Privacy & Cookies Policy

1. Who is responsible for your data

I, Lorenzo Pisani, am a psychologist and CBT life coach, and I run this website under my own name. I am the data controller for the personal data processed through this website and in my practice, which means I decide why and how your data is used.

2. What data I collect, why, and on what legal basis

When you contact me

If you write to me by email, phone, WhatsApp or the contact details on this site, I process your name, your contact details and the content of your message. I use this to reply to you and, if you wish, to arrange a first appointment. Legal basis: your consent and steps taken at your request before a possible service agreement (Article 6(1)(a) and (b) GDPR).

When you book an appointment

Appointments are booked through Doctena, an independent booking platform. The details you enter there (name, contact details, appointment information) are processed by Doctena under its own privacy policy, and I receive what I need to prepare and hold your appointment. Legal basis: steps before a contract and the performance of our service agreement (Article 6(1)(b) GDPR).

When you sign up for events and workshops

If you complete the signup form, I process your first name, last name, city, country and email address to send you occasional news about events and workshops. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time using the unsubscribe link in any message, or by emailing me.

Health and other sensitive information

As a psychologist and coach, I may process information about your health, emotional wellbeing or personal life. This is a special category of data under the GDPR. I process it only to provide you with psychological support and coaching, on the basis of Article 9(2)(h) GDPR (provision of health and social care by a professional bound by confidentiality) and, where relevant, your explicit consent (Article 9(2)(a)). I am bound by professional confidentiality.

Technical data and server logs

When you visit the site, my hosting provider automatically records limited technical data such as your IP address, browser type and the pages you view, to keep the site secure and working. Legal basis: my legitimate interest in the security and proper functioning of the website (Article 6(1)(f) GDPR).

Website statistics

I use privacy-friendly, cookieless analytics that measure visits in aggregate. They do not build profiles about you and do not track you across other websites. Legal basis: my legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR).

3. Cookies and embedded content

Cookies are small files stored on your device. This site uses two kinds:

• Essential cookies, needed for the site and the cookie banner to work. These are always active.
• Statistics cookies, set by Google Analytics to measure how the site is used. They are placed only if you accept them, and you can refuse or withdraw them at any time.
• Third-party content. Some pages embed services that may set cookies or receive your IP address when the content loads: Google Maps (the map on the contact page), Google reCAPTCHA (spam protection on forms), Google Fonts, and links or embeds to Instagram, Facebook, YouTube and LinkedIn.

You can accept or refuse non-essential cookies through the banner shown on your first visit, and you can change your choice at any time through your browser settings. Refusing them will not stop you from reading the site, though some embedded content may not display.

4. Who I share your data with

I never sell your data and I never share it for advertising. I use a small number of trusted providers who process data on my behalf, only as needed to run the service:

• Doctena, for appointment booking.
• MailPoet and my email delivery provider, for the events signup list and for sending messages. Subscriber details are stored within the website.
• My web hosting provider, which stores the website and its server logs.
• Google (Maps, reCAPTCHA, Fonts), which may receive technical data when that content loads.
• Meta (Facebook, Instagram, WhatsApp), LinkedIn and YouTube, only if you choose to contact me or click through on those platforms.

I may also disclose data where I am legally required to do so.

5. International data transfers

Some providers, such as Google and Meta, are based outside the European Union, mainly in the United States. When data is transferred outside the EU or EEA, it is protected by appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. How long I keep your data

• Contact messages: for as long as needed to handle your request and a reasonable period afterwards, then deleted.
• Client records: for the period required by my professional and legal obligations, then securely deleted.
• Events signup: until you unsubscribe or ask me to delete your details.
• Server logs and statistics: for a limited period, for security and measurement.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to data portability, and to withdraw your consent at any time (without affecting processing already carried out).

To exercise any of these, email me at info@freeyourlife.me. I will respond within one month.

You also have the right to lodge a complaint with the Luxembourg supervisory authority:

8. Security

I take reasonable technical and organisational measures to protect your data, including secure connections (HTTPS), restricted access, and professional confidentiality. No method of transmission over the internet is completely secure, which is why I ask you to keep sensitive details for our sessions.

9. Children

This website and my services are intended for adults. I do not knowingly collect personal data from children.

10. Changes to this policy

I may update this policy from time to time. The date shown at the top of the page indicates the latest version. Significant changes will be made clear on this page.

11. Contact

For any question about this policy or your data, please contact me: