Privacy Policy

Version of 17 September 2026

I, Patricia Aeberli, The Inner Power Revolution, based in Reinach, Switzerland, am committed to processing your personal data responsibly and confidentially in accordance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws in the countries where I offer my services (USA, Canada, Australia, New Zealand).

1. Purpose of this Privacy Policy

This Privacy Policy explains how I collect, use, store and protect your personal data when you visit my website, book a session, use my services, purchase or download a digital product or resource, or otherwise get in touch with me.

2. What Personal Data I Process

I only process personal data that is necessary for providing my services and managing my business.

This may include:

Contact information (such as your name, address, telephone number and email address)
Booking information (appointments, selected services and booking history)
Session information (including brief internal session notes and personal information that you voluntarily share with me where relevant to our work together)
Purchase and download information (such as digital products or resources purchased or requested)
Payment information (related to invoices and payments; payment details are processed through the payment providers offered during checkout, and I do not store your credit card details)
Communication records, including emails and other correspondence
Technical information (in particular IP address, browser type, device information and website usage data)

I receive this information:

directly from you,
through your online booking,
or through the third-party service providers used to provide my services, as described in Section 6 of this Privacy Policy.

3. Why I Process Your Data

Your personal data is processed solely for the purpose of:

providing the services you have requested,
scheduling and managing appointments,
conducting online sessions,
maintaining brief internal session notes to support continuity between sessions,
processing and fulfilling purchases of digital products,
providing free resources you have requested,
processing payments,
complying with legal record-keeping obligations,
responding to enquiries,
sending newsletters (only with your explicit consent),
maintaining the security and functionality of my website.

4. Legal Basis for Processing

Where the GDPR (and equivalent laws) applies, I process your personal data on one or more of the following legal bases:

performance of a contract or steps prior to entering into a contract (e.g., providing services you have booked, maintaining brief internal session notes to support continuity between sessions, or providing digital products you have purchased),
compliance with legal obligations (e.g., tax and commercial record-keeping requirements),
my legitimate interests in operating and securing my business, provided these do not override your rights and interests,
your consent, where required, particularly for sending newsletters.

5. Sharing Your Data

Your personal data will only be shared where necessary:

to provide my services,
to comply with legal obligations,
or where you have given your explicit consent.

Where your explicit consent is required for the sharing of personal data, this consent will be obtained and documented before the data is shared.

I never sell your personal data.

6. Third-Party Service Providers

I work with trusted service providers who process personal data on my behalf. These providers are contractually obligated to protect your data and comply with applicable data protection laws.

Website, Online Booking, Digital Products and Client Management – Wix.com Ltd.

My website is operated through Wix.com Ltd.

Wix provides services including:

website hosting
online booking and appointment scheduling
contact and sign-up forms
client and contact management
the sale and delivery of digital products
the delivery of requested free resources
automated emails related to bookings, purchases and requested resources

Depending on your use of the website, Wix may process personal information on my behalf. Wix is based in Israel and may transfer data to the USA and other countries. Appropriate safeguards (such as Standard Contractual Clauses) are in place.

Website Analytics – Google Analytics

I use Google Analytics, a service provided by Google, to understand how visitors use my website. Google Analytics may process information such as your IP address, device and browser information, pages visited and interactions with the website.

Where required, analytics data is processed in accordance with the consent preferences you select through the website's cookie banner.

Google may process data in countries outside Switzerland or the EEA. Appropriate safeguards for international data transfers apply as described in Section 7 of this Privacy Policy.

Google Privacy Policy: https://policies.google.com/privacy?hl=en-US

Website Analytics and Session Recordings – TWIPLA

I use TWIPLA to analyse how visitors use my website and to improve the user experience. This may include website usage statistics and session recordings showing interactions with the website, such as clicks, scrolling and navigation behaviour.

Where required, this data is processed in accordance with the consent preferences you select through the website's cookie banner.

TWIPLA Privacy Policy: https://www.twipla.com/en/support/legal-data-privacy-certificates/standard-integration/privacy-policy

Website Analytics and Session Recordings – Microsoft Clarity

I use Microsoft Clarity to understand how visitors interact with my website and to improve the user experience. Clarity may collect information about website usage and interactions, including clicks, scrolling and navigation behaviour, and may provide session recordings and aggregated usage information.

Where required, this data is processed in accordance with the consent preferences you select through the website's cookie banner.

Microsoft may process data in countries outside Switzerland or the EEA. Appropriate safeguards for international data transfers apply as described in Section 7 of this Privacy Policy.

Microsoft Privacy Statement: https://www.microsoft.com/en-US/privacy/privacystatement

Email Communication – Google

I use Google services to manage my business email communications. Google may process personal data contained in emails, including names, email addresses, message content, attachments and technical communication data.

Google may process data in countries outside Switzerland or the EEA. Appropriate safeguards for international data transfers apply as described in Section 7 of this Privacy Policy.

Google Privacy Policy: https://policies.google.com/privacy

Online Sessions – Zoom Video Communications Inc.

I use Zoom to conduct online sessions.

Zoom may process your name, email address, IP address and technical connection data.

Sessions are not recorded.

Important: Zoom is a US-based company. Data transfers to the USA are based on the EU-US Data Privacy Framework (DPF) and/or Standard Contractual Clauses.

Payment Processing – Stripe and PayPal

Depending on the payment method selected during checkout, online payments may be processed by Stripe or PayPal. These payment providers process payment and transaction information in accordance with their respective privacy policies. I do not store your credit card details.

Stripe Privacy Policy: https://stripe.com/privacy

PayPal Privacy Statement: https://www.paypal.com/ch/legalhub/paypal/privacy-full?locale.x=en_CH

7. International Data Transfers

Some of my service providers are based outside Switzerland and the European Economic Area (EEA), including in the USA, UK, Israel and other countries. Where personal data is transferred to these countries, I ensure that appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission and/or the Swiss FDPIC
The EU-US Data Privacy Framework (DPF) for US-based providers certified under this framework
Other legally approved transfer mechanisms

You have the right to request information about the specific safeguards applied to transfers of your personal data.

8. Data Retention

Your personal data is retained only for as long as necessary:

to provide my services,
to comply with legal obligations,
or to protect legitimate business interests.

Retention periods may vary depending on the type of data and the purpose for which it is processed.

Payment and accounting information is retained for the period required under applicable tax and commercial law.

Internal session notes are retained only for as long as they are reasonably needed to support the client relationship and are deleted when they are no longer required for that purpose, unless continued retention is required by law.

Data processed by third-party service providers is subject to their applicable retention practices and legal obligations.

9. Data Security

I take appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, alteration or disclosure.

These include:

encrypted data transmission (HTTPS/SSL),
password-protected access to the systems and devices I use,
encrypted local storage of internal session notes on an access-protected device,
appropriate security measures provided by the third-party service providers I use.

10. Cookies

My website uses cookies that are necessary for the operation of the site (e.g., session cookies for the booking system). Cookies are small text files that are stored on your device when you visit my website. They help me to make the website work properly and to understand how the website is used.

Additional cookies may be used to improve functionality or analyse website usage where you have provided your consent through the website's cookie banner. You can manage your cookie preferences at any time through your browser settings or the cookie banner on my website.

11. Your Rights

Subject to applicable law (including revFADP, GDPR, UK GDPR and other applicable data protection laws), you have the right to:

access your personal data and receive a copy,
request correction of inaccurate or incomplete information,
request deletion of your data (right to erasure), where applicable,
restrict or object to processing where applicable,
receive your data in a structured, commonly used and machine-readable format (data portability),
withdraw your consent at any time (without affecting the lawfulness of processing before withdrawal),
lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where applicable, your local EU supervisory authority.

Requests can be sent using the contact details in Section 13 below. I will respond to your request within 30 days, or as otherwise required by applicable law.

12. Data Protection Authorities

You have the right to lodge a complaint with a data protection authority if you believe that the processing of your personal data violates applicable data protection law.

Switzerland:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
Website: https://www.edoeb.admin.ch/

European Union:

Your local supervisory authority (e.g., in Germany: the state data protection authority; in France: CNIL; etc.)
List of EU authorities: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

United Kingdom:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk/

Other countries:

Please contact the relevant data protection authority in your jurisdiction.

13. Data Controller

Patricia Aeberli
The Inner Power Revolution
4153 Reinach
Switzerland

📞 +41 79 890 84 10

✉️ hello@patriciainnerpower.com

🌐 www.patriciainnerpower.com

14. Changes to this Privacy Policy

I reserve the right to update this Privacy Policy at any time, particularly to reflect changes in legal requirements, technology or the services I use.

The version published on my website at the time of your visit shall apply.

I will notify you of any material changes via email or through a prominent notice on my website.

15. Language

This Privacy Policy is provided in English. If a translation is made available, the English version shall prevail in the event of any inconsistency.

16. Contact

If you have any questions about this Privacy Policy or my data protection practices, please contact me using the details in Section 13 above.