Legal information

Privacy policy

Last updated: 21 August 2026

This privacy policy explains how personal data is processed when you visit growwithandra.com, contact Grow with Andra or use the link to book an introductory conversation. It is intended to provide the information required by the EU General Data Protection Regulation (GDPR).

1. Data controller

The controller within the meaning of the GDPR is:

2. Visiting this website

The website is delivered through Cloudflare. When you open a page, technical data is processed so the page can be delivered securely. This may include your IP address, the date and time of the request, the requested URL, referrer information, browser and operating-system information, device information and the HTTP response status.

The purpose is to deliver the website, maintain its stability and security, prevent abuse and investigate technical or security incidents. The legal basis is our legitimate interest in operating a secure and reliable website (Article 6(1)(f) GDPR). Technical logs are retained only for as long as needed for these purposes and according to the hosting account’s configured or standard retention periods. Information isolated for a security incident may be kept until the incident has been resolved and any applicable legal claims have expired.

Hosting and security provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare may process data outside the European Economic Area. Depending on the transfer, Cloudflare relies on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. See Cloudflare’s privacy policy and data processing addendum.

3. Email enquiries

If you email us, we process the information you provide, such as your name, email address, message and related correspondence, together with technical email metadata. Please do not send medical records, diagnoses or other highly sensitive information in an initial enquiry.

We use this information to respond to you, take steps at your request before entering into a coaching agreement and manage any resulting relationship. The legal basis is Article 6(1)(b) GDPR where your message concerns a possible or existing contract. For other enquiries, the legal basis is our legitimate interest in responding and communicating about the business (Article 6(1)(f) GDPR).

Enquiries that do not lead to a coaching relationship are deleted within six months after the conversation is closed, unless there is a legal reason to keep them longer. If a contractual relationship results, relevant correspondence may be retained for the duration of the relationship and afterwards for applicable statutory retention and limitation periods.

Email is currently provided through a personal Google account, rather than a Google Workspace business account. Google may process account and message data in countries outside the European Economic Area under the safeguards described in its policies. See Google’s privacy policy and data-transfer frameworks.

4. Booking a conversation

The “Choose a time” buttons open an external Google Calendar booking page. No Google booking form is embedded in this website. When you follow that link, Google processes information under its own privacy policy. If you make a booking, Grow with Andra receives the information you enter, such as your name, email address, chosen date and time, time zone and any answers or notes you add.

We use booking data to arrange and hold the conversation, send booking-related messages and take steps at your request before a possible coaching agreement. The legal basis is Article 6(1)(b) GDPR. If no coaching relationship follows, booking information is deleted within six months after the appointment or last related contact, unless it must be kept for a legal claim or another legal obligation. If you become a client, relevant information is retained according to the rules applying to the coaching relationship.

The booking calendar is connected to the same personal Google account used for email. Booking provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data outside the European Economic Area. Details are available in Google’s privacy policy.

5. Google Meet sessions

Introductory conversations and coaching sessions are held online using Google Meet through a personal Google account. To provide a meeting, Google processes information such as participant names and email addresses, meeting identifiers and technical, device, performance and diagnostic data. During the meeting, Google transmits audio, video, chat and any content participants choose to share. Meetings are encrypted in transit.

This processing is necessary to hold the conversation or provide the agreed coaching service (Article 6(1)(b) GDPR). Grow with Andra does not record Google Meet sessions. Google may process meeting data outside the European Economic Area under the safeguards described in its policies. See Google’s Google Meet privacy information and privacy policy.

The website itself does not ask you to submit coaching notes or health information. During a coaching conversation, you may choose to discuss personal matters. If special-category data, such as health information, needs to be intentionally processed beyond the live conversation, you will receive additional information and be asked for explicit consent where required. Coaching is not medical care or psychotherapy.

6. Cookies and analytics

This version of the website does not use advertising cookies, analytics cookies, tracking pixels or embedded third-party media. Fonts are served locally. Cloudflare may use strictly necessary security technologies when required to protect the website; these are not used for advertising. If analytics, embedded content or other optional technologies are added later, this policy and the cookie information will be updated before they are enabled, and consent will be requested where required by law.

7. External links

The website links to Google Calendar and Instagram. Data is not sent to these services merely because the links appear on the page. When you follow a link, the relevant provider receives the technical information needed to open its page and processes data under its own terms. We do not control those external websites.

8. Data recipients

Personal data is shared only where necessary with service providers supporting the website, email and booking functions, as described above; professional advisers where needed; and public authorities or courts where disclosure is legally required. We do not sell personal data and do not use it for automated decision-making or profiling.

9. Your rights

Subject to the conditions in the GDPR, you may have the right to:

• request access to your personal data and receive a copy;
• have inaccurate or incomplete data corrected;
• request erasure or restriction of processing;
• receive data you provided in a portable format;
• object to processing based on legitimate interests; and
• withdraw consent at any time for future processing, where consent is the legal basis.

To exercise a right, email andracocann@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live, work or believe an infringement occurred. The German Federal Commissioner provides guidance on finding the competent German supervisory authority.

10. Providing your data

You are not legally required to contact us or book a conversation. However, we need the contact and scheduling information described above to respond to you or arrange a booking. Without it, we may not be able to provide the requested service.

11. Policy updates

This policy may be updated when the website, service providers or legal requirements change. The date at the top of this page identifies the current version.