Privacy Policy

1. DEFINITIONS

The capitalized terms refer to the following definitions:

 

The “Company” or “we” refers to My Loving Mind LLC, Limited Liability Company, registered in Michigan, United States, Business Registration: 802611982, with registered office at 8834 E 34 RD 131 — SMB 23069, Cadillac, MI 49601, USA.

The “Site” refers to the website accessible at https://mylovingmind.com and its French version https://mylovingmind.com/fr/

“You” refers to any person affected by the processing operations carried out on the Site (visitors, prospects, clients).

A “Data” corresponds to any information relating to an identified or identifiable natural person.

A “Processing” corresponds to any operation applied to Data (collection, recording, organization, storage, communication, deletion…).

A “Controller” is the entity that, alone or jointly with others, determines the purposes and means of processing, and a “Processor” is an entity that processes Data on behalf of the Controller. On the Site, unless otherwise stated, we are the Data Controller.

“Regulation” refers to the laws and regulations applicable to personal data processing, including:

• For residents of the European Union: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data (GDPR), French Law No. 78-17 of 6 January 1978 relating to data processing, files and freedoms;
• For residents of the United States: Applicable laws regarding the protection of personal data, including in particular the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the laws of the State of Michigan and other applicable States;
• The applicable rules regarding commercial prospecting and more generally the laws and regulations applicable to Data Processing that we carry out.

2. WEBSITE PRESENTATION AND COMMERCIAL PROSPECTING

The Site presents the activities of our Company and various forms (contact, newsletter subscription, etc.). By completing the forms and communicating with us via the Site, you transmit to us the following information:

2.1 – Data Collected

When you browse the Site or use my contact forms, I collect:

• Identity data: Title, last name, first name
• Contact data: Email address, postal address, phone number
• Correspondence: Nature and content of your requests to customer service

2.2 – Purposes

This data is processed to:

• Present my services (hypnosis, coaching, MP3s)
• Manage your requests and my exchanges with you
• Manage the relationship with prospects
• Commercial prospecting and sending information (with your consent)
• Organization of promotional operations where applicable

2.3 – Legal Basis

Legitimate interest: Management of prospect relationships and contract preparation Consent: Commercial prospecting by email (newsletter)

2.4 – Retention Period

Prospecting data: 3 years from the last active contact After this period: Permanent deletion

3. GEOLOCATION ACTIVATION AND REGIONAL ADAPTATION

3.1 – Automatic Time Zone Detection

When you use our Amelia online booking system, it automatically detects your time zone in order to offer you appointment slots adapted to your location.

This feature uses geolocation information provided by your internet browser (with your consent).

3.2 – Data Collected

For this purpose, the following data may be processed:

• IP address (automatically provided by your browser)
• Approximate location information (country, city)
• Detected time zone

3.3 – Local Currency Display

The Site may also display prices in the currency corresponding to your location to facilitate your understanding of rates.

This feature is purely informative and payment is always made in USD (US dollar).

3.4 – Legal Basis and Consent

The legal basis for this processing is:

Your consent: When your browser asks you for permission to access your location Legitimate interest: Facilitate appointment booking by displaying times in your time zone

3.5 – Managing Your Preferences

You can at any time:

• Block geolocation in your browser settings
• Refuse access to your location when the browser asks you
• Manually select your time zone when booking

Note: If you block geolocation, you will need to manually select your time zone when booking sessions.

3.6 – Data Retention

Geolocation information is NOT retained. It is only used in real-time to display adapted time slots.

4. ONLINE SALES

4.1 – Data Collected

When you place an order on the Site (hypnosis/coaching sessions or MP3s), I collect:

Mandatory data:

• Last name, first name, email
• Complete billing address (street, city, postal code, country)
• Phone number

Transaction data:

• Order details (service purchased, date, amount)
• Payment information (processed securely by Stripe – see Article 13)
• Exchanges relating to your order

4.2 – Purposes

This data is necessary to:

• Process your order and provide you with the purchased service
• Send you the order confirmation and invoice
• Manage the follow-up of your order and after-sales service
• Comply with my accounting and tax obligations
• Prevent and fight against payment fraud

4.3 – Legal Basis

Contract performance: This data is essential to provide you with the purchased service Legal obligations: Retention of invoices and accounting data (10 years)

4.4 – Secure Payment

All transactions are secured by Stripe (PCI-DSS certified payment processor).

I NEVER store your complete bank details on my servers. Stripe manages the entire payment process securely.

 

4.5 – Retention Period

Type of Data	Retention Period
Data processed for commercial prospecting purposes	3 years from the last active behavior of the prospect or from the collection of Data
Data necessary for processing your order and managing contractual and commercial relationships	3 years from the last active behavior of the client or, failing that, from the end of the contractual relationship. For accounting documents (purchase orders, delivery notes, customer invoices): 10 years from the end of the fiscal year
Order contracts for amounts less than $120.00	5 years from the conclusion of the contract
Order contracts for amounts greater than $120.00	10 years from the date of delivery or service provision
Bank details: for one-time payment	13 months for immediate debit payment cards and 15 months for deferred debit payment cards from the debit date (for the purpose of responding to any dispute)

 

5. CUSTOMER ACCOUNT CREATION

5.1 – Optional Nature

Creating a customer account is OPTIONAL to make a purchase on the Site. You can purchase as a guest via WooCommerce without creating an account.

5.2 – Account Benefits

If you create an account, you will be able to:

• View your order history
• Manage your personal information
• Access your downloaded MP3s more quickly
• Manage your session appointments

5.3 – Data Collected

If you create an account, the following information will be processed:

Identity and contact data (already provided during the order)

Account login data: username (your email), encrypted password

Note: Your password may be automatically saved by your browser if you consent via your browser settings (I do not control this feature).

Account access and usage data:

• Login IP address
• Login time and date
• Connection duration
• Pages viewed from your account

5.4 – Purposes

This data is processed to:

• Manage authentication and security of your account
• Allow you to access your orders and services
• Manage lost password procedures
• Prevent unauthorized access to your account

5.5 – Commercial Prospecting (with consent)

The identity and contact data from your account will be used with your consent to inform you about my new services and offers.

You can unsubscribe at any time via the unsubscribe link present in each email.

5.6 – Retention Period

Account data is retained:

• For the entire duration of your account’s activity
• Then 3 years after your last login
• Permanent deletion thereafter (except legal obligations for accounting retention)

6. INDIVIDUAL SESSIONS

6. INDIVIDUAL HYPNOSIS AND COACHING SESSIONS

6.1 – Session Organization

I offer individual hypnosis and coaching sessions, conducted remotely via Google Meet.

To organize these sessions, I collect and process:

• Last name, first name, email, phone number
• Information about booked, cancelled, modified slots
• Session notes (taken during or after the session to ensure follow-up of your coaching)
• Information necessary for personalization of the coaching

6.2 – Total Confidentiality – No Recording

IMPORTANT: Individual sessions are NEVER recorded.

Your exchanges during individual sessions remain strictly confidential and are not subject to any video or audio recording.

Only session notes may be taken in writing during or after the session to ensure follow-up of your coaching.

These notes are stored securely in Notion or Google Workspace (access protected by password + two-factor authentication).

6.3 – Retention Period

Session notes: Retained for 5 years after the end of coaching, then permanent deletion.

ARTICLE 6bis – WORKSHOPS AND GROUP SESSIONS (SOLD ON THE SITE)

6bis.1 – Presentation

I offer online workshops and group sessions (webinars, masterclasses, practice groups) accessible via my Site.

These workshops take place live via Google Meet and gather several participants.

6bis.2 – Recording of Group Workshops

Clear information: Group workshops sold on my Site are recorded (video + audio) to allow participants to watch them as replays.

You are informed:

• From the workshop sales page (product description)
• By confirmation email after your purchase
• At the beginning of the workshop (oral reminder)

6bis.3 – Replay Access

Sending: The replay is sent to you by email within 48 hours following the workshop.

Storage: Google Drive (Google Workspace with signed Data Processing Agreement)

Access: Private link accessible only to workshop participants

6bis.4 – Image and Voice Rights – Confidentiality

COMMITMENT: Recordings of group workshops remain strictly private and are reserved for participants.

I commit to:

• NEVER publish workshop excerpts on social media, my website, or any public medium (except anonymized testimonials with express consent)
• NOT use your image or voice for promotional purposes without your prior written authorization
• Limit replay access to workshop participants only
• Secure replay links (protected Google Drive)

Your options: If you do not wish to appear in the recording:

• Turn off your camera (only your first name and voice will appear if you speak)
• Do not ask questions orally (use written chat)
• Contact me after the workshop to request blurring of your image in the replay

6bis.5 – Replay Retention Period

Retention: Video recordings are retained for 1 year after sending the replay to participants, then permanently deleted.

You can download the replay during this one-year period to keep it personally.

7. NEWSLETTER AND MARKETING COMMUNICATIONS

7.1 – Subscription

You can voluntarily subscribe to my newsletter by providing your email address on the Site.

Legal basis: Your consent (checkbox during subscription)

The newsletter allows you to receive:

• Information about my new services
• Tips and advice on hypnosis and personal development
• Promotional offers
• Invitations to events or workshops

7.2 – Managed by MailerLite

The newsletter is managed via MailerLite (see Article 13 – Subcontractors).

7.3 – Unsubscribe

You can unsubscribe at any time by clicking on the unsubscribe link present at the bottom of each email.

Your unsubscription is processed immediately.

7.4 – Appointment Reminders (not prospecting)

Important: I may also send you emails and SMS to remind you of your booked session appointments.

These communications are NOT commercial prospecting, but reminders related to the execution of your order. You cannot unsubscribe from these reminders (they are necessary for the proper provision of the service).

7.5 – Retention Period

Prospecting data: 3 years from the last active contact (email opening, click, etc.) or from your unsubscription.

ARTICLE 8 – “COUP DE BOOST” PROGRAM (PARTNERSHIP)

8.1 – Program Presentation

The “Coup de Boost” program is an individual and group coaching program organized in partnership with Stéphanie Smadja from Challenge ton job (https://challengetonjob.com/).

As part of this program, I provide:

• 1 individual coaching session per participant
• 2 group workshops

8.2 – Recording of Coup de Boost Workshops

Principle: Group workshops of the Coup de Boost program are normally NOT recorded.

Rare exception: If a participant really cannot attend live, a recording may exceptionally be made and shared with all participants).

8.3 – Data Sharing with Partner

Transparency: To effectively support you, Stéphanie Smadja transmits to me the following data concerning you:

• Last name and first name
• Email address
• Phone number
• Notes from previous sessions with Stéphanie (to have context and some information about your journey)

8.4 – Legal Basis

Contract performance: This data sharing is necessary to provide you with the “Coup de Boost” service you subscribed to.

You are informed of this data sharing at the time of your registration for the “Coup de Boost” program.

8.5 – Use and Retention

I use this data only to:

• Prepare your individual sessions
• Personalize my coaching
• Organize group workshops

Retention: This data is retained for 5 years after the end of the program, then permanently deleted.

8.6 – Confidentiality

I commit to:

• Process your data confidentially
• NOT share it with other third parties (except technical subcontractors like Google Workspace)
• NOT use it for purposes other than the “Coup de Boost” program

9. SOCIAL MEDIA AND THIRD-PARTY SITES

9.1 – My Professional Pages

I am present on the following social media:

• Facebook
• Instagram
• LinkedIn

If you interact with my pages (comments, private messages, mentions), your data is processed in accordance with the privacy policies of these platforms.

9.2 – Public Information

Information you publish publicly on social media (comments, reviews, mentions) is accessible to everyone and may be viewed by my teams to answer your questions or improve my services.

9.3 – No Interconnection

My Site is NOT connected to social media. You cannot create an account on my Site using your Facebook/Google account.

10. AFFILIATE LINKS

Currently, I do NOT use affiliate links on my Site.

If in the future I use affiliate links:

• The Site may contain affiliate links to third-party products/services
• If you purchase through these links, I will receive a commission
• Affiliate links are clearly identified
• Some programs use tracking cookies

11. YOUR RIGHTS OVER YOUR DATA

In accordance with applicable Regulation (GDPR for European residents, CCPA for California residents, other laws depending on your location), you have the following rights:

11.1 – Right of Access

You can request a copy of all personal data I hold about you.

11.2 – Right to Rectification

You can request the correction of your personal data if it is inaccurate or incomplete.

11.3 – Right to Erasure

You can request the deletion of your personal data, unless I must retain it to comply with a legal obligation (e.g., invoices to be retained for 10 years).

11.4 – Right to Withdraw Your Consent

If processing is based on your consent (e.g., newsletter), you can withdraw it at any time.

For the newsletter: Click on the unsubscribe link in each email.

11.5 – Right to Restriction

You can request the restriction of processing of your data in certain cases (e.g., while verifying the accuracy of your contested data).

11.6 – Right to Portability

You can request to receive your data in a structured, machine-readable format, or request their direct transfer to another data controller.

11.7 – Right to Object

You can object to the processing of your data when it is based on my legitimate interest.

11.8 – Right to Define the Fate of Your Data After Your Death

You can define directives concerning the fate of your data after your death.

11.9 – How to Exercise Your Rights

To exercise any of these rights, contact me:

By email: marie@mylovingmind.com By mail: My Loving Mind LLC, 8834 E 34 RD 131 – SMB 23069, Cadillac, MI 49601, USA

I will respond to you within a maximum of 30 days.

I may ask you for proof of identity to verify your identity and protect your data.

11.10 – Right to Lodge a Complaint

If you believe your rights are not being respected, you can lodge a complaint with the competent supervisory authority:

• For European residents: CNIL (France) or the authority of your country
• For California residents: California Attorney General
• For Michigan residents: Michigan Attorney General

12. DATA RETENTION PERIODS

Personal data is retained only for the period necessary for the purposes for which it was collected.

 

12.1 – Summary Table

Type of Data	Retention Period
Prospecting data (prospects)	3 years after last active contact
Order data (clients)	3 years after last order
Invoices and accounting documents	10 years (legal obligation)
Contracts < 120 USD	5 years after conclusion
Contracts > 120 USD	10 years after service delivery
Session notes	5 years after end of coaching
Video recordings (replays)	1 year after sending, then deletion
Customer account (inactive)	3 years after last login
Coup de Boost program	5 years after end of program

 

12.2 – Archiving and Deletion

Intermediate archiving: Some data may be archived to comply with legal obligations (e.g., retaining invoices for 10 years) or to prove rights in case of disputes (statute of limitations periods).

Permanent deletion: After the periods listed above, your data is permanently and securely deleted.

 

13. DATA RECIPIENTS

13.1 – Confidentiality Principle

Your personal data is processed in a strictly confidential manner.

It is only accessible to authorized persons within My Loving Mind LLC and to the technical subcontractors necessary for the operation of the Site and the provision of services.

13.2 – Business Partner

Stéphanie Smadja / Challenge ton job (https://challengetonjob.com/): As part of the “Coup de Boost” program only, your data (last name, first name, email, phone, session notes) is shared in accordance with Article 8.

13.3 – Technical Subcontractors

I use the following subcontractors, all subject to data protection agreements (DPA):

1. SiteGround Purpose: Website hosting (WordPress, Amelia, WooCommerce) Location: USA (DPA in place)

https://www.siteground.com/privacy

2. Notion Labs Inc. Purpose: Storage of client session notes Location: USA (GDPR compliant)

https://www.notion.com/trust/privacy-policy#california

3. Google Workspace Purpose: Storage of group session recordings Location: Worldwide servers (DPA included)

https://policies.google.com/privacy

4. Stripe Purpose: Credit card payment processing Location: USA (GDPR compliant, DPA)

https://stripe.com/privacy

5. MailerLite Purpose: Newsletter management and sending Location: European Union (DPA)

https://www.mailerlite.com/legal/privacy-policy

6. CookieYes Purpose: Cookie consent management Location: AWS EU (GDPR compliant)

https://www.cookieyes.com/privacy-policy/

7. Google Meet Purpose: Videoconferencing for sessions (no storage) Location: Worldwide servers

https://support.google.com/meet/answer/9852160?hl=en

8. WPML Purpose: Website translation (local storage) Location: SiteGround servers

https://wpml.org/documentation/privacy-policy-and-gdpr-compliance/

9. 1Password Purpose: Secure password management (internal use) Location: Canada/USA

https://1password.com/legal/privacy

13.4 – Contractual Guarantees

All these subcontractors are bound by:

• Subcontracting agreements compliant with GDPR (Data Processing Agreements)
• Strict security and confidentiality obligations
• Prohibition on using your data for purposes other than the service provided

13.5 – Transfers Outside the European Union

Some subcontractors are located in the United States or outside the European Union.

In this case, I ensure that:

• The transfer is governed by Standard Contractual Clauses (SCC) from the European Commission, OR
• The subcontractor applies appropriate safeguards (certifications, enhanced security policies)

13.6 – No Sale of Data

FIRM COMMITMENT: I NEVER sell your personal data to third parties for commercial purposes.

14. COMPUTER SECURITY

14.1 – Security Measures

I implement appropriate technical and organizational measures to protect your data against:

• Unauthorized access
• Accidental disclosure
• Data alteration or loss
• Accidental destruction

These measures include in particular:

• HTTPS protocol throughout the Site (secure connection with padlock)
• Encrypted passwords (not readable even by me)
• Two-factor authentication (2FA) on my administrator accounts
• Regular backups
• Restricted data access (only authorized persons)
• Secure payments via Stripe (PCI-DSS certified)

14.2 – Your Responsibilities

Be careful: You are responsible for the confidentiality of your customer account password.

• NEVER share your password
• Use a strong and unique password
• Log out after each session on a shared computer

14.3 – Data Breach (Security Incident)

In the event of a security breach resulting in a risk to your rights and freedoms, I commit to:

• Notify the competent authority (CNIL, etc.) within 72 hours if required by law
• Inform you directly if the risk is high
• Take necessary corrective measures immediately

14.4 – Post-Incident Corrective Measures

In the event of a security incident affecting your data, I may implement the following measures:

• Mandatory password reset
• Email notification with security instructions
• Temporary suspension of your account (for protection)
• Implementation of enhanced two-factor authentication (2FA)
• Increased access monitoring

Note: These commitments do not in any way constitute an acknowledgment of fault or liability.

15. COOKIES AND TRACKERS

15.1 – What is a Cookie?

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website.

They allow the site to remember your preferences and improve your browsing experience.

15.2 – Cookies Used on the Site

Strictly necessary cookies (no consent needed):

• Session cookies (to maintain your account connection)
• Shopping cart cookies (WooCommerce)
• CookieYes (management of your cookie preferences)

What I do NOT use:

• ❌ Facebook Pixel (personalized advertising)
• ❌ Google Ads (advertising)
• ❌ Geolocation cookies for targeted advertising
• ❌ Automatic sharing on social media

15.3 – Cookie Retention Period

Cookies are retained for a maximum period of 13 months after their initial placement.

15.4 – Manage Your Cookie Preferences

Consent banner: During your first visit, an information banner allows you to accept or refuse non-essential cookies.

Browser settings: You can also configure your browser to block or delete cookies:

• Firefox: https://www.firefox.com/en-US/privacy/websites/cookie-settings/
• Chrome: https://support.google.com/chrome/answer/95647?hl=en&co=GENIE.Platform%3DDesktop
• Safari: https://www.apple.com/legal/privacy/en-ww/cookies/
• Microsoft Edge: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d

“Do Not Track” option: You can activate this option in your browser to indicate to sites that you do not wish to be tracked.

15.5 – Consequences of Refusing Cookies

If you refuse non-essential cookies:

• ✅ The Site will continue to function normally
• ❌ Some personalized features may be limited

16. LINKS TO THIRD-PARTY SITES

My Site may contain links to third-party websites (partners, external resources, social media).

Limitation of liability: I am NOT responsible for the content or privacy practices of these third-party sites.

I invite you to consult their own privacy policy before transmitting your personal data to them.

 

17. MODIFICATIONS TO THIS POLICY

I reserve the right to modify this Privacy Policy at any time to:

• Comply with legal and regulatory developments
• Adapt the Policy to new services
• Improve transparency and clarity

Update date: The date of last update is indicated at the top of this page.

Information in case of major modification: In case of substantial modification affecting your rights, you will be informed by email or via a banner on the Site.

I encourage you to consult this Policy regularly to stay informed about how I protect your data.