Privacy policy

Your trust matters to me, and so does your privacy.

My work often involves meaningful conversations, personal reflection and sensitive experiences. I recognise the responsibility that comes with holding that information, and I am committed to treating it with care, respect and confidentiality.

This Privacy Policy explains how I collect, use, store, share and protect your personal information when you:

• Visit my website, izabellasoko.com.
• Enquire about or participate in private coaching.
• Join Momentum Collective or another online programme.
• Attend a breathwork session, workshop, event or retreat.
• Subscribe to my newsletter or other communications.
• Communicate with me through email, WhatsApp, Zoom or other channels.

I will never sell or rent your personal information to third parties.

I take reasonable precautions to protect your information, restrict access and use it only for appropriate and clearly explained purposes.

This policy is intended to comply with the European Union’s General Data Protection Regulation (GDPR), applicable Portuguese data protection legislation and other applicable privacy laws.

The data controller responsible for personal information covered by this policy is:

Legal name

Izabela Agnieszka Sokołowska

Professional name

Izabella Soko

Business status

Self-employed professional (Trabalhadora Independente)

Portuguese tax number (NIF)

305458361

Business address

R. Cândido dos Reis 58, 8600-681 Lagos, Faro, Portugal

Email

info@izabellasoko.com

Website

https://izabellasoko.com

I operate as an independent professional based in Portugal, providing coaching, breathwork, educational programmes, workshops and wellbeing services to clients internationally.

As the data controller, I determine how and why personal information is processed in connection with these services.

The information I collect depends on how you interact with my business.

Contact and identification information

This may include your name, email address, telephone number, billing address and other information you provide when contacting me, booking services or registering for a programme.

Coaching and programme information

If you participate in coaching or other services, I may collect information relevant to our work together, including:

• Personal and professional goals.
• Intake forms, questionnaires and assessments.
• Coaching session notes and transcripts.
• Session reflections, agreed actions and progress.
• Information voluntarily shared about personal circumstances, experiences or challenges.

Health and wellbeing information

Certain services, particularly breathwork and somatic practices, may involve collecting information about your physical or psychological wellbeing.

This may include information about relevant health conditions, breathwork contraindications, health assessments or personal wellbeing experiences.

Health information receives additional protection under the GDPR and is processed only where an appropriate lawful basis and condition for sensitive information apply.

Payment and membership information

When you purchase a service or membership, I may receive billing details, purchase history, subscription status and transaction records.

Payments and financial transactions may be administered through ThriveCart, Stripe and Wise.

I do not ordinarily receive or store your complete payment card details.

Communications

I may retain communications exchanged through Gmail, WhatsApp, Zoom, website contact forms and other agreed communication channels.

Website and technical information

Depending on the services used and your cookie preferences, information such as IP address, browser type, device information and website activity may be collected.

I process personal information only where there is an appropriate lawful basis under applicable data protection laws.

Where I rely on consent, you may withdraw it at any time without affecting processing already lawfully undertaken.

Where I rely on legitimate interests, I consider your rights, expectations and freedoms before processing your information.

Certain information may be necessary to provide contracted services or fulfil legal obligations. Where information is optional, I will aim to make this clear.

Confidentiality is fundamental to my coaching practice.

Private coaching sessions may involve discussions about personal experiences, relationships, professional challenges, emotions, beliefs, behaviours and wellbeing.

I treat this information as confidential and use it only for appropriate professional purposes.

Client information may be used to:

• Prepare for coaching sessions.
• Maintain continuity and track progress.
• Develop personalised exercises and resources.
• Record agreed actions and relevant assessments.
• Fulfil administrative and professional obligations.

Access to identifiable coaching information is limited to me and authorised service providers where necessary and subject to appropriate protections.

Information may be disclosed where legally required or where a lawful exception to confidentiality applies, including certain serious and immediate safety concerns.

Health-related information

Where I collect sensitive health information, I apply additional safeguards, including obtaining explicit consent where that is the appropriate legal condition.

I will not use health screening information for unrelated marketing or advertising.

Relevant health information may be needed to determine whether participation in particular breathwork or somatic activities is appropriate.

Declining to provide necessary safety information may mean that I cannot offer certain practices.

Private coaching sessions may be transcribed to support the coaching process, improve continuity and maintain an accurate record of our work.

You will always be notified when a coaching session is being transcribed.

Transcripts may be used to:

• Prepare private coaching notes and session summaries.
• Identify themes, insights and agreed actions.
• Support continuity between sessions.
• Develop personalised exercises and resources.
• Track progress toward coaching goals.

Your identifiable coaching transcripts and private session recordings will never be made publicly available by me.

Transcriptions and related notes are treated as confidential client records and stored using appropriate access restrictions.

Where third-party transcription or AI-assisted tools are used, I will apply appropriate privacy and data protection safeguards and provide relevant information about those providers.

Notification of transcription does not replace consent where consent is legally required.

My work may inform educational resources, articles, workshops, presentations and other content intended to support learning and personal development.

When drawing on experiences or insights from coaching sessions, I will protect the confidentiality of the individuals involved.

I may use general themes, composite examples or genuinely anonymised experiences where individuals cannot reasonably be identified.

• I will remove or change names and other identifying details, and where necessary alter or omit contextual information to prevent identification.
• I will not intentionally publish your identifiable personal story, private coaching transcript, name, likeness or testimonial without obtaining appropriate, separate and informed permission.
• If I would like to identify you by name or use an account that could reasonably identify you, I will request your explicit consent before publication.
• You are never required to provide a testimonial or agree to the use of identifiable personal experiences.
• Refusing permission will not negatively affect your coaching relationship or access to services.
• Where consent is relied upon, you may withdraw it. I will explain the implications of withdrawal, including limitations concerning materials already lawfully distributed.
• Changing a person’s name alone does not necessarily make information anonymous. I will take reasonable steps to ensure that any example described as anonymous cannot reasonably be connected to an identifiable individual.

Momentum Collective includes live educational workshops, breathwork experiences, guided practices and opportunities for group reflection and discussion.

All Momentum Collective live sessions are recorded. Replays are made available to Momentum members and may also be published publicly through my website, video platforms or other educational channels.

Recordings generally include the full session, including teaching, guided practices and group discussions.

Participant privacy and consent

• Participants are informed before each session that recording will take place and that the replay may be made publicly accessible.
• Depending on the recording settings, a participant’s name, image, voice or contributions may be captured.
• I respect each participant’s right to privacy. Public distribution of identifiable participant contributions will be subject to an appropriate lawful basis and, where required, separate, informed consent.
• You may participate without agreeing to have your identifiable contributions publicly shared. Please inform me if you do not wish to be included in a public recording so that appropriate arrangements can be made.

Sensitive or personal sharing

My intention is to create an environment where participants feel comfortable engaging in meaningful reflection without unnecessary exposure of their personal experiences.

Before making a recording publicly available, I review the session and may remove sections containing sensitive personal disclosures, emotional sharing or other information that could compromise a participant’s privacy.

I will not intentionally publish identifiable sensitive health information or deeply personal disclosures without an appropriate legal basis and, where required, explicit consent.

Participants may contact me at info@izabellasoko.com if they have concerns about their appearance or contributions in a recording.

Public availability

Public recordings may be viewed, downloaded or shared by third parties depending on the platform used. Once information has been publicly distributed, it may not always be possible to remove every copy.

If you request the removal of identifiable information from a recording under applicable data protection law, I will review and respond to your request and take appropriate action, including editing or removing material where required.

I take reasonable precautions to protect participant privacy while preserving the educational value of Momentum Collective.

I use selected digital platforms to operate my business and deliver my services.

These include:

Google Services — Gmail, Google Docs and Google Drive

Used for professional email, client communications, document preparation, file organisation, coaching notes and administrative records.

Zoom

Used for online coaching, workshops, group events, breathwork sessions and related recordings or transcriptions where enabled.

WhatsApp (Meta)

Used for agreed client communications, scheduling, support and other professional correspondence.

ThriveCart

Used for online checkout, membership subscriptions, transactions and digital programme access or related integrations.

Stripe

Used to securely process payments, manage transactions and support relevant payment and billing activities.

Wise

Used for relevant financial transactions, business payments and related financial administration.

MailerLite

Used for newsletters, email marketing, event communications and management of mailing-list subscriptions. MailerLite may process contact information, subscription preferences and email engagement information as part of these services.

Lovable

Used for website development and related website features, which may process technical information or data submitted through the website.

ChatGPT (OpenAI) and Claude (Anthropic)

Used for content development, educational resources, business planning, administration and certain coaching-related workflows where appropriate safeguards are in place.

Other providers

I may also use selected providers for website hosting, accounting, scheduling, transcription, membership delivery, analytics and security. Depending on the service, providers may act as processors on my behalf or as independent controllers of certain information.

I review service providers with consideration for their security practices, privacy policies and applicable data protection agreements.

I do not sell your personal information to any of these providers or other third parties.

However, providing services may require limited personal information to be shared with selected providers.

I use AI-assisted tools, including ChatGPT and Claude, to support business administration, educational content, planning, written resources and selected coaching-related tasks.

I recognise that information shared during coaching can be personal and sensitive.

• I aim to minimise identifiable personal information when using AI services and remove unnecessary identifying details where appropriate.
• I do not intentionally submit identifiable sensitive health information or confidential coaching disclosures to general-purpose AI tools without an appropriate lawful basis and suitable privacy safeguards.
• Where AI tools process identifiable client information, I will assess the relevant provider arrangements, data protection terms, international transfer mechanisms and any additional consent requirements.
• AI-assisted outputs are reviewed by me before being used professionally.
• AI tools do not replace my responsibility for the quality, confidentiality or professional delivery of coaching services.
• I do not use AI to make solely automated decisions that produce legal or similarly significant effects concerning clients.

I use MailerLite and other appropriate systems to communicate with people who have subscribed to receive updates.

Depending on your preferences, you may receive emails about:

• Coaching programmes and opportunities.
• Momentum Collective.
• Breathwork sessions, workshops and retreats.
• Nervous system education and wellbeing resources.
• Articles, events and other relevant offerings.

You may unsubscribe from optional marketing emails at any time using the unsubscribe link or by emailing info@izabellasoko.com.

Unsubscribing from marketing will not prevent essential service communications such as payment receipts, booking information or membership updates.

My clients and service providers may be located across Portugal, the European Union, Canada, the United States and other countries.

Some digital platforms may process or store information outside the European Economic Area (EEA).

Where GDPR international transfer requirements apply, I will use appropriate lawful mechanisms, such as applicable adequacy decisions or Standard Contractual Clauses, with additional safeguards where required.

You may contact info@izabellasoko.com to request information about relevant transfer safeguards.

I retain information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal obligations.

In general:

Financial and transaction records

Retained for applicable Portuguese tax and accounting requirements.

Private coaching records

Retained during the coaching relationship and for an appropriate period afterward, where justified by legitimate professional or legal purposes.

Coaching transcripts

Retained only for an appropriate, defined period necessary for the coaching relationship or other lawful purpose.

Health screening information

Retained for a limited, justified period appropriate to its sensitive nature and relevant legal considerations.

Membership records

Retained while membership is active and for a justified period after cancellation.

Marketing information

Retained until you withdraw consent or it is no longer necessary.

Momentum recordings

Retained according to the applicable published replay arrangements.

Website information

Retained according to the relevant technical purpose and cookie settings.

Where information is no longer required, I will take reasonable steps to delete or anonymise it, subject to applicable legal retention requirements.

I take privacy and data security seriously.

I exercise reasonable care and due diligence in selecting the platforms I use and protecting the information entrusted to me.

My safeguards may include:

• Password-protected accounts and devices.
• Multi-factor authentication where available.
• Restricted access to private coaching records.
• Secure cloud storage and appropriate sharing permissions.
• Limiting unnecessary collection and sharing of information.
• Reviewing the security and privacy practices of service providers.
• Appropriate safeguards when using AI-assisted tools.
• Deleting or anonymising information when it is no longer necessary.
• Taking appropriate action if a privacy or security incident occurs.

Although I make reasonable efforts to safeguard personal information, no digital system can guarantee complete security.

If a personal data breach occurs, I will assess it and take appropriate action, including any notifications legally required.

I do not sell or rent personal information.

Information may be shared only where appropriate and lawful, including:

• With service providers necessary to deliver agreed services.
• With payment processors and financial providers.
• To meet tax, accounting or legal obligations.
• In response to lawful regulatory or judicial requests.
• To establish, exercise or defend legal claims.
• To address serious and immediate safety concerns where legally justified.
• Where you have provided specific permission for an additional disclosure.

I aim to limit disclosures to the information reasonably necessary for the relevant purpose.

Under the GDPR, subject to applicable conditions and exceptions, you may have the right to:

Access

Request information about personal data I hold concerning you.

Rectification

Ask for inaccurate information to be corrected.

Erasure

Request deletion where legally applicable.

Restriction

Ask for certain processing to be limited.

Data portability

Request eligible information in a portable format.

Objection

Object to certain processing, including direct marketing.

Withdrawal of consent

Withdraw consent where processing relies upon it.

Automated decision-making

Exercise rights concerning qualifying solely automated decisions and profiling.

To exercise your rights, email info@izabellasoko.com.

I will respond within the timeframes required by applicable law, generally within one month, subject to lawful extensions.

You may also lodge a complaint with the relevant data protection authority.

In Portugal

Comissão Nacional de Proteção de Dados (CNPD)

My website and checkout pages may use cookies and similar technologies for:

• Essential website functions.
• Security and payment processing.
• Website analytics, where enabled.
• Marketing and advertising measurement, where enabled.

Where legally required, optional cookies and similar tracking technologies will only be activated after valid consent.

You may manage or withdraw applicable consent using the website’s cookie preferences mechanism.

My coaching programmes, breathwork services and Momentum Collective membership are intended for adults aged 18 and over unless expressly stated otherwise.

I do not knowingly collect children’s personal information through adult-only membership services.

My website may include links to third-party websites or services.

I am not responsible for privacy practices of independent websites that I do not control.

I encourage you to review the privacy policies of those services.

I may update this Privacy Policy as my services, technology or legal obligations change.

The latest version will be available on my website, together with its effective date.

Where required, I will communicate material changes through an appropriate channel.

For questions, concerns or requests concerning your personal information, please contact:

Name

Izabella Soko

Status

Self-employed professional, Portugal

NIF

305458361

Address

R. Cândido dos Reis 58, 8600-681 Lagos, Faro, Portugal

Email

info@izabellasoko.com

Website

https://izabellasoko.com

Trust, transparency and respect are central to my work. I am committed to protecting your personal information with the same care and integrity that I bring to my professional relationships.