top of page

Privacy policy

Last updated: October 2026

​​

This Privacy Policy explains how Wojciech Filip collects, uses, stores, and protects personal data when you visit wojciechfilip.com, contact me, register for or participate in webinars, group calls, coaching or Compassion Key® sessions, book a session, make a payment, subscribe to communications, or otherwise interact with my services.

This Privacy Policy applies to visitors and clients from the European Union and European Economic Area (EEA), the United States, and other countries where applicable.

​

1. Data Controller

​

The data controller responsible for your personal data is:

 

Wojciech Filip Personal Transformation Coaching 
Poland

​

Email: wojciech@wojciechfilip.com

​

For privacy-related questions or requests, please contact me at the email address above.

I have not appointed a Data Protection Officer (DPO).

​

2. Personal Data We Collect

​

Depending on how you interact with my website and services, I may collect the following categories of personal data:

Information you provide directly

  • First name

  • Last name

  • Email address

  • Telephone number, if you choose to provide it

  • Company name, if applicable

  • Information included in messages or enquiries

  • Information provided when registering for webinars, group calls or programs

  • Information provided when booking a coaching or Compassion Key® session

  • Information necessary to provide the requested service

  • Billing and transaction information necessary to process payments

Information collected automatically

When you visit my website, certain technical information may be collected automatically, including:

  • IP address

  • Browser and device information

  • Operating system

  • Website pages visited

  • Date and time of visits

  • Referring website

  • Cookies and similar technologies

  • Website usage and diagnostic information

The exact information collected depends on the features and services enabled on the website.

I do not intentionally request sensitive personal information through ordinary contact or registration forms. Please avoid submitting health information, information about other people, or other sensitive personal information unless it is genuinely necessary for the service you are requesting.

​

3. How and Why We Use Your Personal Data

​

I process personal data only for specific and legitimate purposes.

Providing services and managing bookings

I may use your personal data to:

  • arrange and provide individual coaching or Compassion Key® sessions;

  • manage bookings and appointments;

  • organize webinars, group calls and programs;

  • communicate with you about a service you have requested;

  • provide access to purchased services or materials;

  • process payments and manage transactions;

  • send service-related confirmations, reminders and administrative messages.

For individuals in the EEA, the relevant legal basis may include Article 6(1)(b) GDPR – performance of a contract or taking steps at your request before entering into a contract, where applicable.

​

Responding to enquiries

If you contact me through the website, email or another communication channel, I may process your contact details and the content of your message in order to respond to your enquiry.

The legal basis may be:

  • Article 6(1)(b) GDPR, where your enquiry relates to entering into or performing a contract; or

  • Article 6(1)(f) GDPR – legitimate interests, where appropriate.

Marketing and newsletters

If you choose to subscribe to marketing communications, I may use your email address to send information about:

  • webinars;

  • group calls;

  • new content;

  • coaching and personal transformation services;

  • offers and other communications related to my business.

For EEA individuals, where consent is required, the legal basis is Article 6(1)(a) GDPR – consent.

You can withdraw your marketing consent at any time by using the unsubscribe link in an email or by contacting me.

Website operation, security and analytics

I may process technical information to:

  • operate and maintain the website;

  • prevent fraud, abuse and security incidents;

  • protect the website and its users;

  • understand website performance;

  • improve the website and user experience.

Depending on the type of processing, the legal basis may be Article 6(1)(f) GDPR – legitimate interests, or consent where consent is required.

​

4. Payments

​

If you purchase a paid service, payment may be processed through Stripe or another payment provider made available on the website.

Payment providers may process information such as your name, email address, billing information, transaction details and payment information.

I do not normally have access to your complete payment card number or card security code.

Payment providers may act as independent controllers or processors depending on the particular processing activity and applicable law. Their own privacy policies also apply.

Stripe maintains a Data Processing Agreement and provides mechanisms for international data transfers, including EU Standard Contractual Clauses where applicable.

​

5. Service Providers and Data Recipients

​

To operate my business and provide services, I may use trusted third-party service providers, including:

​

Wix

My website, forms, booking functionality, CRM/contact management, email automations and related website services may be provided through Wix.

Wix may process personal data on my behalf and may use its own sub-processors and infrastructure in different countries. Wix states that it uses appropriate safeguards for international transfers where required.

Google Workspace

I may use Google Workspace for business email, calendar, document storage and related business operations.

For example, communications sent to wojciech@wojciechfilip.com may be processed through Google Workspace.

Zoom

I may use Zoom to provide online sessions, webinars and group calls.

Depending on the service and configuration, Zoom may process registration information, participant information, meeting information and technical data.

Zoom states that it provides GDPR contractual commitments and international transfer mechanisms including the EU-US Data Privacy Framework and Standard Contractual Clauses, where applicable.

Stripe

I may use Stripe for payment processing.

Stripe may process personal data as a processor or controller depending on the particular service and processing activity.

I may also use other carefully selected service providers where necessary to operate the website, communicate with clients, provide services, process payments, maintain security, or comply with legal obligations.

I do not sell personal data to data brokers.

​

6. International Data Transfers

​

Some service providers I use may process personal data outside the European Economic Area (EEA), including in the United States or other countries.

Where the GDPR applies, transfers of personal data outside the EEA will be carried out using an applicable lawful transfer mechanism, such as:

  • an adequacy decision adopted by the European Commission;

  • the EU-US Data Privacy Framework, where applicable;

  • Standard Contractual Clauses (SCCs);

  • another lawful transfer mechanism available under the GDPR.

The European Commission recognizes SCCs as one of the mechanisms that may be used for transfers of personal data from the EEA to third countries.

​

7. Data Retention

​

I retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Different retention periods may apply depending on the type of data.

Generally:

  • Contact enquiries: retained for as long as reasonably necessary to respond to the enquiry and manage any resulting relationship.

  • Client and booking information: retained for the duration of the client relationship and afterwards for as long as necessary for legal, accounting, tax, dispute-resolution or legitimate business purposes.

  • Payment and accounting records: retained for the period required by applicable tax and accounting laws.

  • Marketing data: retained until you withdraw consent or otherwise unsubscribe, unless another lawful basis for retention applies.

  • Technical and security logs: retained for a period appropriate to the security and operational needs of the website and service providers.

When personal data is no longer necessary, it will be deleted or anonymized where reasonably possible.

​

8. Your Rights Under the GDPR

​

If the GDPR applies to you, you may have the following rights:

  • the right to access your personal data;

  • the right to correct inaccurate or incomplete personal data;

  • the right to request deletion of your personal data;

  • the right to request restriction of processing;

  • the right to object to certain processing;

  • the right to data portability, where applicable;

  • the right to withdraw consent at any time where processing is based on consent;

  • the right not to be subject to certain solely automated decisions producing legal or similarly significant effects.

You may also object to direct marketing at any time.

To exercise your rights, contact:

wojciech@wojciechfilip.com

I may need to verify your identity before responding to a request where reasonably necessary to protect your personal data.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

If you are located in Poland, the relevant supervisory authority is the President of the Personal Data Protection Office (UODO).

​

9. Privacy Rights in the United States

​

United States privacy laws vary by state. Depending on your state of residence and whether the relevant legal thresholds apply to my business, you may have additional rights under applicable state privacy laws.

These rights may include, where applicable:

  • the right to know what categories of personal information are collected;

  • the right to access personal information;

  • the right to request correction of inaccurate information;

  • the right to request deletion of personal information;

  • the right to obtain information about how personal information is used or disclosed;

  • the right to opt out of certain forms of sale or sharing of personal information;

  • the right to opt out of certain targeted advertising or profiling;

  • the right to limit certain uses of sensitive personal information, where applicable;

  • the right to non-discrimination for exercising applicable privacy rights.

To exercise applicable privacy rights, contact:

wojciech@wojciechfilip.com

I will handle requests in accordance with the privacy laws applicable to you.

California residents

If California privacy law applies to you, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), subject to applicable exemptions and thresholds.

California privacy requirements may include specific disclosures concerning categories of personal information collected, purposes of collection, sources, disclosures, and applicable consumer rights.

I do not sell personal information for monetary consideration.

If my website or services are configured in a manner that constitutes "sharing" of personal information for cross-context behavioral advertising under applicable California law, applicable opt-out mechanisms will be made available.

​

10. Cookies and Similar Technologies

​

My website may use cookies and similar technologies for purposes such as:

  • essential website functionality;

  • security;

  • remembering preferences;

  • website analytics;

  • understanding website performance;

  • marketing or advertising, where applicable.

Where required by applicable law, non-essential cookies will only be activated after obtaining the appropriate consent.

You can manage your cookie preferences through the cookie consent mechanism provided on the website and, where applicable, through your browser settings.

Wix provides tools for displaying cookie banners and recording visitor consent.

You can review and manage your cookie preferences at any time using the privacy settings available on the website.

​

11. Marketing Communications

​

If you subscribe to my newsletter or marketing communications, I may send you emails concerning webinars, group calls, personal transformation content, coaching services and related offers.

Where consent is required, marketing emails will only be sent after you provide the appropriate consent.

You can unsubscribe at any time by:

Unsubscribing from marketing communications does not prevent me from sending essential transactional or service-related communications, such as booking confirmations or information necessary to provide a service you have requested.

​

12. Webinars, Online Sessions and Recordings

​

If a webinar, group call or online session is recorded, participants will be informed before or at the beginning of the recording.

Recordings may contain personal information, including your name, image, voice, questions or other information you voluntarily provide during the event.

Where required by applicable law, appropriate consent will be obtained before recording or using such information.

If an event is not recorded, no recording of the event will be intentionally made by me.

​

13. Data Security

​

I take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include:

  • encrypted HTTPS connections;

  • access controls;

  • password and account security measures;

  • restricted access to personal data;

  • use of reputable third-party service providers;

  • appropriate software and system security measures.

No method of transmitting or storing information is completely secure, and therefore I cannot guarantee absolute security.

​

14. Children's Privacy

​

My services and website are intended for adults.

I do not knowingly collect personal data from children for the purpose of providing coaching or personal transformation services.

If you believe that a child has provided personal data to me without appropriate authorization, please contact me at:

wojciech@wojciechfilip.com

​

15. Third-Party Websites and Services

​

My website may contain links to third-party websites or services, including social media platforms, video platforms, payment providers or webinar platforms.

I am not responsible for the privacy practices, content or security of third-party websites.

I encourage you to review the privacy policies of third-party services before providing them with personal information.

​

16. Changes to This Privacy Policy

​

I may update this Privacy Policy from time to time to reflect changes in my services, technology, legal requirements or data-processing practices.

The latest version will always be published on this website together with the date of the latest update.

​

17. Contact

​

If you have any questions about this Privacy Policy or the way I process your personal data, please contact:

Wojciech Filip
Email: wojciech@wojciechfilip.com

​

bottom of page