AT LYLU-Mindset™: Respecting and Protecting Your Privacy, Here’s How

Privacy Policy

This Privacy Policy applies to the visit and use of my online shop as well as my coaching and digital offers.

1. Data Controller

The controller responsible for data processing is:

Judith‑Makaya Kembo
LYLU‑Mindset™
Website: https://atlylu-mindset.com
Email (Online Shop): support@lylu-mindset.com
Email (Coaching): coaching@atlylu-mindset.com

A data protection officer has not been appointed, as there is no legal obligation to do so.

2. Collection and Processing of Personal Data

a) When Visiting the Website

When you access this website, information is automatically transmitted to the server by your browser and temporarily stored in log files. This includes in particular:

  • IP address (shortened/anonymised)

  • date and time of access

  • accessed page or file

  • referrer URL

  • browser type and operating system

This data is used exclusively to ensure technical security, stability, and optimisation of the website.

Legal basis: Art. 6(1)(f) GDPR

b) Online Shop Orders

During the ordering process, personal data required to process the contract is collected, such as:

  • name

  • billing and shipping address

  • email address

  • payment information

Processing is carried out for the purpose of fulfilling orders and complying with legal obligations.

Legal basis: Art. 6(1)(b) GDPR

c) Digital Products & Coaching Services

When booking coaching services or purchasing digital products, the data required to deliver these services (e.g. name, email address) is processed.

Data is only shared where technically necessary (e.g. payment providers or email service providers).

d) Contact

When you contact me via email or contact form, the data you provide will be used solely to process your enquiry. Depending on the nature of your request, you may contact:

Legal basis: Art. 6(1)(a) GDPR

Your data will be deleted once your enquiry has been fully processed.

3. Cookies

This website uses cookies. These include technically necessary cookies as well as, subject to your consent, cookies for analytics and marketing purposes.

Cookies do not cause any damage and do not contain viruses or malware.

Legal bases:

  • technically necessary cookies: Art. 6(1)(f) GDPR

  • analytics & marketing cookies: Art. 6(1)(a) GDPR

You can manage or withdraw your consent at any time via the cookie banner or your browser settings. Disabling cookies may limit website functionality.

4. Analytics & Marketing Tools

a) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies to analyse your use of the website. The information generated is generally transferred to Google servers and stored there.

IP anonymisation is enabled, meaning your IP address is shortened within the EU.

Google Analytics is used only with your consent via the cookie banner.

Legal basis: Art. 6(1)(a) GDPR

b) Meta (Instagram)

This website is connected to the social network Instagram, a service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

When visiting the website or interacting with Instagram content, Meta may process personal data (e.g. IP address, usage behaviour).

Data processing is carried out based on your consent and in accordance with Meta’s privacy policies.

Further information can be found in Meta’s Privacy Policy:
https://www.facebook.com/privacy/policy

5. Payment & Fulfilment Service Providers

External service providers are used to process payments and fulfil orders (e.g. payment processors or print‑on‑demand partners).

These providers receive only the data necessary to fulfil the contract.

Legal basis: Art. 6(1)(b) GDPR

6. Data Sharing

Personal data is shared only:

  • to fulfil contractual obligations

  • to comply with legal requirements

  • with your explicit consent

No further disclosure takes place.

7. Your Rights

You have the right at any time to:

  • request access to your data (Art. 15 GDPR)

  • request rectification (Art. 16 GDPR)

  • request erasure (Art. 17 GDPR)

  • request restriction of processing (Art. 18 GDPR)

  • request data portability (Art. 20 GDPR)

  • withdraw consent at any time (Art. 7(3) GDPR)

  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

8. Data Security

This website uses SSL encryption to protect transmitted data.

9. Updates to This Privacy Policy

This Privacy Policy may be updated to reflect legal requirements or changes to services.

Last updated: 17.12.2025