Privacy Policy

The controller responsible for processing personal data is:

This policy applies to the Calm Minds™ website, contact and booking services, website analytics, and related email communications.

Processing is governed primarily by the Swiss Federal Act on Data Protection (FADP). The EU General Data Protection Regulation (GDPR) also applies where its territorial requirements are met. Other privacy laws, including applicable Canadian or United States laws, may provide additional rights where their requirements and thresholds are met.

Depending on how you use the website, I may process:

• Website and technical data: IP address, approximate location derived from the IP address, date and time, requested page or file, referring page, browser, operating system, device and language information, and security, diagnostic, and request logs.
• Contact-form data: first and last name, email address, telephone number, service of interest, preferred session format, message, acceptance of this policy, optional marketing choice, and submission time.
• Booking data: the appointment type, date, time, time zone, name, email address, telephone number, and any responses or notes you choose to provide in the Cal.eu booking form.
• Communication data: correspondence and associated sender, recipient, delivery, and message-header information when you contact Calm Minds™ or receive a reply.
• Consent records: the choice submitted with an enquiry and later records of a withdrawal or privacy request.
• Aggregate analytics: page views, page path, referrer, campaign parameters, device and screen categories, browser and operating-system category, language, time zone, approximate country derived from the time zone, time on page, and scroll depth.

The contact form is intended for a general initial enquiry. Please do not include medical records, diagnoses, identification documents, payment-card information, or other unnecessary sensitive details. Booking notes should also be kept general.

I do not sell personal data or use it for targeted advertising, cross-context behavioural advertising, or automated decision-making and profiling.

I process personal data to:

• provide, maintain, secure, and troubleshoot the website and prevent misuse
• understand aggregate website use and improve its content and performance
• validate, deliver, and respond to enquiries and arrange requested services
• display appointment availability and create, manage, and communicate about bookings
• keep necessary business and consent records, establish or defend legal claims, and comply with legal obligations
• send Calm Minds™ news or offers by email only where you have separately opted in.

Where the GDPR applies, these activities rely, as appropriate, on steps requested before entering into a contract or performance of a contract (Art. 6(1)(b)), compliance with legal obligations (Art. 6(1)(c)), legitimate interests in operating a secure website and communicating about the business (Art. 6(1)(f)), or consent for optional marketing (Art. 6(1)(a)). You may withdraw consent at any time with effect for the future.

Contact-form data is used to review and respond to your enquiry and, where relevant, arrange a service or appointment. Submitted enquiries are delivered to the Calm Minds™ email inbox and can be answered by email.

The form records whether you accepted this policy and whether you separately chose to receive news and offers by email. Marketing consent is optional and is not a condition of sending an enquiry or receiving a service. No automated newsletter or marketing platform is connected. If you opted in, you may withdraw that choice at any time by using an unsubscribe method offered in a message or emailing legal@calmminds.ch.

This website is hosted by Vercel, Inc. (United States). When you access the website, Vercel processes website traffic and service-generated data such as IP address, approximate location derived from the IP address, request and referrer information, browser and device details, timestamps, diagnostics, and security logs. This processing is necessary to deliver, operate, monitor, and protect the website.

I use Simple Analytics (Netherlands) to understand aggregate use of the website. It processes page paths, referrers, selected campaign parameters, device and screen categories, browser and operating-system categories, language, time zone, time on page, and scroll depth. Query parameters and fragments are removed from stored page and referrer URLs.

Simple Analytics does not set cookies or use local storage, session storage, IP-address storage or hashing, device fingerprinting, or cross-site identifiers. IP addresses are removed from requests rather than stored, and the collected data is not used to identify individual visitors.

The integration uses the collect-dnt=true setting. This means aggregate page views are also counted when a browser has Do Not Track enabled. It does not enable person-level or cross-site tracking. A non-JavaScript pixel provides a limited page-view count when JavaScript is disabled.

Fonts

Fonts, images, and other visual assets are served from the website itself. Viewing a page does not send a request to Google Fonts or another external font provider.

Vercel

The website is hosted by Vercel, Inc. (United States). Vercel processes the technical, request, diagnostic, and security data described in section 6 to deliver, operate, monitor, and protect the website.

Resend

Contact-form enquiries are delivered using Resend, a service of Plus Five Five, Inc. (United States). Resend processes the form contents, sender and recipient addresses, and delivery and security metadata to deliver the enquiry to the Calm Minds™ email inbox.

Hoststar

Hoststar – Multimedia Networks AG (Switzerland) provides domain registration and management, DNS services, and hosts the Calm Minds™ email mailboxes. Emails and contact-form enquiries delivered to these mailboxes are processed under Hoststar's privacy policy.

Cal.eu

Appointment booking is provided through Cal.eu, the European-hosted scheduling service operated by Cal.com, Inc. (United States). The booking script and calendar are loaded only after you open the booking window and select an appointment type.

When the calendar loads, Cal.eu receives technical and usage data such as your IP address, browser and device information, referrer, and time zone. If you make a booking, it also processes the appointment and contact details you submit. Cal.eu states that scheduling data for its European-hosted service is stored and processed within the European Union. Cal.com's privacy policy and the notices shown in the booking service also apply.

Cookies

Calm Minds™ does not set advertising or analytics cookies. The Cal.eu booking service may use cookies or local storage needed for security, session continuity, and user preferences after its calendar is loaded. Blocking necessary storage may prevent the booking service from working correctly.

External Links

The website includes ordinary links to third-party websites and social-media profiles. No social-media feed, tracking pixel, or social plugin is embedded. A third party receives data directly from your browser only when you follow its link, or when the Cal.eu calendar is loaded as described above. The destination provider's own privacy terms then apply.

Personal data is shared only where necessary to operate the website, deliver enquiries, manage bookings and email, comply with legal obligations, or protect legal rights. The following service providers support these activities:

Vercel, Inc. (United States and subprocessors)

Vercel states that its primary processing facilities are in the United States and that processing may also occur where its subprocessors operate. Its Data Processing Addendum describes applicable cross-border transfer mechanisms, including Standard Contractual Clauses where required.

Plus Five Five, Inc. / Resend (United States)

Resend states that its primary processing operations take place in the United States. Its Data Processing Addendum includes Standard Contractual Clauses and Swiss transfer terms.

Cal.com, Inc. / Cal.eu (United States / European Union)

Cal.eu states that data in its European-hosted service is stored and processed within the European Union.

Where personal data is transferred to a country without a recognised adequate level of protection, the applicable provider terms and contractual safeguards, such as the European Commission's Standard Contractual Clauses adapted for Swiss law where necessary, are used as required. You may request more information about the relevant safeguards by emailing legal@calmminds.ch.

Personal data is retained only for as long as reasonably needed for the purpose for which it was collected, subject to legal and contractual requirements. In general:

• Vercel request, diagnostic, and security data follows the retention settings and technical deletion cycles applicable to the hosting service.
• Contact enquiries and related email correspondence are normally retained for up to 12 months after the last meaningful communication, unless they become part of a client or legal record or are needed for longer.
• The temporary duplicate-submission fingerprint is not written a database and is discarded with the temporary application memory used for that purpose.
• Booking data is retained in the scheduling service and Calm Minds records for as long as needed to arrange and administer the appointment, after which provider deletion schedules and any applicable legal duties apply.
• Aggregate analytics data follows the retention settings and deletion options applicable to Simple Analytics.
• A marketing consent record is kept until consent is withdrawn or no longer needed. Minimal information may then be retained to honour the withdrawal and avoid further marketing.
• Records required for accounting, regulatory compliance, or legal claims may be retained for the applicable statutory period, which can be up to ten years under Swiss law.

Subject to the conditions and limits of the law that applies to your request, you may have the right to:

• request access to personal data processed about you
• request correction of inaccurate or incomplete data
• request deletion or restriction of processing
• object to certain processing based on legitimate interests
• receive data you provided in a commonly used electronic format or have it transmitted to another controller
• withdraw consent at any time with effect for the future, without affecting earlier lawful processing
• complain to the competent privacy or data-protection authority.

Depending on where you live and whether the relevant law applies, Canadian or United States privacy law may also give you rights to know, access, correct, delete, or obtain a portable copy of your information, appeal a refusal, or opt out of certain uses. Calm Minds™ does not sell personal data, share it for cross-context behavioural advertising, use it for targeted advertising, or use it for decisions based solely on automated profiling.

To exercise a right, email legal@calmminds.ch. I may request information reasonably necessary to verify your identity and authority.

You may also contact the relevant supervisory authority:

• Switzerland: the Federal Data Protection and Information Commissioner
• Where the GDPR applies: the authority for your habitual residence, place of work, or the place of the alleged infringement
• Canada: the Office of the Privacy Commissioner of Canada or the competent provincial commissioner
• United States: the competent state privacy regulator or attorney general, where applicable.

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. Measures include transport encryption, server-side validation, data minimisation, restricted access, and established service providers. No internet transmission or storage system can be guaranteed to be completely secure.

This policy may be updated when the website, processing activities, providers, or legal requirements change. The update date at the top identifies the policy in force.

Questions about this policy or the processing of personal data may be sent to legal@calmminds.ch.