Privacy Policy

Discretion is the foundation of my work. Here you will find what personal data I process about you, why, who I entrust it to and what rights you have.

1Who processes your data

I am the controller of your personal data. You can contact me with any question or request about your data using the details above. I am not required to appoint a data protection officer.

2What data I process

• Contact details: first and last name, e-mail, phone / WhatsApp.
• Data for arranging sessions: preferred format (online / in person), the date you book, your booking note, our communication via WhatsApp, e-mail or the "Message me" form on the website.
• What you tell me about yourself: your answer to "What brings you here?" and anything you share during our work together.
• Data for your Neuroarchetype map: date, place and time of birth.
• Answers in the orientation questionnaire (the "Discover your compensation mechanism" test) about how you most often react to pressure, responsibility and uncertainty.
• My working notes from the analysis and mentoring, and the outputs I prepare for you (map, written plan).
• Billing and payment details if you order a service.
• Your e-mail for sending your test result if you ask for it.
• Data for the mentoring waiting list: name, e-mail and optionally phone, if you sign up.
• Technical website visit data: IP address and browser data that must be processed to show you the website and to protect the forms against spam and abuse.
• Where you came to the website from (the referring website, a campaign label in the link, the first page you visited), if you send a form.

3Why I process it and on what legal basis

I never use the data from the Individual Analysis form, or anything you share with me during our work, for marketing.

4Sensitive data and the questionnaire

The orientation questionnaire is not a diagnosis, a psychological test or a healthcare service. Its result is a working hypothesis we explore during the analysis. Even so, you may share information about your inner experience or health in the questionnaire or in our conversation. I process such data only with your explicit consent, only for our work together and with the utmost discretion. You can withdraw your consent at any time. If you do, it may not be possible to carry out the analysis or mentoring in full.

You can take the test on the website anonymously: your answers are stored without your name or contact details. You enter your e-mail only if you ask for the result to be sent to you. If you take the test on the same device as the application, its result is attached to your application; you can remove it in the form.

No automated system makes decisions about you. The website shows you an indicative result calculated from the scores, but it is not a decision or an assessment of you as a person. I always evaluate a result attached to an application personally.

5Who I entrust your data to

I never sell your data and I do not share it with third parties without your explicit consent. If it made sense to involve another specialist, this would only happen after a separate agreement with you.

I use the following services, which process data only on my instructions:

• Cloudflare (running the katerinaluz.com website on Cloudflare Workers, storing form data in the Cloudflare D1 database located in Western Europe, protecting the forms against spam with Cloudflare Turnstile, and aggregate cookieless visit counting with Cloudflare Web Analytics),
• Resend for sending e-mails from the website (booking confirmation, test result, session reminder); e-mails are sent via a data centre in the EU,
• Telegram (Telegram Messenger): besides e-mail, notifications about applications, bookings, waiting-list sign-ups and messages sent from the website are also delivered to me in the Telegram app,
• Google (Google Calendar, where booked dates are recorded together with the booking details: name, phone, e-mail, note and payment details; also e-mail, possibly Google Meet),
• WhatsApp (Meta) for scheduling, communication and online sessions,
• another video call tool (for example Zoom or Google Meet) if we agree on it,
• accounting services, if I use them.

The katerinaluz.com website uses no analytics or marketing cookies and no advertising or tracking tools. It counts visits only in aggregate with Cloudflare Web Analytics, which uses no cookies and tracks no one. It stores in your browser only what the forms need (for example linking your test result to your application) and, until you close the tab, where you came to the website from; this is sent only together with a form you choose to send. Details are in the Cookie Policy. The protection against form abuse counts how often forms are sent from one IP address; it does not store the IP address itself, only a fingerprint of it created with a secret key (pseudonymisation).

Some of these providers (for example Google, Meta, Cloudflare, Resend) may process data outside the European Union, particularly in the USA. Such transfers are governed by the EU–US Data Privacy Framework or by standard contractual clauses approved by the European Commission.

I must also pass data to public authorities where the law requires it.

6How long I keep your data

I keep data for as long as it is needed for the purpose for which I obtained it: while we prepare and carry out our work together, and then for as long as the law requires (for example for accounting records) or as necessary to protect my legal claims. Data I process based on your consent stops being processed as soon as you withdraw your consent.

7How I protect your data

Everything we share stays in the confidential space between us. Your data is accessible to me and to the website's technical administration, which is bound by confidentiality and acts only on my instructions. The website communicates only over an encrypted connection (HTTPS). I use services with secure login and share no more data than our work requires.

8Your rights

You have the right to:

• know what data I process about you and receive a copy,
• ask for inaccurate data to be corrected,
• ask for your data to be erased if it is no longer needed or if you withdraw consent and there is no other ground for processing,
• ask for processing to be restricted,
• receive the data you gave me in a machine-readable format (portability),
• object to processing based on legitimate interest,
• withdraw your consent at any time; this does not affect processing before the withdrawal,
• lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the supervisory authority in your country.

Just write to me using the contact details in section 1. I will reply within one month at the latest.

9Who the services are for

The Individual Analysis and mentoring are intended for adults aged 18 and over. I do not knowingly process data of people under 18.

10Changes to this policy

I may update this policy from time to time. The current version is always on this page. This is a translation; the Czech version prevails.

Effective from: 29 September 2026

Related: Terms and Conditions · Cookie Policy