Privacy Policy
Effective Date: 10/10/2026
Agata Szucka (“we”, “us”, “our”) operates https://lostinweeds.com and provides online coaching services, digital programmes, and related resources. We process personal data transparently and in accordance with the EU General Data Protection Regulation (GDPR), the Polish Act on the Protection of Personal Data, and the Polish Electronic Communications Law (Prawo Komunikacji Elektronicznej, “PKE”).[eur-lex.europa][linklaters]
Data controller
The controller of your personal data is:
- Business/controller name: Agata Szucka
- Form of business: Natural person / Individual (Osoba fizyczna)
- Contact address: ul. Jastrzebia 16, 33-380 Krynica-Zdroj, Poland
- Contact email: agata@lostinweeds.com
We are not required to appoint a Data Protection Officer. If this changes, we will update this Policy.
Personal data we collect
We collect the following categories of personal data:
- Identity and contact data: name, email address, phone number, billing/mailing address.
- Coaching and intake data: information you voluntarily provide in intake forms, goal-setting questionnaires, session-preparation documents, and coaching communications.
- Health and wellbeing data: optional information about health, medical history, stress, lifestyle, or wellbeing that you choose to share.
- Financial and transaction data: billing details, transaction history, and invoice records. We do not store full payment-card numbers; payments are processed by Stripe, PayPal, or another payment provider.
- Technical and usage data: IP address, browser and device information, operating system, pages visited, and interaction data collected through cookies and similar technologies.
- Marketing and communication data: communication history and your preferences for newsletters or promotional messages.
Why we process your data
| Purpose | Data | Legal basis |
|---|---|---|
| Providing coaching services, onboarding, scheduling, sessions, and client communication | Identity, contact, coaching and intake data | Performance of a contract, Art. 6(1)(b) GDPR |
| Processing optional health, wellbeing, stress, lifestyle, or medical information | Special-category data | Explicit consent, Art. 9(2)(a) GDPR |
| Payments, invoicing, subscriptions, and accounting | Identity, contact, financial and transaction data | Contract performance, Art. 6(1)(b) GDPR, and legal obligation, Art. 6(1)(c) GDPR |
| Marketing emails, SMS, or other electronic commercial communications | Identity, contact and marketing data | Consent, Art. 6(1)(a) GDPR, and PKE |
| Website security, fraud prevention, and reliable operation | Technical and usage data | Legitimate interests, Art. 6(1)(f) GDPR: secure and reliable operation of the website |
| Analytics and marketing cookies or tracking technologies | Technical and usage data | Consent, Art. 6(1)(a) GDPR and PKE |
| Retaining accounting and tax records | Identity and transaction data | Legal obligation, Art. 6(1)(c) GDPR |
Where processing relies on legitimate interests, we have balanced those interests against your rights and freedoms. You may object to processing based on legitimate interests, as described below.
Whether you must provide data
You must provide identity and contact details to purchase coaching services, schedule sessions, receive invoices, and communicate with us. Without this information, we may be unable to provide the service.
Providing optional health, wellbeing, stress, lifestyle, or medical information is voluntary. If you do not provide it, we can still provide coaching, but we may be unable to tailor the programme to your individual needs. This disclosure reflects GDPR Article 13’s requirement to explain whether providing data is contractual or voluntary and the consequences of not providing it.[eur-lex.europa][gdpr-info]
Health and wellbeing information
If you choose to provide information about your health, medical history, stress, lifestyle, or wellbeing, we process it only with your explicit consent, to design and deliver a safe and personalised coaching service.
Consent is requested separately through a clear opt-in and is never bundled with acceptance of terms, purchase conditions, or other consent. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal. Consent must be freely given, specific, informed, and based on affirmative action; pre-ticked boxes are not valid.[linklaters]
Marketing communications
We send marketing emails, SMS messages, or other electronic commercial communications only with your prior consent. Consent is requested separately for each communication channel and may be withdrawn at any time by using the unsubscribe link, replying STOP where applicable, or contacting us at [Insert Contact Email].
Recipients of your data
We share personal data only with service providers that process data on our behalf under data-processing agreements. We currently use:
- Scheduling and video calls: [Insert actual tools, e.g. Calendly, Zoom]
- Payments: [Insert actual payment provider(s), e.g. Stripe, PayPal]
- Email and CRM: [Insert actual platform, e.g. Mailchimp]
- Hosting, storage, and productivity tools: [Insert actual providers, e.g. Google Workspace]
- Analytics and advertising: [Insert actual tools, e.g. Google Analytics, Meta Pixel]
These providers may change. An up-to-date list of processors is available on request at agata@lostinweeds.com
International data transfers
Where personal data is transferred outside the European Economic Area, including to service providers hosted in the United States, we rely on appropriate safeguards under Chapter V GDPR. These may include participation in the EU–U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses, together with supplementary measures where necessary.
Confidentiality of coaching information
We treat information shared during coaching sessions as confidential. Session notes, personal reflections, and goals are not sold, published, or shared without your explicit written permission, except where disclosure is required by law.
Retention
- Coaching and client records: retained for up to six years after the end of the coaching relationship, or for the period necessary to establish, exercise, or defend legal claims, unless a shorter period is sufficient.
- Financial and tax records: retained for five years from the end of the calendar year in which the tax payment deadline fell, in line with Polish tax and accounting rules.
- Marketing data: retained until you withdraw consent or opt out.
- Cookie data: retained according to the periods stated in our Cookie Policy.
Your rights
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Request erasure where no legal exception applies.
- Restrict processing.
- Receive a portable, structured, commonly used, machine-readable copy of data you provided to us, where technically feasible.
- Object to processing based on legitimate interests or direct marketing.
- Withdraw consent at any time.
- Lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, https://uodo.gov.pl.
To exercise any right, contact agata@lostinweeds.com We may request information to verify your identity.
Automated decision-making
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
Cookies
Our website uses cookies and similar technologies. Strictly necessary cookies are used only where permitted by PKE; analytics, preference, and marketing cookies are used only after you give prior consent through our cookie banner. You can change or withdraw your preferences at any time through [Insert Cookie Settings Link].[etnika.com][edlaw.eduverse]
Security
We apply appropriate technical and organizational measures, including SSL/TLS encryption, access controls, password protection, and two-factor authentication where available, to protect personal data against unauthorized access, loss, alteration, or disclosure.
Changes to this policy
We may update this Policy to reflect legal, technical, or operational changes. The current version is always available on this page, together with its effective date.
Contact
Email: agata@lostinweeds.com Address: Jastrzebia 16, 33-380 Krynica-Zdroj, Poland