1. Who Controls Your Data

HostedHealing ("we," "us") is operated by HostedHealing. For privacy questions or to exercise your rights, contact: wearehere@hostedhealing.com

This policy applies to Hostedhealing.com, our Instagram/TikTok/Facebook, and all socialmedia accounts, our email communications, and our webinar and booking systems.

2. What We Collect

CategoryExamplesSource

Contact dataName, email addressWebsite opt-in, webinar signup, DM automation

Social/DM dataInstagram/TikTok/Facebook handle, message content when you DM usDirect messages you send us

Engagement dataEmail opens/clicks, webinar attendance, website analyticsEmail platform, webinar platform, website analytics tool

Booking/payment data (if applicable)Booking details, payment confirmationBooking system, payment processor

3. A Note on Sensitive Data

Some of what you tell us, including in Instagram/TikTok/Facebook DMs, may relate to substance use, mental health, or crisis language (for example, if you write "can't stop" or "overdose" while messaging us). Under EU/UK GDPR, this is treated as a special category of personal data subject to extra protection.

Because our DM funnel is specifically designed to invite this kind of disclosure (the "Story" keyword flow), we want to be direct about it:

• We process this data only with your explicit consent, given by voluntarily sending us that message.

• We do not use this data for any purpose beyond responding to you, sending the story/content you requested, and where our automated safety check flags crisis-related language showing you our emergency-services message.

• We do not sell, share, or use this data for advertising targeting.

• You can ask us to delete any DM history with us at any time (see Section 8).

4. How We Use Your Data

• To send the free story/content you request via DM keyword.

• To enroll you in our automated email sequence, if you opt in.

• To invite you to and run the free webinar.

• To refer you, at your request, to [coach's program name] or the retreat program Jakob discusses in his story see Section 6.

• To improve our content and messaging (aggregated, non-identifying analysis only).

• To respond directly if you write to us.

We do not use your data to provide medical, therapeutic, or clinical services, and this policy does not create any such relationship. See our Disclaimer for more.

5. Legal Basis for Processing (GDPR)

• Consent; for DM content, email marketing, and webinar communications.

• Legitimate interest;  for basic website analytics and security.

• Contract necessity;  for any booking or paid engagement you enter into with us.

You can withdraw consent at any time (Section 8); this does not affect processing already carried out.

6. Who We Share Data With

• Email/marketing platform; Wix's built-in email marketing tools, to run the automated sequence.

• Webinar platform Google Meet to deliver the webinar.

• Social platforms; Meta (Instagram, Facebook) and TikTok process DM and comment data under their own privacy policies when you contact us there; we don't control their handling of that data once it's on their platform.

• Booking/payment processor ; WIX

• Third-party programs; if you ask to be referred to other companies programs or the retreat center, we share only what's needed to make that introduction, with your prior confirmation.

We do not sell personal data to third parties.

7. International Data Transfers

Our website and email/marketing tools are provided by Wix.com Ltd. Wix may transfer personal data to the United States and other countries outside the EU/EEA, and relies on Standard Contractual Clauses, together with its Data Processing Addendum, as the legal mechanism for these transfers.

Webinars are hosted via Google Meet (Google Workspace). Google is certified under the EU-US Data Privacy Framework and also offers Standard Contractual Clauses under its own Data Processing Addendum for these transfers.

8. Your Rights

If you're in the EU/EEA/UK (and as a matter of general practice for all users, wherever you are), you have the right to:

• Access the personal data we hold about you.

• Correct inaccurate data.

• Request deletion of your data, including DM history.

• Withdraw consent at any time.

• Object to or restrict certain processing.

• Lodge a complaint with your local data protection authority (in Denmark: Datatilsynet, or your own country's equivalent).

To exercise any of these, email privacypolicy@hostedhealing.com. We'll respond within 30 days.

9. Data Retention

• DM conversations: retained for  12 months from last contact unless you request earlier deletion.

• Email list data: retained until you unsubscribe or request deletion.

• Webinar attendance/booking records: retained for [placeholder — consider any tax/accounting retention requirements if payment is involved].

10. Cookies & Analytics

This site uses Google Analytics to understand website traffic and visitor behavior. Google Analytics uses cookies to collect data such as pages visited, time on site, and general location.

If you are visiting from the EU/EEA or UK, you will be shown a cookie consent banner (powered by Usercentrics) before Google Analytics cookies load, and you can accept, deny, or manage your preferences at any time via that banner.

Google Analytics data may be transferred to and processed in the United States. Google is certified under the EU-US Data Privacy Framework and provides Standard Contractual Clauses under its own data processing terms for these transfers.

11. Minors

Our services are intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has contacted us, email privacypolicy@hostedhealing.com, and we'll delete the relevant data.

12. Changes to This Policy

We'll update the date below when this policy changes and, for material changes, notify email subscribers directly.

Last updated:September 2026