1. The short version

• I collect what I need to work with you, and nothing to sell or trade.

• Recording, AI summaries and Voxer transcription only happen if you say yes. You can work with me without any of them.

• What you tell me about yourself, and what comes up in sessions, can be sensitive. I keep it only with your explicit consent.

• I keep my client records for three years after your last session, then delete them.

• You can see, correct or delete your data, and change your mind about a consent, by writing to me.

2. What I collect, why, and on what basis

Purchase & payment

What: your name, email, billing details and what you bought. I never see or store your card details. Why: to take payment, deliver what you bought, send your invoice and keep my accounts. Basis: our contract, and my legal duty to keep accounting records. Kept: five years from the end of the financial year, as Danish bookkeeping law requires.

Booking

What: your name, email and appointment details. Why: to schedule and manage your sessions. Basis: our contract. Kept: for as long as we work together plus 12 months.

Birth Data

What: your date, time and place of birth. Why: to calculate your Human Design and Gene Keys chart. Where: I enter it into Genetic Matrix, which calculates the chart, and keep it in your client record. Basis: our contract. Kept: three years after your last session.

Intake form (hypnosis sessions, Layer by Layer and The Frequency Leap)

What: what you'd like to work on and why you booked, in your own words. In Layer by Layer and The Frequency Leap this is a form when you buy and a short form each time you book a session. Why: so I can prepare, and so I can tell you before we meet if the work sits outside what I can offer. Basis: our contract and your explicit consent, which you give when you book or buy. Kept: three years after your last session.

Client record

What: my notes from our work: the questions I asked and your answers, what came up and what resolved, and your chart. Why: so we don't start from scratch each time, and so there's a record of our work if a question about it ever comes up. Basis: our contract and your explicit consent. Kept: in Dropbox, for three years after your last session.

You can ask to see your record at any time.

Sensitive information

What you write in an intake form, and what comes up in a session or on Voxer, can include information about your health, your beliefs or other private parts of your life. The law gives this kind of information extra protection. I only keep it with your explicit consent, and I use it only for our work together.

Session recordings

What: the video and audio of a Zoom session, or the audio alone if you choose that. When: only if you choose recording in the booking form. Why: so you have your session to return to, so I can prepare for our next one, and as a record of what took place. Basis: your consent. Kept: you receive your copy. Mine stays in Zoom's cloud storage for three years after your last session, then it's deleted.

AI summaries

What: a written summary of your session, made by Zoom's AI Companion. When: only if you choose it in the booking form. It's a separate choice from recording. Why: so you receive a summary alongside your recording, and to support my notes. Basis: your consent. Kept: with your client record, for three years after your last session.

Your personal recording (Layer by Layer)

What: a recording in my voice, made for you from your chart and something from your first session. Why: it's part of Layer by Layer. Basis: our contract and your explicit consent, since it draws on what came up in your session. Kept: you keep yours. Mine stays with your client record for three years after your last session, then it's deleted.

Voxer voice notes and messages

What: the voice notes and messages we exchange in The Frequency Leap. Why: they're part of the work. Basis: our contract. Kept: inside Voxer, under Voxer's own retention rules. I don't archive them separately.

Voxer transcription

What: a text version of your voice notes, made with Voxer's transcription. When: only if you've said yes. Why: to prepare for your sessions. Basis: your consent. Kept: deleted when your Leap closes.

Testimonials

What: the words you've agreed I can share, your first name, your Human Design type, profile and authority. When: only if you say yes. Why: to show what this work can be like. Where: on my website, and on my social channels if you've agreed to that. Basis: your consent, and your explicit consent where your words touch on your health or beliefs. Kept: until you ask me to remove them.

Email and enquiries

What: your email address and what you write to me. Why: to answer you. Basis: my legitimate interest in replying to people who contact me. Kept: two years after our last exchange.

Newsletter

What: your name and email, if you subscribe. Why: to send you newsletters and updates. Basis: your consent. Kept: until you unsubscribe, which you can do from any email.

Waitlists

What: your name and email, if you join a waitlist. Why: to write to you when sessions open, or when a place opens in The Frequency Leap. Basis: your request, as a step before a possible booking. Kept: until I've written to tell you it's open, and then deleted. You can ask to be taken off a waitlist at any time.

Joining a waitlist doesn't sign you up for the newsletter.

Website analytics

Squarespace's built-in analytics shows me aggregated, anonymised figures about how the site is used. No individual visitor is identified.

I also use Google Search Console, which shows me aggregated figures from Google about how my website and channels appear in Google Search, such as which searches lead to them. It places no cookies on this website and shows me nothing about individual people.

Basis: my legitimate interest in knowing how the site works for visitors.

3. What I share from my work

I may share general themes from my work in my content, never in a way that identifies you. If I'd like to use something specific from your sessions, or your words as a testimonial, I ask first. Section 2 describes what a testimonial includes.

4. Changing your mind

You can withdraw a consent at any time by writing to contact@frequencybymattie.com. It doesn't affect our work together.

• Session recording: I stop recording, and I delete my copy.

• AI summary: I turn it off for your sessions and delete the summaries I hold.

• Voxer transcription: I stop, and delete any transcripts.

• Intake form and client record: I delete them. I may then not be able to continue hypnosis work with you, because I can't do it responsibly without them.

• Testimonial: I take your words down from my website and my own channels and delete my record. I can't recall copies other people have already saved or shared.

If a complaint or legal claim about our work has already been raised, I may need to keep the relevant material until it's settled.

5. Who else handles your data

I don't sell, rent or trade your data. These companies process it for me, only as far as needed to run my business:

I may also disclose personal data to authorities where the law requires it.

Transfers outside the EU

Several of these companies are based in the United States, so your data may be processed there. Each transfer rests on a legal mechanism: the EU–US Data Privacy Framework where the company is certified under it, and otherwise the European Commission's Standard Contractual Clauses.

6. Your rights

You have the right to:

• see the data I hold about you

• have it corrected

• have it deleted

• restrict or object to how I use it

• receive it in a portable format

• withdraw a consent you've given

Write to contact@frequencybymattie.com. I'll answer within one month, and I may ask you to confirm who you are first.

If you're unhappy with how I handle your data, you can complain to the Danish data protection authority:

Datatilsynet · www.datatilsynet.dk · dt@datatilsynet.dk · +45 33 19 32 00

If you live in another EU country, you can also contact your own data protection authority.

7. Cookies

This website uses the cookies it needs to function, and Squarespace's own analytics cookies, which are anonymised and aggregated. There are no third-party advertising or tracking cookies.

You can manage cookies in your browser. Turning off essential cookies may affect how the site works.

8. Security

I protect your data with appropriate technical and organisational measures.

If a data breach is likely to put your rights at risk, I'll notify Datatilsynet within 72 hours and tell you where the law requires it.

9. Children

My services are for adults aged 18 and over. I don't knowingly collect data from anyone younger. If you believe a minor has given me their data, write to me and I'll delete it.

10. Changes to This Policy

I may update this policy. The date at the top shows the latest revision. If something important changes while we're working together, I'll email you.

11. Contact

Mathilde Bjergegaard | Frequency by Mattie | contact@frequencybymattie.com | www.frequencybymattie.com | VAT no: DK40881042 | Denmark