Thank you for visiting my website. This Privacy Notice explains how I, Tuuli Vahtra, providing services via Tuuli Coaching OÜ (registry code: 14887811) (“I”, “me”, “Service Provider”), collect and use personal data when you use this website (the “Site”), contact me, or purchase services, courses, or event tickets.
1. Controller and contact
Controller: Tuuli Coaching OÜ (registry code: 14887811)
Service provider: Tuuli Vahtra
Email: tuuli@tuulivahtra.com
Website: tuulivahtra.com
2. What personal data I may process
Depending on how you interact with me, I may process:
- Contact details – name, email address, phone number, country/location, and time zone
- New client form / intake information (optional) – date of birth (optional) and information you choose to share about your background, struggles, goals, and other details that help me provide the service
- Communication – the content of emails/messages you send
- Social media interactions (optional) – if you contact me or interact with my content on social media, I may see and process information you share there (such as your public profile name and messages/comments). Social media platforms process your data under their own policies.
- Bookings and service details – appointment times, service type, package/course/event purchase details
- Billing and payment details – invoices, payment status and related records (I do not store full card details when payments are handled by a payment service provider)
- Newsletter data (when you subscribe) – your email address and basic engagement data (depending on the newsletter platform and your settings)
- Technical data – IP address, device/browser information, and basic usage or log data for website security and functionality
- Cookie and similar technology identifiers – where applicable (see section 8)
3. Purposes and legal bases
I process personal data for the following purposes and legal bases:
- Providing and managing services, courses and events (bookings, delivery, customer support) – performance of a contract
- Communication and responding to enquiries – legitimate interests and/or to respond to your request and arrange a booking
- Invoicing and accounting – legal obligation and/or legitimate interests
- Website security and basic functionality – legitimate interests
- Newsletter and marketing communications – consent (you can withdraw consent at any time)
- Analytics – consent when cookies are used (Google Analytics)
4. Special categories of data
If you choose to share sensitive information (for example health-related information) in the context of counselling, coaching, or inner work, I treat it as confidential and process it only for providing the requested service, with appropriate safeguards, and where required – based on your explicit consent and/or other applicable legal grounds.
5. Who I share data with
I share personal data only in the minimum necessary scope, with trusted service providers who help me run my business and deliver services (and who process data on my behalf), for example:
- Website hosting provider – Elkdata OÜ (Veebimajutus.ee)
- Email provider – Google (Gmail / Google Workspace)
- Video calls – Zoom Video Communications, Inc.
- Accounting and invoicing – service providers supporting bookkeeping and invoicing
- Payment providers – banks (for bank transfers), and for international payments I may also use Stripe and/or PayPal
- Website analytics – Google Analytics (based on consent), Matomo (general usage statistics without storing cookies)
I do not sell your personal data.
6. International transfers
Some service providers may process data outside the EEA. Where applicable, such transfers are protected using appropriate safeguards (for example EU Standard Contractual Clauses) or other lawful transfer mechanisms.
7. Retention
I keep personal data only as long as needed for the purposes described in this Notice and as required by law (for example accounting records). Retention periods may vary depending on the type of data and purpose.
You can request deletion of your data, and I will comply where possible – however, some data may need to be kept to meet legal obligations.
8. Cookies and similar technologies
This Site uses cookies that are necessary for essential functionality (such as security and language preferences). These cookies are always enabled. With your permission, I also use analytics cookies (Google Analytics) to understand how the Site is used and to improve it. You can change your preferences at any time in the cookie settings: Change preferences.
In addition, I may use a cookieless analytics (for example, Matomo) to measure general website usage (such as page views) without setting any cookies. This helps me understand which content is useful and improve the Site.
9. Your rights
Depending on your situation, you may have the right to request access, correction, deletion, restriction of processing, to object, and data portability. You also have the right to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.
10. Security
I take appropriate technical and organisational measures to protect personal data. While I take care to keep your data secure, no method of online transmission or storage is completely risk-free. Where I keep personal working notes, I aim to minimise identifiable details and store notes securely.
11. Updates
I may update this Privacy Notice from time to time. The “Last updated” date indicates the latest revision.
12. Questions
If you have questions about this Privacy Notice or your personal data, contact me at tuuli@tuulivahtra.com.
Last updated: 13.01.2026