Privacy Policy
Last updated: 5 October 2026 (draft date; to be updated at go-live sign-off)
Coach Jéo is the practice of Juergen Stolzlechner (Jürgen Stolzlechner), owner of GSD-S Limited. Coach Jéo is the trading name of GSD-S Limited, Unit 1603, 16/F, The L. Plaza, 367-375 Queen’s Road Central, Sheung Wan, Hong Kong, which is the operator, contracting party and data controller.
Contact: hello@coachjeo.com · WhatsApp
This policy explains what personal data is collected when you visit coachjeo.com, book a call or work with Coach Jéo, why, and what your rights are.
1. Data controller
The controller is GSD-S Limited (Hong Kong), as named above. We have not appointed an EU representative under Art. 27 GDPR.
2. What we collect and why
- Booking details (Cal.com): name, email address, the time you book and any note you add. Used to arrange and run your chemistry call and sessions.
- Email correspondence (Microsoft 365): your messages and our replies. Used to answer you and to run the engagement.
- Payment data (Airwallex, PayPal): payments are handled by these providers. We do not store card data. We keep a record of the payment for accounting.
- Coaching session content and notes: what you choose to share in sessions, and our notes. Notes are stored in the GSD-S Limited Notion and Microsoft 365 accounts. See section 5.
- Video sessions: sessions run mostly on Microsoft Teams, and exceptionally on Google Meet or Zoom. [OWNER TO CONFIRM whether sessions are ever recorded]
- WhatsApp (optional channel): if you contact us there, your phone number and messages.
- Website server data: when you load this site, Cloudflare Pages processes your IP address, user agent, the URL you request and a timestamp, in order to serve the site. We do not access or retain these logs; Cloudflare’s own retention applies. [OWNER TO CONFIRM Cloudflare Web Analytics is OFF]
3. Website, cookies and tracking
This site uses no analytics and no advertising cookies. [OWNER TO CONFIRM: state this only after verifying it on the live site with Cal.com integrated]
Nothing from Cal.com is loaded until you click “Show calendar”. Once you do, or if you open the Cal.com booking page, Cal.com may set cookies and process data under its own policy (see section 6).
4. Legal bases (GDPR Art. 6)
- Contract: to take steps at your request before a contract and to deliver the coaching you buy.
- Legitimate interests: to answer enquiries, run and secure the website and manage the practice, where these interests are not overridden by your rights.
- Consent: where we ask for it, for example for anything you share that is sensitive (section 5). You can withdraw it at any time.
- Legal obligation: to keep accounting records.
[OWNER TO CONFIRM which basis applies to which data type, and the specific legitimate interests]
5. Sensitive information you share
Coaching can touch health, relationships or beliefs. We do not ask for this kind of information. You choose what to share. Anything you share is used only to deliver the coaching, on the basis of your explicit consent given by sharing it (Art. 9(2)(a) GDPR). It is never used for marketing or profiling, and you can ask us to delete it. Coaching is not therapy.
6. Who processes data on our behalf
We use these providers. Each has its own privacy policy:
- Cal.com: booking.
- Airwallex: payments.
- PayPal: payments.
- Microsoft: email (Microsoft 365), storage and Microsoft Teams video sessions.
- Cloudflare: website hosting and DNS.
- WhatsApp / Meta: optional contact channel.
- Google (Meet) and Zoom: video sessions, only in exceptional cases.
- Notion: session notes. [OWNER TO CONFIRM: added here because session notes are stored in Notion; it was not on your processor list]
We do not sell personal data.
7. International transfers
The controller is based in Hong Kong, and some providers are based in the United States or elsewhere. Where data leaves the EU or EEA, we rely on the providers’ standard contractual clauses or equivalent safeguards (for example SCCs, or the EU–US Data Privacy Framework where a provider is certified). You can ask us for details by email. [OWNER TO CONFIRM: verify each provider’s data processing agreement covers this before publishing]
8. How long we keep data
- Cal.com bookings: 24 months after the last session.
- Emails: 24 months after the last contact.
- Session notes: deleted 12 months after the engagement ends.
- WhatsApp: 12 months, then the chat is deleted. [OWNER TO CONFIRM the 12 months run from the last message]
- Chemistry call with no engagement: deleted within 6 months. [OWNER TO CONFIRM how this fits the 24-month email period for the same person]
- Payment and accounting records: 7 years (accounting records required under Hong Kong law).
- Website server logs: Cloudflare’s retention applies.
You can ask us to delete your data earlier, except where we must keep it by law.
9. Confidentiality and its limits
Sessions are confidential. We disclose information about a client only: (a) where required by law, such as a court order or a request from an authority under applicable law; (b) where there is a serious risk of harm to the client or others; (c) with the client’s written consent; or (d) in anonymised form for professional supervision. The same limits are set out in the Terms & Conditions.
10. Your rights
You have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable form and withdraw consent at any time. To use any of these rights, email hello@coachjeo.com. You also have the right to complain to a data protection supervisory authority, for example in the country where you live or work.
11. Children
Coaching is for adults aged 18 and over only. We do not knowingly collect data from anyone under 18.
12. Changes to this policy
We may update this policy. The “Last updated” date above shows the current version. [OWNER TO CONFIRM how material changes are communicated]