PRIVACY POLICY

Website: mandalamind.eu
Last updated: September 23, 2026

Nicole Koch, respects your privacy and processes personal data in accordance with the EU General Data Protection Regulation (GDPR), applicable Spanish data-protection legislation and other applicable privacy laws.

1. Data controller

Data Controller: Nicole Koch / MandalaMind
NIF/NIE:  
Address: Calle Tabarca 16A, 03580 L'Alfàs del Pi, Alicante, Spain
Email: nicole{at}mandalamind.org

2. What information we may collect

Depending on how you interact with MandalaMind, we may collect:

  • Name and contact details;

  • Email address;

  • Billing and transaction information;

  • Information necessary to arrange coaching or counselling sessions;

  • Course and workshop registration information;

  • Communications sent to MandalaMind;

  • Information provided when subscribing to the newsletter;

  • Website usage and analytics information;

    Technical information such as browser, device and approximate location;

  • Information necessary to provide purchased products or services.

3. Sensitive information

Some information shared in a non-clinical Coaching or Counselling context may be particularly private or may constitute special-category or sensitive personal data.

MandalaMind does not request medical diagnoses or clinical information for non-clinical Counselling or Coaching services.

Users should avoid providing unnecessary sensitive personal information through ordinary website forms, email or other non-secure channels.

Where special-category personal data is processed, MandalaMind will rely on an appropriate legal basis under applicable data-protection law.

4. Purposes of processing

MandalaMind collects and processes personal information for the following purposes:

Providing services: To arrange and deliver non-clinical coaching, counselling, wellbeing support, workshops, courses and related services.

Understanding your needs: To understand the goals, preferences and information you choose to share with us so that we can provide an appropriate and personalised non-clinical service.

Managing appointments and bookings: To schedule, confirm, change and administer individual sessions, workshops and other activities.

Communicating with you: To respond to enquiries and communicate with you about appointments, services, workshops, events, payments and other matters relating to your relationship with MandalaMind.

Administration and payments: To process payments, issue invoices or receipts, maintain appropriate business records and manage our administrative responsibilities.

Workshop and event management: To register participants, organise attendance, communicate event information and administer workshops and other group activities.

Service improvement: To review feedback and information about the use of our services in order to improve the quality, accessibility and effectiveness of our programmes and website.

Website and technical administration: To operate, maintain, secure and improve our website and related digital services.

Legal and regulatory compliance: To maintain records and process information where this is necessary to comply with applicable legal, regulatory, accounting, insurance or other obligations.

Safety and safeguarding: Where applicable and permitted or required by law, to address serious safety, safeguarding or other circumstances where action may be necessary to protect an individual or others.

Marketing and communications: Where permitted by law and, where required, with your consent, to send information about MandalaMind's workshops, events, services and other activities. You may opt out of marketing communications at any time.

5. Legal bases

Depending on the circumstances, personal information may be processed on the basis of:

  • Performance of a contract;

  • Taking steps at the user's request before entering into a contract;

  • Compliance with a legal obligation;

  • Legitimate interests, where applicable and appropriately balanced; and

  • Consent, where required.

Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Payments

Payments may be processed through Stripe and PayPal.

Payment providers may process personal information according to their own privacy policies and applicable legal requirements.

7. Newsletter — Mailchimp

MandalaMind may use Mailchimp to manage newsletter subscriptions and email communications.

Newsletter subscribers may receive information about MandalaMind courses, workshops, educational content and related services.

Marketing emails will be sent where there is an appropriate legal basis, including consent where required.

Users may unsubscribe using the link provided in marketing emails or by contacting MandalaMind.

8. Website analytics — Google Analytics

MandalaMind may use Google Analytics to understand how visitors use the Website and improve its functionality and content.

Where required, analytics cookies or similar technologies will only be activated after the user has provided the required consent.

Users may manage their cookie preferences through the Website's cookie controls.

9. Video services — Zoom

MandalaMind may use Zoom to deliver live online sessions and courses.

When joining a Zoom session, certain personal information may be processed by Zoom.

Participants should review Zoom's privacy information and should avoid unnecessarily disclosing sensitive personal information in public chat, recordings or other shared areas.

10. Website hosting — Squarespace

The Website is hosted and/or operated using Squarespace.

Squarespace may process technical information and other information necessary to provide Website functionality.

11. International transfers

Some service providers used by MandalaMind may process information outside the European Economic Area.

Where personal data is transferred internationally, MandalaMind will use an appropriate legal mechanism required by applicable data-protection law, such as an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism where applicable.

12. Data retention

Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, maintain appropriate business and accounting records, comply with legal obligations and resolve disputes.

Different categories of information may therefore be retained for different periods.

13. Your rights

Subject to applicable law, you may have the right to:

  • Access your personal data;

  • Request correction of inaccurate data;

  • Request deletion;

  • Request restriction of processing;

  • Object to certain processing;

  • Request data portability;

  • Withdraw consent where processing is based on consent; and

  • Lodge a complaint with the relevant data-protection authority.

  • In Spain, complaints may be submitted to the Agencia Española de Protección de Datos (AEPD).

14. Security

MandalaMind takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No internet transmission or storage system can be guaranteed to be completely secure.

15. Children

Unless specifically stated otherwise, MandalaMind services are intended for adults.

MandalaMind does not knowingly collect personal information from children through ordinary Website services where parental consent is legally required.

16. Changes to this Privacy Policy

This Privacy Policy may be updated when necessary to reflect changes in MandalaMind's services, technology or applicable law.

The latest version will be published on the Website.

17. Contact

Nicole Koch — MandalaMind
NIF/NIE:
Address: Calle Tabarca 16A, 03580 L'Alfàs del Pi, Alicante, Spain
Email: nicole[at]mandalamind.org