Privacy Policy
English | Updated 23 October 2026
1. Who we are
Inner Safety Healing is the trading name of I KI COACHING (EVINA) EVDOXIA STOUPI LTD, a company incorporated in Cyprus.
Registered address: 8 Chrysorrogiatissis, 3040 Limassol, Cyprus
Company registration number: HE387522
VAT number: CY10387522S
Website: https://innersafetyhealing.com
Privacy enquiries: evdoxia@innersafetyhealing.com
The Company is the data controller for the personal information it processes in connection with its website and coaching services.
This Privacy Policy explains how we collect, use, protect and share personal data, and the rights available to individuals under applicable data protection law, including the EU General Data Protection Regulation (GDPR).
2. Information we collect
Depending on how you interact with us, we may process:
Contact and identification information: Name, email address, telephone number, country, preferred language and information provided through contact forms or correspondence.
Booking and contractual information: Selected services, appointment dates, booking history, agreements, recorded acceptance of terms, cancellation requests and package balances.
Payment and accounting information: Amounts paid, invoices, transaction references, payment status and information required for accounting and taxation. Payment card information is ordinarily processed by the relevant payment provider rather than collected directly by us.
Coaching-related information: Goals, information you voluntarily share, correspondence and confidential session notes maintained by the Practitioner. We do not currently use intake questionnaires.
Potentially sensitive information: In the course of coaching, you may voluntarily disclose information about physical or mental health, traumatic experiences or other sensitive matters. We seek to collect only what is necessary and appropriate for the services provided.
Newsletter and resource information: Email address, language preferences, subscription status, consent records and records of requested resources.
Technical information: IP address, browser or device information, security logs, cookie preferences and website usage information, depending on the technologies enabled.
Testimonials and media: Written testimonials, photographs, audio or video recordings, where separately and appropriately authorised.
3. How we collect information
We may obtain information directly when you contact us, book a session, make a payment, complete a form, subscribe to communications, download a resource or participate in coaching. When you enter your name and email on the booking consent screen and select Save and continue, we record your details, chosen session or package, website language, consent date and time, accepted document versions and general device/browser information. We notify Evdoxia so she can respond to your enquiry even if you do not complete the later request or Calendly booking. No lead notification is sent merely because you type in a field. This does not confirm an appointment or subscribe you to marketing.
We may also receive limited booking, payment or technical information from service providers acting on our behalf.
If we receive personal information from another source, we will provide the information required by applicable law, unless an exception applies.
4. Purposes and legal bases
We process personal data only where we have an appropriate legal basis.
Purpose
Principal legal basis
Responding to enquiries and taking steps before a contract
Contractual necessity or legitimate interests, as appropriate
Arranging and providing coaching
Performance of a contract
Managing payments, invoices and packages
Contractual necessity and legal obligations
Maintaining accounting and tax records
Legal obligation
Securing and maintaining the website
Legitimate interests or legal obligation, as applicable
Sending marketing emails
Consent or another lawful basis where permitted
Providing requested resources
Steps requested by you, consent or legitimate interests, depending on the arrangement
Publishing identifiable testimonials
Separate appropriate permission and lawful basis
Establishing, exercising or defending legal claims
Legitimate interests or another applicable legal basis
Where we rely on legitimate interests, we consider the impact on individuals and their rights.
We do not treat acceptance of coaching terms as blanket consent to all processing.
5. Sensitive personal data
Coaching conversations may involve information concerning health or other special categories of personal data protected by Article 9 GDPR.
Where we need to record or otherwise process such information, we must identify both an Article 6 legal basis and an applicable Article 9 condition, which may include your explicit consent, where appropriate and valid.
We will not ask you to disclose unnecessary sensitive information. You may discuss what information is relevant and whether a particular detail needs to be recorded.
Where processing depends on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before withdrawal. Some information may still need to be retained where another legal basis or legal obligation applies.
We do not currently use intake questionnaires. Confidential coaching notes are kept in Apple Notes and synchronised through iCloud. Where explicit consent is relied upon, we request it through a separate optional consent form before recording sensitive information. The form explains the specific purpose, information concerned, storage, retention and withdrawal rights, and records your affirmative choice. Acceptance of the Coaching Agreement or a booking does not provide this consent. You can decline the form and discuss an approach that does not require recording sensitive information with Evdoxia. Do not enter health details in general booking, contact or chat fields.
Optional consent for sensitive coaching notes ↗
6. Confidentiality and access
We restrict access to personal data to those who reasonably need it to deliver services, administer the business or fulfil legal duties.
Coaching information is treated confidentially, subject to applicable legal requirements and limited circumstances in which disclosure is lawfully justified.
We do not sell personal information.
We do not publish identifiable client stories or testimonials without appropriate permission.
7. Service providers and recipients
Google Analytics 4 measures page visits and website interactions only after you allow usage statistics. We do not send names, email addresses, enquiry messages or coaching information in our analytics events. Advertising personalisation and Google signals are disabled. You can withdraw analytics consent through Cookie settings. Google Privacy Policy
We use the following services to operate this website and administer our work. Each provider receives only the information relevant to the feature you use:
Hostinger: website hosting, technical infrastructure and business email hosting.
The website provides English, French and Greek pages directly; the current website does not use WordPress or an external translation service.
Calendly: appointment scheduling for complimentary calls and paid sessions or packages. For paid bookings, the website first records your name, email and required acknowledgements, then transfers you to the relevant Calendly event. Your name and email are passed to Calendly to prefill the booking form.
The online meeting service used for your session is identified in your appointment details.
Stripe: payment processing within Calendly for paid sessions and packages. Payment card details are entered in the Calendly–Stripe payment flow, not in the website’s general contact or resource forms.
Mailchimp: newsletter subscriptions, subscription confirmation and automated welcome emails. Brevo: transactional booking-request emails, contact-form notifications and resource-request emails. Newsletter signup is a separate, optional choice.
Apple Notes and iCloud: confidential coaching session notes maintained and synchronised by the Practitioner. Business correspondence and administrative records are handled through the Company’s email and administration systems.
The custom Inner Safety Healing website assistant uses OpenAI to respond to questions. YouTube provides embedded videos. Optional chat, video and Calendly content is controlled by the website’s privacy preferences; the assistant has a separate privacy notice at https://chat.innersafetyhealing.com/privacy-policy/?lang=en.
The current assistant is the custom Inner Safety Healing assistant, not Zoho SalesIQ. Provider involvement depends on which features you choose to use. General website forms and the assistant are not intended for sensitive health information.
We assess the role of each provider and use appropriate contractual and security safeguards where required.
Personal information may also be disclosed to professional advisers, regulators or public authorities where lawfully necessary.
8. International transfers
We serve clients internationally and may use technology providers operating outside the European Economic Area.
Where a transfer of personal data to a recipient outside the EEA is subject to GDPR transfer restrictions, we will use an appropriate lawful mechanism, such as an applicable adequacy decision or approved safeguards, where required.
You may contact us for information about the relevant transfer safeguards.
9. Cookies and analytics
Our website may use strictly necessary cookies for essential functions and, where enabled, optional analytics or other technologies.
Where consent is legally required for optional cookies or tracking, those technologies will not be activated before valid consent is obtained.
Visitors must be able to manage or withdraw cookie consent through the available preference controls.
Our Cookie Policy describes the website’s current storage technologies, their purposes, providers and durations, together with the available privacy controls.
10. Marketing and free resources
If you subscribe to our newsletter, we may send updates, articles, resources and information about services in accordance with applicable marketing and privacy laws.
You can unsubscribe using the link in marketing emails or by contacting us.
Requesting a free resource does not subscribe you to the newsletter. Newsletter signup is a separate, optional choice and is handled through Mailchimp’s confirmation process.
11. How long we retain information
We keep personal data only for as long as reasonably necessary for its purpose and any applicable legal, accounting or regulatory obligations.
The following retention periods apply:
Enquiries that do not become clients: 12 months after the last contact.
Booking and contractual records: 6 years after the end of the client relationship, unless a longer period is legally required.
Financial and tax records: 10 years, subject to applicable accounting and tax requirements.
Coaching intake information and session notes: 3 years after the end of the coaching relationship, unless a longer period is legally required. We do not currently use intake questionnaires. Session notes are maintained in Apple Notes and synchronised through iCloud. At the end of the retention period, we securely delete these notes, including copies on synchronised devices and in recoverable storage where technically possible.
Newsletter information: Until withdrawal of consent or another applicable retention trigger, subject to limited suppression records
Technical logs: 30–90 days, depending on operational and security requirements.
Cookie records: According to the actual cookie durations and consent-management configuration.
Testimonials: For the authorised period, subject to applicable rights and lawful retention needs
We securely delete, anonymise or restrict data when it is no longer required.
12. Your data protection rights
Subject to applicable law, you may have the right to:
Request access to your personal data.
Request correction of inaccurate information.
Request deletion in qualifying circumstances.
Request restriction of processing.
Object to certain processing, including direct marketing.
Request data portability where applicable.
Withdraw consent where processing relies on consent.
Lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, contact evdoxia@innersafetyhealing.com. We may need to verify your identity before responding.
We normally respond within one month, subject to extensions permitted by law.
You may complain to the Office of the Commissioner for Personal Data Protection, Republic of Cyprus, or another competent supervisory authority where applicable.
13. Information security
We use appropriate organisational and technical safeguards proportionate to the nature and sensitivity of the information, including access controls, secure systems and suitable service-provider arrangements.
No online system can be guaranteed completely secure.
14. Recordings and testimonials
Coaching sessions are not recorded as a routine part of the service unless recording has been specifically agreed.
Where a recording is proposed, its purpose, access, storage and retention will be explained in advance and any required consent obtained.
Client testimonials, photographs and videos are used publicly only with appropriate authorisation.
Permission to use a testimonial is separate from consent to participate in coaching.
15. Children
The website and coaching services are primarily intended for adults aged 18 and over.
We do not intentionally solicit sensitive personal information from children through general website forms.
Any services involving minors would require a separate assessment of applicable legal requirements and appropriate safeguards.
16. Automated decisions
We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on individuals. Our website assistant provides general information and guidance but does not make decisions regarding eligibility for coaching services or other consequential matters.
If we introduce automated decision-making that produces legal or similarly significant effects, we will update this policy and provide the information required by applicable law.
17. Changes to this policy
We may update this Privacy Policy to reflect changes in our services, technology or legal obligations.
The current version and its effective date will be published on the website. Where legally required, we will provide additional notice.
18. Contact
I KI COACHING (EVINA) EVDOXIA STOUPI LTD
Trading as Inner Safety Healing
8 Chrysorrogiatissis, 3040 Limassol, Cyprus
Email: evdoxia@innersafetyhealing.com
