDPR.

1. Who I am

Mind Mastery is the coaching practice of Joanna Zbroniec, an independent coach based in Spain.

I am the data controller for personal information collected through this website, bookings, purchases and emails.

Contact: info@mind-mastery.com

Contact Address: MIND MASTERY, 82A James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom

2. What I collect

Website use. IP address, browser type, cookies, usage analytics.

Bookings. Name, email, session details, what you write in the booking form, Stripe transaction ID.

Courses and digital products. Name, email, order details, access logs.

Newsletter. Name, email, consent status.

Coaching sessions. Brief notes on our work together, including the goals and actions we agree. These may include information you choose to share about your health, wellbeing or personal circumstances.

3. Why I use it, and on what legal basis

Processing bookings and delivering coaching — to fulfil our contract.

Managing digital product and course purchases — to fulfil our contract.

Keeping session notes to support our work — legitimate interest, and your explicit consent where those notes include information about your health or wellbeing.

Customer support — legitimate interest.

Marketing emails — your consent.

Tax and legal obligations — legal obligation.

I do not use automated decision-making or profiling.

4. Session notes

I keep brief notes on our sessions so that our work has continuity, covering what we discussed, what you committed to, and how it went.

These notes are stored securely and are not shared with anyone. Where they include sensitive information about your health or wellbeing, I rely on your explicit consent, which you can withdraw at any time.

Notes are retained for [2 years] after our work ends, then deleted.

5. Service providers I use

  • Stripe, for payment processing

  • Cal.com, for scheduling

  • Zoom, for sessions

  • Squarespace, which hosts this website

  • My email provider, for newsletters, and only if you have opted in

  • My accountant or gestor, for tax compliance

I do not sell, rent or trade your data.

6. Newsletter and marketing

I only send marketing emails to people who have explicitly opted in. You can unsubscribe from any email, or by contacting me.

I do not use your browsing or purchase history to trigger unsolicited emails.

7. Cookies

This site uses cookies to improve your experience and understand how the site is used. Some are set by third parties, including Stripe, YouTube and analytics tools.

You can control cookies through your browser settings.

8. Storage and international transfers

Your data may be stored on secure servers in the EU or the United States, depending on the provider.

Where data is transferred outside the EU or EEA, appropriate safeguards are in place, such as Standard Contractual Clauses or another lawful transfer mechanism under GDPR.

9. How long I keep it

  • Booking and payment records: 6 years, for tax and legal compliance

  • Session notes: [2 years] after our work ends

  • Newsletter subscription: until you unsubscribe

  • Course access logs: up to 12 months after your last login

  • Website analytics: anonymised or aggregated

You can ask me to delete your data at any time, subject to what I am legally required to keep.

10. Your rights

Under GDPR you have the right to:

  • Access the data I hold about you

  • Ask for it to be corrected or deleted

  • Withdraw consent at any time

  • Object to certain processing

  • Ask for your data in a portable format

  • Complain to a data protection authority

You can complain to the data protection authority in your country of residence.

To exercise any of these, email me at info@mind-mastery.com