Privacy Policy 

Last updated: February 2026

1. Data Controller

The data controller for personal data processed through this website and my services is Elisabet López Frigola, professional brand Ellie Health Coach.
Contact email: ellie@elliehealthcoach.com.

2. What Data I Collect (and how I collect it)

I only collect personal data that you choose to share. This may happen when you contact me by email, book a session, join a video call, or communicate with me during the coaching process.

Depending on your request, I may process:

  • Contact details (name, email, time zone).

  • Service and administrative details (session scheduling, invoices, payment status).

  • Health and lifestyle information you share for coaching purposes (for example: symptoms, food tolerance, relevant health history, medications/supplements, lab results, sleep, stress, and activity). This may include health data, which is considered a special category of personal data under GDPR.

I do not intentionally collect unnecessary sensitive information. Please avoid sharing information you do not want processed.

3. Why I Process Your Data (Purposes)

I process your data to:

  • Respond to enquiries and provide information about my services.

  • Provide nutritional coaching services (assessment, session preparation, session delivery, and follow-up).

  • Manage bookings and client communication.

  • Manage billing and payments.

  • Comply with legal obligations when applicable.

I do not send marketing emails unless you explicitly request them or opt in.

4. Legal Basis for Processing

I rely on the following legal bases under GDPR:

  • Performance of a contract: to provide the requested services and manage the client relationship.

  • Consent: for specific situations where consent is required.

  • For health data, processing is carried out under GDPR Article 9 exceptions, typically your explicit consent when you provide health information for coaching purposes.

You may withdraw consent at any time by emailing ellie@elliehealthcoach.com. Withdrawal does not affect processing already carried out.

5. How Long I Keep Your Data (Retention)

I keep your data only as long as needed for the purposes described above:

  • Enquiries: for the time necessary to respond and follow up.

  • Clients: for the duration of the professional relationship and afterwards only as required for legal, accounting, or defence of potential claims.
    When data are no longer needed, they will be securely deleted or anonymised.

6. Who I Share Data With (Service Providers)

I do not sell personal data or share them for advertising. I use a small number of essential service providers (processors) to operate my services, including:

  • Website and email hosting provider: cdmon.

  • Secure storage: iCloud (for storing client-related documents/notes).

  • Video calls: Google Meet; FaceTime if requested by the client.

  • Messaging (if you choose it): WhatsApp. If you prefer, you can share sensitive details by email instead of WhatsApp. WhatsApp messages are end-to-end encrypted, and cloud backups depend on each user’s settings (you can enable end-to-end encrypted backups in WhatsApp).

  • Payments (depending on your location):

    • Stripe (card payments).

    • Bank transfer (US clients only, if you prefer this option).

    • Bizum (Spain only, if agreed).

These providers process data under contractual terms and only to deliver the services described here.

7. International Data Transfers

Some providers may process data outside the European Economic Area. When this happens, appropriate safeguards (such as Standard Contractual Clauses) are used where required.

8. Your Rights

You have the right to access, rectify, erase, restrict processing, request portability, and object where applicable.
To exercise your rights, email ellie@elliehealthcoach.com with the subject “Data Protection”.

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD).

9. Data Security

I apply reasonable technical and organisational measures to protect personal data. No system is completely secure, but I take privacy seriously and keep data access limited and controlled.

10. Cookies & Analytics

This website may use essential cookies and (where applicable) analytics cookies. Details are available in the Cookie Policy.

11. Minors

My services are intended for adults. Individuals under 14 should not submit personal information through this website.

12. Updates

This policy may be updated to reflect legal or operational changes. The latest version will always be available on this page.

13. Contact

For privacy-related questions: ellie@elliehealthcoach.com.