Privacy Policy (Política de Privacidade)

YOUR ACCEPTANCE OF THIS PRIVACY POLICY FOR CRACK THE COCOON®

Please read this Privacy Statement carefully. By browsing the Site or expressly consenting, where required under applicable privacy laws, you agree to be bound by this Privacy Statement.

General information

This privacy policy explains the nature, scope and purpose of the processing of personal data in connection with this website and related offerings. Personal data is processed only where necessary to operate the website, communicate with visitors, and provide access to professional services, content and related formats. Services and content may include professional support, educational and creative content and materials, community access, digital or physical products, live or virtual events, publications and audiovisual content. Offerings may evolve over time.Processing of personal data is carried out in accordance with the EU General Data Protection Regulation (GDPR) and applicable Portuguese legislation, including Decree-Law 7/2004 and CNPD regulations.

RESPONSIBLE BODY

The controller for the processing of your personal data and the data protection officer is
Sandra Bertalanffy, R. Cap. Mousinho d’Albuquerque, Odemira, Portugal, sandra{at}crackthecocoon.com
For any questions regarding the processing of personal data, please contact above email.

PERSONAL DATA

We process personal data of our customers, potential customers, business partners and other persons who are directly or indirectly related to our company. We process this data for the purpose of providing our business offerings. The processing is carried out in particular for the purpose of establishing contact, preparing offers, executing contracts, invoicing and customer support. Personal data may be processed when you interact with the website, submit an inquiry, book an appointment, subscribe to updates, access content, join a membership environment, purchase services or products or otherwise interact with the website. The data to be processed may include the following information:

Surname, first name, title
Contact details (address, telephone number, e-mail address)
Company-related information (company name, position, department)
Communication content
Appointment information
Payment and billing data (if relevant)
Purpose of the data processing
Account or login information for membership access
Technical usage data
and other information relevant to your request.

When visiting the website, certain technical information is processed automatically for functional and security purposes. This may include IP address, browser type, device type, pages visited, time of access, referring website and approximate geographic region.

Purpose and legal basis of processing

Personal data is processed for the purpose of operating this website and providing requested information, content, services or products. Processing may also be necessary to respond to inquiries, manage communication, organize appointments, provide access to membership areas, deliver digital or physical materials, process payments, ensure technical functionality, improve user experience and comply with legal obligations.

Processing is carried out on the basis of:

Art. 6(1)(a) GDPR — consent
Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures
Art. 6(1)(c) GDPR — compliance with legal obligations
Art. 6(1)(f) GDPR — legitimate interest in operating and improving the website

Where consent is required, it may be withdrawn at any time with future effect.

Communication and professional interaction

When contacting the controller via contact forms, email or other communication channels, the information provided is processed for the purpose of responding to the request and managing follow-up communication.
Appointment scheduling may be facilitated via an external booking tool. Information entered when booking may be processed in order to organize appointments and communication related to professional services.
Information shared within professional contexts is treated confidentially within the scope of applicable law.

For clients participating in professional support sessions, session-related information such as dates, duration, and client identifiers may also be processed for the purpose of tracking hours towards professional certification (e.g., International Coach Federation). This processing is based on explicit consent provided by the client and is used solely for certification documentation purposes. All such data is treated confidentially and stored securely in accordance with applicable data protection law.

Payments, products and membership access

Where paid services, memberships, digital content or physical products are offered, personal data may be processed in order to provide access to content, manage participation, process transactions and comply with legal obligations. Billing or transaction data may be retained where required by applicable accounting or tax regulations. Where membership areas or login-protected content are offered, account data may be processed in order to enable secure access and administration of participation.

Newsletter and content updates

Where the option to subscribe to updates is provided, the email address is processed for the purpose of sending information about content, publications or professional formats. Subscription requires consent and may be withdrawn at any time via the unsubscribe link or by contacting the controller.

Third-party services and infrastructure

In order to operate this website, deliver content and enable professional interactions, certain technical service providers may process personal data on behalf of the controller. Processing occurs only where necessary for functionality, communication, transactions, security or user experience. These providers act either as data processors under contractual agreements or as independent controllers where users interact directly with their platforms.

Website hosting, membership environment and shop (Squarespace)
This website is hosted via Squarespace Inc., which provides the technical infrastructure for website operation, content management, membership areas and online shop functionality. Squarespace may process technical usage data, account information, and transaction-related data necessary to provide secure website performance and access to content or products. Further information: https://www.squarespace.com/privacy

Scheduling and booking (Zeeg)
Appointment scheduling may be facilitated via the booking tool Zeeg. When using this function, contact details and appointment-related information may be processed in order to organize bookings and communication connected to professional services. Further information: https://zeeg.me/en/legal/privacy

Payment processing (Stripe)
Payments for services or products may be processed via Stripe Payments Europe Ltd. Stripe processes payment data necessary to complete transactions. The controller does not store full payment details. Further information: https://stripe.com/privacy

Website analytics and performance (Google Analytics)
Analytics tools may be used to better understand how visitors interact with the website and to improve functionality and user experience. Such tools may process technical usage data including IP address, browser information and pages visited. IP anonymization may be enabled where available. Further information: https://policies.google.com/privacy

Embedded video and audio content (YouTube, Vimeo)
This website may include embedded audiovisual content hosted on external platforms such as YouTube or Vimeo. When accessing such content, technical data including IP address and device information may be transmitted to the respective provider. Further information: https://www.youtube.com/privacy and https://vimeo.com/privacy

Podcast distribution platforms (Spotify, Apple Podcasts)
Audio content associated with this website may be distributed via podcast platforms such as Spotify and Apple Podcasts. When accessing podcast content via these platforms, personal data may be processed directly by the respective provider according to their privacy policies. Further information: https://www.spotify.com/privacy and https://www.apple.com/legal/privacy

Cookies and technical functionality

Cookies and similar technologies may be used to ensure reliable operation and security of the website and to understand general usage patterns. Cookies are small text files stored on the user’s device. Users may control cookie preferences via the cookie banner or browser settings. Restricting cookies may affect functionality of the website. Analytics and marketing cookies require consent, which may be withdrawn at any time via the cookie banner or browser settings.

Data sharing

Personal data is shared with service providers only where necessary to operate the website, provide requested services or content, process payments, manage bookings, host digital infrastructure or comply with legal obligations. Personal data is not sold to third parties. As the website and associated offerings develop, additional service providers may be integrated where necessary to support functionality, delivery of content, membership environments, community features or product distribution.

STORAGE DURATION OF THE DATA

We only store your personal data for as long as is necessary to fulfill the purposes for which it is processed or if this is required by law. Once the purpose no longer applies or the statutory retention periods have expired, the data will be deleted or blocked. Contractual and billing data may be retained in accordance with statutory retention obligations. Newsletter data is stored until consent is withdrawn.

Data subject rights

Under GDPR, data subjects have the right to: request access to personal data, request correction or deletion, restrict processing, object to processing, request data portability, withdraw consent at any time. Requests may be directed to above email. You also have the right to lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD) https://www.cnpd.pt

UPDATING THE PRIVACY POLICY

This Privacy Policy may be updated in order to reflect legal, technical or operational changes. The current version is available on this website.

Last modified: March 23rd, 2026