Privacy policy

Last updated: February 2026

This Privacy Policy explains how Aline Polack (“I”, “me”, “my”), based in France, collects and uses personal data when you visit https://www.polackwellness.com/ (the “Website”) and when you contact me or book online sessions.

  1. Data Controller (GDPR)
    Aline Polack is the data controller for the processing described in this Privacy Policy.

  2. Personal data I collect
    I may collect the following categories of data, depending on your interaction with the Website and my services:

  • Contact data: name, email address, phone number.

  • Enquiry and booking data: messages you send, booking requests, appointment dates/times, and administrative communications.

  • Session-related information: information you choose to share during sessions and limited notes I may keep for continuity of support.

  • Billing and payment data: invoices/receipts, payment status, and billing information required for accounting. Payment processing is handled by third-party providers; I do not store full payment card details.

  • Technical and usage data: device and browser information, IP address, pages visited, and similar data for security and, if enabled, analytics and performance measurement.

  1. Special category data
    If you choose to share information about your mental health or relationship situation during sessions, this may be considered sensitive data under GDPR. I handle this information with heightened confidentiality and security.

  2. Why I use your data (purposes)
    I process your personal data to:

  • Respond to enquiries and provide customer support.

  • Schedule and deliver online individual and couples sessions via Zoom.

  • Manage payments and invoicing in euros (EUR) and communicate currency conversion information when relevant.

  • Maintain appropriate records for continuity and quality of service.

  • Secure the Website and prevent misuse or fraud.

  • Comply with legal, tax, and accounting obligations.

  • Improve the Website (for example via analytics), if enabled.

  1. Legal bases for processing (GDPR)
    Depending on the context, I rely on:

  • Performance of a contract (to provide sessions you book).

  • Consent (for optional cookies/analytics and for any marketing communications, where applicable).

  • Legitimate interests (website security, preventing abuse, improving the Website).

  • Legal obligation (accounting and tax compliance).

  1. Who I share data with (processors/service providers)
    I may share necessary data with trusted providers that help me operate the Website and deliver services, such as:

  • Website hosting and Squarespace-related services.

  • Scheduling/booking provider (if used).

  • Payment provider (e.g., Stripe and/or PayPal, if used).

  • Zoom (to deliver video sessions).

  • Email and productivity tools used to communicate and manage appointments.

  • Analytics provider (e.g., Google Analytics), if enabled.

  1. International data transfers
    Some providers may process data outside the European Economic Area. Where applicable, transfers are made under appropriate safeguards required by GDPR (e.g., adequacy decisions and/or contractual safeguards).

  2. Data retention (how long I keep data)
    Personal data is not kept indefinitely; I keep it only as long as necessary for the purposes stated in this policy, then delete or anonymize it. This includes, for example:

  • Enquiries: generally up to 3 years after last contact.

  • Accounting and invoicing records: generally up to 10 years (French accounting/tax requirements).

  • Session-related notes: kept for continuity and professional practice needs, then deleted/anonymized when no longer necessary. Retention periods may vary depending on the context and legal requirements.

  1. Your rights
    Under GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing where applicable, and you can withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the French data protection authority: CNIL (Commission Nationale de l’Informatique et des Libertés).

  1. Security
    I take reasonable technical and organizational measures to protect personal data (e.g., access controls, secure accounts, limiting sharing to what is necessary). No method of transmission or storage is 100% secure.

  2. Contact
    For privacy questions or requests:
    alinepolack21@gmail.com

  3. Updates to this policy
    I may update this Privacy Policy from time to time. The “Last updated” date will reflect changes.

Dis-moi “page 2” et je t’envoie Terms of Use (Website) seule, puis “page 3” (Client Terms & Conditions), puis “page 4” (Cookie Policy).