Privacy Policy

This policy applies to use of the site, initial inquiries through the site forms, WhatsApp, telephone and email, and appointment scheduling in Google Calendar. It explains what information is collected, the purposes it serves, how it is stored, to whom it may be disclosed, and the rights relating to that information.

1. Who is responsible for the information?

The site and the business information described in this policy are managed by Elena Driga, the controller of the information. Only Elena is authorized to access inquiries and the appointment calendar. For privacy-related questions:
Phone: 055-932-3131
Email: drigaelen@gmail.com

2. What information is collected on the site?

The site does not send form data to its own server or database. When you continue, the details are transferred to WhatsApp/Meta to prepare a draft; Elena receives them only after you press Send in WhatsApp. The following information may be provided or collected:

• Full name
• Phone number
• Email address
• Area of interest: personal coaching, talk, workshop, initial consultation or other
• Contact-message or general-question content typed by the user, plus optional consent for marketing or separate contact about possible anonymous publication
• Interactive resilience and emotion choices, such as a compass direction, quiz answers and a derived result; these are stored locally in sessionStorage
• Basic technical data required to deliver and secure the site, such as IP address, path, request time, browser type and device type
• Cloudflare and the hosting provider may set essential security cookies and process technical data to protect the site and prevent abuse
• Color-theme, accessibility and cookie-notice preferences stored in localStorage
• Information voluntarily shared via WhatsApp, phone or email
• After an appointment is scheduled, a minimal operational record may be created in Google Calendar containing only a first name or initials, contact method, date, time, format or location, and appointment status; it must not include the reason for the inquiry or emotional, medical or therapeutic content

3. For what purposes is the information used?

• Getting back to people who reached out through the site
• Scheduling and operational management of an intro call, appointment, talk, workshop or other service
• Responding to questions and requests
• Improving the site's user experience
• Site security and preventing misuse
• Sending updates, content or marketing offers only to those who have given explicit consent

4. Is providing information mandatory?

There is no legal obligation to provide information on the site. Sharing information depends on the user's will and consent. However, without basic contact details we cannot get back to you or handle your inquiry.

5. To whom may the information be disclosed?

• Lovable and Cloudflare for hosting, site delivery, security, technical logs and abuse prevention
• WhatsApp/Meta when a WhatsApp link containing a message draft is opened
• Google/Gmail when the user chooses to contact Elena by email, and Google Calendar after an appointment is scheduled to retain minimal scheduling details
• Authorized bodies as required by law

Access to the business accounts and calendar is limited to Elena. Personal information is not sold. WhatsApp/Meta, Google, Lovable and Cloudflare are global providers and may process information outside Israel under their policies and applicable data-transfer arrangements.

6. Cookies and measurement tools

Cloudflare sets the essential __cf_bm security cookie for approximately 30 minutes. The site also uses localStorage for display, accessibility and cookie choices, and sessionStorage for resilience and emotion exercises. Lovable Visitor Analytics is blocked by default and runs only after an explicit Allow analytics action. When enabled, Lovable processes visit and page data, visit duration, bounce rate, traffic source and device type for statistics and site improvement. The choice is retained in localStorage and a secure authorization cookie for up to 180 days and can be withdrawn at any time. Google Analytics, Meta Pixel and advertising tools are not enabled.

7. Data retention

The site itself does not retain a copy of form content. Data remains in browser memory until navigation, refresh or closure. The compass direction remains in sessionStorage for up to two hours; other exercise data remains for the browser session. localStorage preferences remain until changed, reset or cleared, and the __cf_bm cookie lasts about 30 minutes. An initial inquiry that does not become an engagement will remain in Elena's WhatsApp or Gmail accounts for up to 12 months after the last substantive contact; if an engagement is formed, necessary operational correspondence will remain for up to 12 months after it ends. Unnecessary sensitive information will be deleted as early as possible, generally within 30 days after the inquiry is closed. A completed appointment record in Google Calendar will be retained for up to 24 months after the last appointment, and a cancelled or missed appointment for up to 12 months. If and when marketing activity begins, evidence of optional consent will be retained while that consent is valid; after withdrawal, and subject to an orderly marketing and suppression mechanism being in place, a minimal record of the consent and withdrawal will be retained for up to seven years to prevent further contact and demonstrate compliance. Infrastructure logs are retained by Lovable and Cloudflare under provider policies; where Elena controls the period, routine logs will be limited to 90 days and security records that must be retained will be kept for 24 months. Information needed for a specific dispute or legal duty may be kept only for as long as necessary.

8. Information security

We take reasonable and accepted measures to protect information. However, no digital system is fully secure, and therefore complete protection against unauthorized access cannot be guaranteed.

9. User rights

• Request access to information held about you
• Request correction of information that is inaccurate, incomplete or outdated
• Request deletion of information, to the extent permitted by law
• Withdraw consent to marketing communications
• Review information about the site's essential browser storage and cookies

Privacy inquiries: drigaelen@gmail.com

10. Sensitive information and personal content

Please do not submit medical, mental-health, sensitive or particularly personal information through the site form beyond what is needed for initial contact. Medical, therapeutic or sensitive personal details must not be included in a calendar event title or description. If such information is nevertheless shared voluntarily, it will be used only to handle the inquiry and in accordance with this policy.

11. Photos and videos from the field

Photos and videos from events or workshops will be shown on the site only when proper permission exists or when the content is edited in a way that does not unnecessarily expose personal details.

12. Minors

The site is not intended for use by minors without the approval of a parent or guardian.

13. Changes to this policy

We may update this policy from time to time. The last update date appears at the top of the policy.

Governing language

This document was originally written in Hebrew. In the event of any discrepancy between the Hebrew version and translations into other languages, the Hebrew version prevails.