Privacy Notice

1. Identity and domicile of the responsible party

Leyla Ducy is responsible for the processing of your personal data.

Contact email for privacy matters

leyla@leyladucylab.com

Website

https://leyladucylab.com

2. Personal data that may be collected

Depending on how you interact with the site or the service, Leyla Ducy may collect:

• identification and contact data, including your name, email address, phone number, or WhatsApp number if you choose to share it;
• information you submit through forms or direct messages, including the content of your inquiry, what you have in mind, your availability, and other information you choose to provide;
• service-related information if you become a client, including scheduling records, session notes, action items, accountability check-ins, billing or invoicing data, and operational records needed to provide the service;
• technical or usage information generated by the website or by service providers used to operate it, such as IP address, browser or device type, timestamps, or basic form metadata, when available.

3. Sensitive personal data

The website contact form is not intended to request sensitive personal data. Please do not submit sensitive personal data through the initial website form unless it is strictly necessary.

If, in the context of a coaching relationship, the treatment of sensitive personal data becomes necessary, Leyla Ducy will handle that data with heightened care and, when required by law, will request express consent through the relevant channel.

4. Primary purposes of processing

Your personal data may be processed for purposes that are necessary for the relationship or your request, including to:

• respond to inquiries, messages, and requests for a clarity call;
• contact you, schedule calls or sessions, and send practical follow-up related to your request;
• evaluate whether coaching is a fit and, if applicable, provide the requested coaching service;
• maintain basic administrative records, notes, and accountability communications related to the service;
• manage payments, invoices, receipts, or tax-related compliance if paid services begin in the future;
• protect the security and operation of the site, communications, and related service tools.

5. Secondary purposes

At this stage, your data is not intended to be used for unrelated advertising sales or sold to third parties.

If Leyla Ducy later wishes to use your contact data for newsletters, promotional campaigns, or updates unrelated to your active request or service, this notice will be updated and, where required, the corresponding consent will be requested first.

6. Options to limit the use or disclosure of your data

You may request at any time that communications be limited to a specific channel, that your information not be used for optional follow-up unrelated to your current request, or that certain information be removed from messaging channels when no longer necessary, by writing to leyla@leyladucylab.com.

7. ARCO rights and revocation of consent

You may exercise your rights of access, rectification, cancellation, and opposition (ARCO), and you may revoke consent when applicable, by sending a request to leyla@leyladucylab.com with the subject line ARCO Request or Consent Revocation.

Your request should include:

• your full name;
• a means to contact you and send the response;
• documents that prove your identity and, if applicable, the representation of another person;
• a clear description of the personal data and the right you want to exercise;
• any document or information that helps locate the data.

Leyla Ducy will respond within 20 business days from receipt of the request and, if appropriate, will implement the requested action within the following 15 business days. These periods may be extended once for the same term when justified.

8. Transfers and service providers

Leyla Ducy does not sell your personal data.

For operational reasons, Leyla Ducy may use third-party service providers acting on her behalf to host the website or to support email, calendars, scheduling, videoconferencing, cloud storage, messaging, document management, invoicing, payment processing, or other tools reasonably needed to run the service.

These providers will only process personal data under instructions and for the purposes described in this notice. If a transfer to a third party distinct from a service provider requires consent under applicable law, the corresponding consent will be requested when required.

If you choose to communicate through third-party channels such as email or WhatsApp, your information may also be processed under those providers' own terms and privacy policies.

9. Retention of personal data

Personal data will be kept only for as long as necessary to fulfill the purposes described in this notice and to comply with applicable contractual, legal, accounting, tax, security, or recordkeeping obligations. When personal data is no longer necessary, it will be blocked, deleted, or suppressed as applicable.

10. Security measures

Leyla Ducy uses reasonable administrative, technical, and physical measures to protect personal data against loss, misuse, unauthorized access, alteration, or improper disclosure. No system can guarantee absolute security.

11. Changes to this privacy notice

Any substantial change to this privacy notice will be published on this page: https://leyladucylab.com/privacy

12. Contact

For questions about this notice or the processing of personal data, please write to leyla@leyladucylab.com.