Privacy Policy

Nature In You ("we", "us", "I") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why, how we use it, and the rights you have under the European Union General Data Protection Regulation (GDPR) and Portuguese data protection law.

1. Who is responsible for your data

The data controller is Kristina Kermanova, trading as Nature In You, based in Portugal. For any privacy question or request, contact: kristina@natureinyouwellness.com.

2. What data we collect

• When you use the contact form: your name, email address, and the content of your message.
• When you book a call or session: your name, email, and scheduling details, collected through our booking tool (Calendly).
• When you purchase a program or session: the information needed to take payment, handled securely by our payment provider (Stripe). We do not see or store your full card details.
• Technical data: our hosting provider may automatically log basic information such as IP address and browser type, to keep the site secure and running.

We do not currently use advertising or tracking cookies, and we do not run third-party analytics that profile you. Only essential cookies needed for the site to function may be used.

3. Why we use your data (legal basis)

• To respond to your enquiry — based on your consent when you contact us.
• To provide coaching, bookings, and to take payment — to perform a contract with you, or to take steps at your request before entering one.
• To keep the website secure and operational — based on our legitimate interest.
• To meet legal obligations — for example, keeping payment and tax records.

4. Who we share it with

We never sell your data. We share it only with trusted service providers who help us run the business, and only as needed:

• Calendly — appointment scheduling.
• Stripe — secure payment processing.
• Netlify — website hosting.
• Supabase — storage for blog content.

Some of these providers may process data outside the EU. Where that happens, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

5. How long we keep it

We keep your data only as long as needed for the purpose it was collected, or as required by law (for example, payment records kept for tax purposes). Enquiry messages are kept only as long as needed to help you, then deleted.

6. Your rights

Under the GDPR you have the right to: access your data; correct it; have it deleted; restrict or object to its use; receive a copy in a portable format; and withdraw consent at any time. To exercise any of these, email kristina@natureinyouwellness.com and we will respond within the timeframes required by law.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

7. Security

We use reputable providers and reasonable measures to protect your data. No method of transmission over the internet is completely secure, but we take care to safeguard the information you share with us.

8. Changes to this policy

We may update this policy from time to time. The "last updated" date above will always show the current version.

9. Contact

Questions about this policy or your data? Email kristina@natureinyouwellness.com.