top of page
Reset-Your-Body-with-Kathrin-logo

Privacy Policy

Last updated: Oktober 2026

​

This Privacy Policy explains how I collect, use, store and protect your personal data when you visit www.your-bodyreset.com or use my services. Please read it carefully. Where I rely on your consent, I will ask for it separately; reading this policy alone is not consent.

​

1. Who I Am (Data Controller)

The controller responsible for your personal data is:

  • Kathrin Massard, trading as Your Body Reset Coaching Services

  • Sole Proprietorship, Trade licence no. 1650747

  • Address: Al Furjan, Dubai, United Arab Emirates

  • Email: kathrin@your-bodyreset.com

  • WhatsApp/Phone: +971 58 202 3174

​​

2. Which Laws Apply

2.1 I process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”).

2.2 If you are located in the European Union or European Economic Area, the EU General Data Protection Regulation (“GDPR”) may also apply, and you have the rights described in section 10.

​

3. What Data I Collect

3.1 Contact and booking data: name, email address, phone number, booking details and communication with me. For certain session types, I also ask for your date of birth, because it is required to carry out that session. I use it only for this purpose.

3.2 Session-related information: information about your emotional, personal or health concerns that you choose to share before or during a session, and the session summaries I write. Health-related information is sensitive data under the PDPL and the GDPR, and I only process it with your explicit consent (see section 5).

3.3 Payment data: payments are processed by Stripe or Wix Payments. I receive confirmation of payment and limited transaction details, but I never see or store your full card details.

3.4 Technical and usage data: IP address, browser type, device information and how you use the website, collected through cookies and similar technologies (see section 9).

3.5 Information about your animal (for animal sessions, see section 6).

I only collect data that is necessary for the purposes described in this policy.

​

4. How I Use Your Data and Why

I use your personal data for the following purposes, each based on the legal basis stated:

  • Scheduling and conducting sessions, including the discovery call. Legal basis: performance of a contract.

  • Using your date of birth where a session type requires it. Legal basis: performance of a contract.

  • Processing payments. Legal basis: performance of a contract.

  • Sending session summaries and booking-related messages (confirmations, reminders). Legal basis: performance of a contract.

  • Processing health-related and other sensitive information. Legal basis: your explicit consent.

  • Answering your enquiries by email or WhatsApp. Legal basis: steps taken at your request before entering into a contract, or my legitimate interest in responding to you.

  • Sending newsletters or marketing emails. Legal basis: your consent.

  • Website analytics and marketing cookies. Legal basis: your consent via the cookie banner.

  • Essential website functions and security. Legal basis: my legitimate interest in a secure, working website.

  • Keeping records required by law, such as invoices. Legal basis: legal obligation.

  • Publishing testimonials. Legal basis: your separate written consent.

 

5. Sensitive Data and Consent

5.1 Before your first session, I ask for your explicit consent to process health-related and other sensitive information you share with me.

5.2 You may withdraw this consent at any time by emailing kathrin@your-bodyreset.com. Withdrawal does not affect processing before that point. Without this consent, I may not be able to provide a session, because the session is based on what you share.

5.3 Please only share information about other people (for example family members) if it’s necessary and, where appropriate, with their agreement.

​

6. Sessions for Animals

6.1 For animal sessions, I collect information you provide about your animal, such as its name, species, breed, age or date of birth, behaviour, health history and living situation, along with your own contact and booking data.

6.2 I use this information only to prepare and conduct the session and to write the session summary.

6.3 Animal information is stored, protected and deleted in the same way as other session information (see sections 8 and 12).

6.4 If you share veterinary reports or other documents, please remove details about third parties that aren’t needed for the session.

​

7. Who Receives Your Data

7.1 I never sell your personal data or share it with third parties for their own marketing.

7.2 I use the following service providers, who process data on my behalf and only to provide their services:

  • Wix: website hosting, booking system, analytics, payments (Wix Payments)

  • Stripe: payment processing

  • Zoom and Microsoft (Teams): video sessions

  • Google Workspace (Gmail): email

  • WhatsApp Business (Meta): client communication

  • Google Analytics, Google Ads and Meta Pixel: website analytics and advertising, only if you consent through the cookie banner

7.3 I may also disclose data where required by law, for example to a court or public authority.

​

8. International Data Transfers

8.1 Some of my service providers process data outside the UAE, including in the European Union and the United States.

8.2 I only transfer personal data abroad where this is permitted under the PDPL and, where applicable, the GDPR, for example where the recipient country provides an adequate level of protection, where appropriate contractual safeguards such as Standard Contractual Clauses are in place, or where you have given your consent.

​

9. Cookies and Similar Technologies

9.1 The website uses essential cookies, which are needed for it to work, and, only with your consent, cookies for analytics and marketing.

9.2 Essential cookies (for example for security, bookings and saving your cookie choice) are set without consent, as the website cannot function properly without them.

9.3 Analytics cookies (Google Analytics, Wix Analytics): these help me understand how visitors use my website. They are only set if you accept them.

9.4 Marketing cookies (Google Ads, Meta Pixel): these allow me to measure the effectiveness of ads and show more relevant ads. They are only set if you accept them.

9.5 When you first visit the website, a cookie banner lets you accept or decline non-essential cookies. You can change your choice or withdraw your consent at any time. You can also delete or block cookies in your browser settings.

 

10. Your Rights

10.1 Under the PDPL, you have the right to:

  • obtain information about the data I hold about you and how I use it

  • receive a copy of your data

  • correct inaccurate or incomplete data

  • have your data erased, where retention isn’t required by law

  • restrict or stop certain processing

  • withdraw your consent at any time

10.2 If the GDPR applies to you, you also have the right to object to processing based on legitimate interest and to data portability.

10.3 To exercise any of these rights, email kathrin@your-bodyreset.com. I will respond within 30 days. I may ask you to confirm your identity before releasing data.

10.4 You also have the right to lodge a complaint with a data protection authority: in the UAE, the UAE Data Office; in the EU, the authority in your country of residence.

​

11. Data Security

11.1 I take appropriate technical and organisational measures to protect your data, including secure, reputable service providers, password-protected accounts with two-factor authentication, and limited access to session information.

11.2 If a data breach occurs that is likely to affect your rights, I will inform you and the competent authorities as required by law.

11.3 No transmission over the internet is completely secure, but I work to keep risks as low as possible.

​

12. How Long I Keep Your Data

  • Session summaries and session-related information (including animal sessions): for the duration of our work together, and deleted no later than 5 years after your last session, or earlier on request.

  • Booking and contact data, including date of birth: as long as needed for our work together, and deleted no later than 5 years after your last contact.

  • Invoices and payment records: for the period required by UAE law (generally five years).

  • Marketing consent and newsletter data: until you unsubscribe or withdraw your consent.

  • Cookie and analytics data: as set out in the cookie banner.

  • ​

13. Children

My services are intended for adults with legal capacity to enter into contracts. Anyone below the age of legal majority may only take part with the prior written consent of a parent or legal guardian, who must make the booking. I do not knowingly collect data from minors without this consent.

​

14. Changes to This Policy

I may update this Privacy Policy when my services or the law change. The current version, with its “last updated” date, is always available on this page. For significant changes, I will inform existing clients by email.

​

15. Contact

For any questions about this Privacy Policy or your data:

bottom of page