Privacy Policy

Last updated: May 2026

Coastline Heron (“we”, “our”, “us”, or “the practice”) provides coaching services and offers original artwork, prints, and digital products through this website. We are committed to protecting your privacy and handling personal information with transparency, care, and respect. This Privacy Policy explains what information we collect, how we use it, how it may be shared with trusted service providers, and what rights you have under the General Data Protection Regulation, or GDPR. This website is operated from Costa da Caparica, Portugal.

1. Information We Collect

We collect only the information that is reasonably necessary to provide our services, communicate with visitors and clients, manage bookings, operate the website, and process purchases.

1.1 Information You Provide Directly

Depending on how you use the website, we may collect: name and contact details, such as email address and phone number; messages sent through contact forms; information provided when booking a preliminary meeting or coaching session; scheduling information, such as preferred times, appointment history, and session-related communication; information shared voluntarily during coaching sessions or intake forms; billing details, invoices, receipts, and payment-related records; purchase and order information, including products purchased, shipping address where relevant, digital download information, and customer support messages related to an order; any other information you choose to share with us directly. You are not required to share sensitive personal information in order to browse the website or purchase artwork, prints, or digital products. In coaching, you may choose to share personal or sensitive information as part of the work. We ask only for information that is relevant to the coaching process and treat this information with care and confidentiality, subject to the limited exceptions described below.

1.2 Information Collected Automatically

When you visit the website, certain technical and usage information may be collected automatically by Squarespace, the website platform, and related tools. This may include: IP address; device type and browser; operating system; pages visited; time spent on the website; referring pages or links; basic cookie and performance information; shopping cart or checkout activity, where relevant. This information helps us operate the website, understand how visitors use it, improve user experience, process purchases, and maintain security. Where possible, analytics information is used in an aggregated or limited form.

2. How We Use Your Information

We use personal information for purposes directly connected to the website, coaching services, communication, purchases, and administration. We may use your information: to respond to inquiries; to schedule, manage, and conduct coaching sessions; to prepare for and follow up on coaching work; to provide resources, exercises, or materials connected to coaching; to process and fulfill purchases of original artwork, physical prints, or digital prints; to provide access to digital downloads; to arrange shipping or delivery where relevant; to issue invoices, receipts, or order confirmations; to manage payments and refunds where relevant; to provide customer support; to maintain basic business and tax records; to improve the website and user experience; to protect the security and proper functioning of the website; to comply with legal, accounting, tax, or ethical obligations. We do not sell, rent, or trade your personal information.

3. Legal Basis for Processing

Under GDPR, we process personal information only when we have a lawful basis to do so. Depending on the situation, we may process your information based on: Contract — when processing is necessary to provide coaching services, manage bookings, fulfill purchases, deliver digital prints, or respond to service-related requests. Consent — when you choose to send us information, subscribe to communications, accept certain cookies, or provide information that is not strictly necessary for a service or purchase. Legal obligation — when we need to keep records for tax, accounting, regulatory, or legal reasons. Legitimate interests — when we use limited information to operate the website, respond to inquiries, maintain security, improve services, or manage basic business administration, provided those interests do not override your rights and freedoms. You may withdraw consent at any time where processing is based on consent.

4. Coaching Confidentiality

We treat information shared during coaching sessions as confidential, subject to limited legal, safety, and ethical exceptions. We may disclose information only if: you provide explicit permission; we are required to do so by law; there is a serious and immediate risk of harm to you or another person; disclosure is necessary to protect legal rights or respond to a legal process. Outside of these limited situations, information shared in coaching is treated as private and handled with care. Coaching is not psychotherapy, medical treatment, legal advice, or crisis support. If you are in immediate danger or need urgent mental health support, please contact local emergency services or an appropriate crisis service.

5. Purchases, Artwork, Prints, and Digital Products

When you purchase original artwork, physical prints, or digital prints through the website, we may collect and use information necessary to process and fulfill your order. This may include: name; email address; billing information; shipping address, where relevant; products purchased; order history; delivery or download information; customer support messages related to your purchase. Digital products currently include downloadable digital prints of Chaya’s artwork, where available. Payment information is processed through Squarespace Payments and, where enabled, PayPal or other supported checkout options. Payment information is not stored directly by Coastline Heron. For physical products, your information may be shared with shipping or postal services as necessary to deliver the order. For digital products, your information may be used to provide access to downloads, send order confirmations, and resolve technical or customer support issues. We may retain order records as required for accounting, tax, and legal purposes.

6. Scheduling and Coaching Bookings

Coaching bookings may be managed through Acuity Scheduling / Squarespace Scheduling. When you book a preliminary meeting or coaching session, scheduling-related information may be collected and processed through Acuity Scheduling / Squarespace Scheduling. This may include your name, contact details, appointment time, responses to booking questions, and related communication. Acuity Scheduling is part of the Squarespace suite of products and is subject to Squarespace’s policies and privacy practices.

7. Contact Forms and Email Communication

If you contact us through a form or by email, we use the information you provide to respond to your message and manage the communication. Please avoid sending highly sensitive information through general contact forms. If sensitive information is needed for coaching, we will provide appropriate guidance on how to share it. We may keep correspondence for a reasonable period for administrative, legal, or service-related purposes.

8. Cookies and Analytics

This website uses Squarespace’s cookie banner or cookie settings to help visitors manage cookie preferences where required. The website may use cookies and similar technologies for: basic website functionality; security; performance; analytics; checkout and shopping cart functionality; user experience improvements. Cookies may be placed by Squarespace, Acuity Scheduling / Squarespace Scheduling, payment processors, analytics tools, or embedded third-party services. We do not currently use advertising cookies, behavioral advertising, or remarketing tools. If this changes, this Privacy Policy and cookie settings will be updated where required. You can manage cookie preferences through the cookie banner or cookie settings available on the website. You can also control or disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.

9. Third-Party Services

We use trusted third-party service providers to operate the website and provide services. These may include providers for: website hosting, design, commerce, analytics, and cookie management, through Squarespace; scheduling, through Acuity Scheduling / Squarespace Scheduling; payment processing through Squarespace Payments and, where enabled, PayPal or other supported checkout options; email communication; shipping or postal services, where relevant; digital product delivery; secure business administration tools. These providers may process personal information according to their own privacy terms and/or on our behalf, depending on the service. We choose service providers that offer appropriate data protection safeguards. However, each third-party provider is responsible for its own privacy practices where it acts as an independent controller of personal information.

10. International Data Transfers

Some of the service providers we use, including Squarespace and related services, may process or store information outside Portugal, the European Economic Area, or the country where you live. Where personal information is transferred internationally, we rely on appropriate safeguards where required by law, such as standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

11. Data Storage and Security

We take reasonable technical and organizational measures to protect personal information from unauthorized access, loss, misuse, or disclosure. These measures may include: secure passwords and password management; limited access to client and customer information; use of trusted website, scheduling, and payment platforms; secure devices; reasonable administrative and technical safeguards. No online system can be guaranteed to be completely secure. However, we take privacy and security seriously and aim to handle personal information with care.

12. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy. Retention periods may depend on: the nature of the service or purchase; legal, accounting, or tax requirements; the need to maintain records of coaching work; the need to respond to inquiries or resolve disputes; the need to protect legal rights. Coaching records, order records, invoices, and business communications may be kept for different periods depending on the reason for retention. When information is no longer needed, we will delete it or anonymize it where reasonably possible.

13. Your Rights Under GDPR

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy rights, you may have the right to: access the personal information we hold about you; request correction of inaccurate or incomplete information; request deletion of your personal information; restrict or object to certain types of processing; request a copy of your personal information in a portable format; withdraw consent where processing is based on consent; object to direct marketing, if applicable; lodge a complaint with a data protection supervisory authority. To exercise your rights, please contact us using the details below. We will respond to requests within the timeframe required by applicable law.

14. Children’s Privacy

This website and our services are not directed to children. We do not knowingly collect personal information from children without appropriate parental or guardian consent where required by law. If you believe that a child has provided personal information through this website, please contact us so we can review and, where appropriate, delete the information.

15. Links to Other Websites

This website may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, or security of those third-party websites. We encourage you to read their privacy policies before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website features, legal requirements, or privacy practices. The “Last updated” date at the top of this page will indicate the most recent version.

17. Contact

If you have questions about this Privacy Policy or how your personal information is handled, you can contact us at: Coastline Heron
Costa da Caparica, Portugal
Email: info@coastlineheron.com