Privacy Policy

At Sarah Grosso Counselling, I am committed to protecting your privacy and ensuring your personal data is handled in a safe and transparent manner, in compliance with the General Data Protection Regulation (GDPR).

​

1. What type of information do I collect?

​

I receive, collect, and store any information you enter on my website or provide me in any other way. This includes:

• Identity Data: Name and surname.

• Contact Data: Email address and phone number.

• Billing Data: Physical address (required for legal French invoicing) and payment details (processed securely via Stripe).

• Technical Data: Internet protocol (IP) address, login data, and session information (page interaction, length of visits).

• ​

Special Category (Health) Data & Professional Secrecy

​

As a counselor, I may collect sensitive information regarding your mental and physical health.

• Legal Basis for Processing: I process this sensitive data based on your explicit consent (Art. 9 GDPR) and for the purpose of providing counseling services.

• Professional Secrecy: In accordance with the ethical standards of my profession and French law, all therapeutic content is bound by professional secrecy. I will not disclose any sensitive health information to third parties except where required by law (e.g., if there is a serious risk of harm to yourself or others).

• Data Minimization: I only collect the minimum sensitive information necessary to conduct our sessions safely and effectively.

​

2. How do I collect this information?

​

When you conduct a transaction on my website (such as booking the EARTH workshop), as part of the process, I collect the personal information you give me. Your personal information will be used for the specific reasons stated below only.

​

3. Why do I collect such personal information?

​

I collect this information for the following purposes:

• To provide and operate the Services (delivering the workshop and Zoom links).

• To provide ongoing customer assistance and support.

• To comply with French Tax Law, which requires a full name and address for the issuance of a valid VAT invoice (facture).

• To be able to contact you with service-related notices and promotional messages (if you have opted in).

​

4. How do I store, use, and share your information?

​

My business is hosted on the Wix.com platform. Your data may be stored through Wix.com’s data storage, databases, and the general Wix.com applications on secure servers behind a firewall.

To operate my business legally in France, I share relevant data with the following third-party processors:

• Stripe: To process your payments securely.

• Indy: My accounting software, used to generate legal invoices and process tax declarations.

• Blank: My professional French bank account to receive payments.

• Zoom: To facilitate the online workshop sessions. 

• ​

All third-party billing providers (Stripe) adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council.

​

In accordance with French legal requirements and professional best practices:

• Financial and Contractual Data: Will be retained for 10 years to comply with French commercial and tax obligations (Code de Commerce).

• Clinical & Health-Related Notes: Will be stored securely for a period of 10 years following the end of our professional relationship. This period is determined to ensure legal defense and to comply with professional indemnity insurance requirements. After this time, records will be permanently destroyed.

​

5. How do I communicate with you?

​

I may contact you to notify you regarding your account, to troubleshoot problems, to resolve a dispute, to collect fees or monies owed, or to send updates about the EARTH series or the relevant service you have contacted me for. For these purposes, I may contact you via email.

​

6. How do I use cookies and other tracking tools?

​

My website uses cookies to track session information and improve your user experience. You can manage your preferences or decline non-essential cookies via the Cookie Banner displayed on the site.

​

7. How can you withdraw your consent?

​

If you no longer want me to process your data, or if you wish to access, correct, or delete any personal information I have about you, please contact me at contact@sarahjgrosso.com.

​

8. Privacy Policy Updates

​

I reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website.

​

9. Questions and Contact Information

​

If you have any questions, you may contact me at: 

Sarah

108 rue Senegonde, 34090 Montpellier, France

contact@sarahjgrosso.com