Privacy Policy

Your privacy is a priority at The Mental Health Well. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website, thementalhealthwell.com, and our coaching services.

1. Data Controller

As the operator of The Mental Health Well, I am the Data Controller responsible for your personal data. You can contact me regarding any privacy concerns at:

Email: [thementalhealthwell@gmail.com]

To provide our coaching services, we collect only the information strictly necessary to support you:

• Contact Information: Name, email address, and any contact details provided via forms or email.
• Coaching & Portal Data: Notes, updates, or personal insights you choose to share through our private portal during our coaching relationship.
• Payment Information: Processed through secure, third-party payment providers. We do not store your full credit card details on our servers.
• Technical Data: Information such as IP address and browser type collected automatically through website analytics to improve site functionality.

We use your information solely to:

• Provide and personalize our coaching services.
• Communicate with you regarding your sessions and progress.
• Fulfill our legal and accounting obligations (e.g., tax reporting).
• Maintain and improve the security of our website and services.

We do not sell your personal data. We only share data with trusted third-party service providers who assist in running our business (such as our website host, email service provider, and payment processor). These providers are contractually obligated to protect your data according to high security standards.

We retain your data only as long as necessary for the purposes outlined:

• Financial Records: Retained for 5 years to comply with Danish tax and accounting laws.
• Contracts & Agreements: Retained for 3 years to protect against potential civil legal claims.
• Coaching Notes: Retained for 12 months following the conclusion of our coaching relationship, after which they are securely deleted, unless a dispute is ongoing.

We are based in Denmark. When you provide data to us, you acknowledge that it is processed within the European Economic Area (EEA). We ensure that any international transfer of data—including data from clients in the USA—is handled in compliance with GDPR standards to ensure your information remains protected.

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify any inaccurate information.
• Request Erasure of your data ("the right to be forgotten").
• Object to the processing of your data.
• Withdraw Consent at any time where processing is based on consent.

To exercise these rights, please contact us at the email address provided above.

We implement appropriate technical and organizational measures to protect your data, including secure, encrypted communication channels for our portal and limited access to your information.

We may update this policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top will always indicate when the most recent changes were made.