Who is responsible
This website is run by Raluca Afloarei, trading as Coaching and Clarity. If you have a question about your data, or want to exercise any of the rights below, write to raluca.afloarei@gmail.com — it reaches me directly, not a support queue.
The short version
This site is close to inert. It sets no cookies unless you say yes to analytics. It loads no social widgets, no advertising pixels, no chat popups. Fonts are served from this website rather than from Google, so nothing about your visit reaches a third party before you choose.
Analytics — only if you agree
If you press Accept on the cookie bar, this site loads Google Analytics 4, which sets cookies (_ga and _ga_68C0MJDY28) and tells me things like which pages get read, roughly where visitors are, and which links get clicked. I use it to decide what to write more of. It does not tell me who you are.
If you press Decline, Google Analytics is never downloaded at all — not loaded and switched off, simply absent. No request leaves your browser towards Google, so not even your IP address is shared.
Your answer is remembered in your browser's local storage, not in a cookie. You can change it at any time:
Legal basis: your consent. Processor: Google Ireland Limited, with data also processed in the United States under the European Commission's standard contractual clauses. Analytics data is retained for 14 months.
Booking a discovery call
The booking buttons take you to Google Calendar's appointment scheduling. What you type there — your name, your email address, anything you add about your situation — goes to my Google Calendar so I can hold the slot and prepare. It is not used for marketing, and I do not add you to any list.
Legal basis: performing the appointment you asked for. Processor: Google Ireland Limited.
If you email me, I keep the message and my reply for as long as the conversation is useful, then delete it. Legal basis: my legitimate interest in answering you.
The contact form
What you type into the form on the contact page — your name, your email address, optionally which situation you're writing from, and your message — is emailed to me. No form service is involved. The form is handled by this website's own server, so your message is not passed to a third company on its way to me.
A copy is also written to a file on that server, and here is the honest reason: email sometimes fails silently. If the message vanished on its way to my inbox, I would never know you had written, and you would be waiting for a reply that never comes. The copy exists so that cannot happen. It is not published, not readable from the web, and not used for anything else. I delete copies once the conversation is finished, and in any case no later than twelve months.
The server also keeps a short-lived note that a message came from your connection — an irreversible hash of your IP address, not the address itself — for one hour, so the form cannot be used to send hundreds of messages. It is not linked to your message and cannot be turned back into your IP.
Legal basis: my legitimate interest in receiving and answering what you chose to send me. You are never obliged to use the form; the email address and the booking link do the same job.
Coaching sessions
If we work together, our coaching relationship is covered by a separate written agreement and by the ICF Code of Ethics. In short: what you tell me in a session stays between us, with only the narrow exceptions the law requires, and I explain those before we start. Any notes I keep exist to serve your work, are stored so that only I can read them, and are deleted when the engagement ends unless you ask me to keep them.
What I never do
- Sell or rent your data. There is no scenario in which this happens.
- Add you to a mailing list because you booked a call or sent an email.
- Use analytics to build a profile of you as an individual, or attempt to identify you.
- Run advertising trackers, remarketing pixels or social login buttons on this site.
Where your data goes
Three parties, no more: Google (analytics, only with consent; and calendar, only if you book), my email provider, and the company hosting this website. Each acts on my instructions. Where any of them processes data outside the European Economic Area, that transfer relies on the European Commission's standard contractual clauses.
Your rights
Under the GDPR you can ask me to show you the data I hold about you, correct it, delete it, restrict what I do with it, hand it over in a portable form, or object to a particular use. You can withdraw consent for analytics whenever you like, using the button above. I answer within 30 days, and it costs you nothing.
If you think I have handled your data badly and I have not put it right, you can complain to the data protection authority where you live. In Romania that is the ANSPDCP.
Changes
If this policy changes in a way that affects you, the date at the top changes with it. I will not quietly broaden what I do with your data.
