Privacy Policy
Bibi Gratzer | Relationship & Intimacy Coaching
Last updated: 10 November 2026
Your privacy matters to me.
My work involves personal conversations about relationships, intimacy, trust, betrayal and personal growth. I understand that you may share deeply personal information, and I take my responsibility to handle it with care and respect seriously.
This policy explains what personal information I collect, why I use it, how it may be shared, and your rights under UK data protection law.
1. Who I am
I am Bibi Gratzer, a UK-based sole trader providing relationship, intimacy and personal development coaching through bibigratzer.com and associated programmes, including Relationship Alchemy.
I am the data controller responsible for the personal information I collect and use in my business.
Contact: [email protected]
Business correspondence address: Circus Yard, Prestleigh Rd. BA46LW Evercreech
For privacy-related questions or requests, please contact me by email.
2. Information I collect
Depending on how you interact with me, I may collect:
-
Your name, email address and contact information.
-
Information you provide through enquiries, coaching applications, questionnaires or booking forms.
-
Details about your relationship circumstances, personal challenges and coaching goals.
-
Information you voluntarily share during coaching sessions or in messages.
-
Booking, payment and transaction information.
-
Information about how you interact with my website and online services, where applicable.
Some information you choose to share may be particularly sensitive, including details about your sex life, sexual orientation, physical or mental health, or traumatic experiences.
I ask you to share only information that is relevant and necessary. You do not need to provide graphic descriptions or unnecessary personal information about other people.
3. How I use your information
I use personal information to:
-
Respond to enquiries and coaching applications.
-
Assess whether my coaching services may be appropriate for your circumstances.
-
Arrange and deliver coaching sessions and programmes.
-
Communicate with you about appointments and your coaching journey.
-
Process payments and maintain business records.
-
Meet legal, accounting and tax obligations.
-
Protect the security of my services and address concerns or disputes.
Submitting a coaching application does not automatically subscribe you to a newsletter or marketing emails.
If I offer email marketing, I will provide a separate sign-up opportunity and comply with applicable marketing and data protection rules.
4. My legal reasons for using information
Under UK GDPR, I must have a lawful basis for processing personal information.
Depending on the circumstances, I may rely on:
Contract or steps before entering a contract: To respond to coaching applications, assess suitability, arrange services and deliver coaching you have requested.
Legal obligation: To maintain records required for accounting, tax and other legal purposes.
Legitimate interests: To manage enquiries, administer my business, maintain security and protect my legal interests, where those interests are not overridden by your rights and freedoms.
Consent: Where I specifically request your agreement for a particular use of your information.
Some sensitive information, such as information concerning health or sex life, is classified as special category data. Where I process this information, I must also identify an additional legal condition under Article 9 of UK GDPR.
Where appropriate, I may ask for your separate, explicit consent to use information you voluntarily provide about these matters for assessing suitability or providing coaching.
You may withdraw consent by contacting me. Withdrawal does not affect processing that was lawful before consent was withdrawn. Other lawful reasons may require me to retain limited information.
5. Confidentiality and coaching
I treat the information you share with me as confidential and limit access to what is necessary for my work.
Confidentiality is subject to applicable legal requirements and circumstances where disclosure may be necessary, such as responding to a lawful request or addressing a serious safeguarding concern where there is an appropriate legal basis.
For couples coaching, I will explain how confidentiality between partners is handled as part of our coaching agreement.
I do not publish client stories, testimonials or identifiable details about coaching experiences without appropriate permission.
6. Services and technology I use
To operate my business, I use or may use the following third-party services:
-
Kajabi: Website, programmes, forms and client communications.
-
Tally: Coaching applications and questionnaires.
-
Google Forms and Google Drive: Forms, documents and business records.
-
WhatsApp: Client communication where agreed.
-
Stripe and PayPal: Payment processing.
-
Zoom: Online coaching sessions and meetings.
These providers may process personal information as part of delivering their services. Their own privacy notices also explain aspects of their data handling.
I aim to share only the information needed for each service.
Payment card details are generally processed by the relevant payment provider rather than collected directly by me.
7. International data transfers
Some technology providers may store, access or process personal information outside the United Kingdom.
Where a transfer is subject to UK GDPR international transfer rules, I will ensure that an appropriate transfer mechanism applies, such as UK adequacy regulations or legally recognised contractual safeguards.
You may contact me to request further information about relevant international transfers and safeguards.
8. How long I keep information
I keep personal information only for as long as necessary for the purposes for which it was collected, subject to legal obligations.
Unsuccessful coaching applications: Normally deleted within three months of the application decision, unless there is a lawful reason to retain specific information longer.
Coaching records and communications: Retained for a period determined by the nature of the service, legitimate business needs and applicable legal requirements.
Payment and accounting records: Retained for the period required under applicable UK tax and accounting law.
When information is no longer needed, I will delete it or otherwise dispose of it securely.
9. How I protect your information
I take reasonable technical and organisational steps to protect personal information against unauthorised access, loss, misuse or disclosure.
These include limiting access to relevant accounts and using the security features available through my service providers.
No internet-based service can guarantee absolute security. If you have concerns about sharing particularly sensitive information online, please contact me before submitting it.
10. Your rights
Under UK data protection law, you may have the right to:
-
Request access to personal information held about you.
-
Ask for inaccurate information to be corrected.
-
Request deletion of information in certain circumstances.
-
Request restriction of certain processing.
-
Object to processing based on legitimate interests.
-
Request data portability where applicable.
-
Withdraw consent where consent is relied upon.
These rights are subject to legal conditions and exceptions.
You have the right to object to processing based on legitimate interests, and you can object to direct marketing at any time.
To exercise your rights, email [email protected].
You can also raise a concern with the UK Information Commissioner's Office (ICO):
https://ico.org.uk/make-a-complaint/
11. Cookies and website analytics
My website and the services connected to it may use cookies or similar technologies for essential website functionality and, where enabled, analytics or marketing purposes.
I will provide information about the cookies actually used and obtain consent where required.
12. Information about other people
Please avoid submitting unnecessary identifying information about partners, family members or other individuals.
Where personal information about another person is provided, I will handle it in accordance with applicable data protection requirements.
13. Automated decision-making
I do not use solely automated decision-making that produces legal or similarly significant effects on individuals. Coaching applications are reviewed personally.
14. Changes to this policy
I may update this policy when my services, technology or legal obligations change.
The latest version will be available on my website, with the date of the most recent update shown at the top.
15. Contact
For questions about this policy or how your information is handled, contact:
Bibi Gratzer
Sole trader
Email: [email protected]
Website: https://www.bibigratzer.com
Business correspondence address: Circus Yard, Prestleigh Rd. BA46LW Evercreech