Privacy Policy + Data Protection Notice

Last updated: July 3, 2026

Itzel Lerma is committed to protecting your personal information. As a coach and mentor serving clients primarily in the EU and Switzerland, I handle your data in accordance with:

  • The Swiss Federal Act on Data Protection (FADP / revDSG)

  • The EU General Data Protection Regulation (GDPR)

  • Other applicable data protection laws

This notice explains what information I collect, how I use it, who I share it with, and the rights you have over your data.


1. Who Is Responsible for Your Data

The person responsible for this website and for processing your personal data (the "data controller") is:

Itzel Lerma (sole proprietorship) Schärbächlistrasse 17, 8810 Horgen, Switzerland Phone: +41 78 441 63 99 Email: connect@itzellerma.com

This website is operated by Itzel Lerma. All content is protected by copyright. © 2026 Itzel Lerma. All rights reserved.


2. Information I Collect

Information you provide directly:

  • Name and contact details (email address, phone number)

  • Information submitted through waiting-list and sign-up forms for programs

  • Details about your situation and coaching needs (via consultation requests, intake forms, or our conversations)

  • Feedback and survey responses

  • Payment information (processed securely by third-party providers — see Section 4)

  • Communication preferences

  • Messages you send within community and group containers (e.g. WhatsApp groups)

Information collected automatically when you visit the website:

  • IP address and approximate location

  • Browser type and version

  • Device information

  • Pages visited and time spent on the site

  • Referring website

  • Cookies and similar technologies (see Section 8)

3. How I Use Your Information

I process your personal data on the following legal bases:

With your consent:

  • Sending newsletters and marketing emails

  • Adding you to waiting lists for programs

  • Sending personalized recommendations and program information

To perform a contract with you:

  • Delivering the coaching services and programs you've enrolled in

  • Processing payments

  • Communicating with you about your sessions, programs, and group containers

For my legitimate interests:

  • Improving my website and services

  • Understanding my audience's needs

  • Security and fraud prevention

To comply with legal obligations:

  • Meeting Swiss tax, accounting, and record-keeping requirements

You may withdraw your consent at any time. This does not affect the lawfulness of any processing carried out before you withdrew it.

4. How I Share Your Information

I do not sell, rent, or trade your personal information. I share data only with trusted service providers who help me operate my business, and only as needed to deliver my services:

Purpose

Provider

Website hosting & built-in analytics

Squarespace

Email, newsletters, sign-up & waiting-list forms

Kit (formerly ConvertKit)

Newsletter / publishing ("Women of the New World")

Substack [remove if you'd prefer not to list this]

Payment processing

Stripe

Bank transfers

Zürcher Kantonalbank (ZKB)

Scheduling & booking

Calendly

Live sessions & session recordings

Zoom

Group & community containers

WhatsApp

All service providers are contractually bound to protect your data and to use it only as instructed.

International data transfers: Some of these providers are based outside Switzerland and the EU (primarily in the United States). Because of this, your data may be transferred internationally even though my clients are located in the EU and Switzerland. Where this happens, I rely on appropriate safeguards, such as:

  • EU-approved Standard Contractual Clauses (SCCs)

  • Adequacy decisions recognized by the EU Commission and the Swiss Federal Council

  • Other appropriate safeguards required under the GDPR and the Swiss FADP

Legal disclosures: I may disclose information where required by law, court order, or to protect my legal rights.

5. How Long I Keep Your Data

I retain personal information only as long as necessary:

  • Newsletter subscribers: until you unsubscribe, then deleted within 30 days

  • Waiting-list and consultation requests (non-clients): deleted within 90 days if we don't end up working together

  • Current clients: for the duration of our working relationship

  • Financial and accounting records: 10 years, as required by Swiss law

  • Website analytics: in line with Squarespace's standard retention periods

6. Your Rights

Under the Swiss FADP and the GDPR, you have the right to:

  • Access — request a copy of the personal data I hold about you

  • Rectification — correct inaccurate or incomplete information

  • Erasure ("right to be forgotten") — request deletion of your data

  • Restriction — limit how I use your data

  • Data portability — receive your data in a structured, commonly used format

  • Object — object to processing based on legitimate interests

  • Withdraw consent — unsubscribe from marketing at any time

  • Lodge a complaint — with a data protection authority

To exercise any of these rights, contact me at connect@itzellerma.com. I will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority:

  • Switzerland: Swiss Federal Data Protection and Information Commissioner (FDPIC) — www.edoeb.admin.ch

  • EU residents: your local data protection authority

7. Data Security

I use appropriate technical and organizational measures to protect your data, including:

  • SSL/TLS encryption for data transmitted through the website

  • Secure, password-protected accounts and platforms

  • Limited access on a need-to-know basis

  • Secure deletion procedures

  • Regular backups

However, no method of transmission over the internet is completely secure. While I take reasonable steps to protect your information, I cannot guarantee absolute security.

8. Cookies and Tracking

My website uses cookies and similar technologies to:

  • Remember your preferences

  • Analyze website traffic and usage patterns

  • Improve your experience

Types of cookies used:

  • Essential cookies — necessary for the website to function (cannot be disabled)

  • Analytics cookies — Squarespace's built-in analytics, to understand how visitors use the site

I do not use advertising or marketing tracking cookies (such as a Meta/Facebook pixel).

When you first visit my website, a cookie banner lets you accept cookies or manage your preferences. You can change your choices at any time through the banner, and you can also manage or disable cookies through your browser settings. Disabling some cookies may affect how the website functions.

9. Third-Party Links

My website may contain links to other websites. I am not responsible for the privacy practices of those external sites. Please review their privacy policies when you visit them.

10. Children's Privacy

My services are not directed to individuals under 16. I do not knowingly collect data from minors. If you believe a minor has provided me with personal information, please contact me so I can delete it.

11. Changes to This Policy

I may update this privacy policy from time to time to reflect changes in my practices, technology, or legal requirements. Material changes will be communicated via a notice on the website. Continued use of my services after changes take effect indicates acceptance of the updated policy.

12. Contact

For any privacy-related questions or to exercise your rights:

Itzel Lerma Email: connect@itzellerma.com Address: Schärbächlistrasse 17, 8810 Horgen, Switzerland

I aim to respond to general inquiries within 3 business days, and to formal data protection requests within 30 days.