Privacy Policy

1. Data controller

The data controller responsible for the processing of personal data on this website is:

2. Scope of data collection

The following personal data is collected through the Village of Two diagnostic:

• Full name and email address — collected at the point of registration to save diagnostic results and to prepare for diagnostic-related follow-up or a booked session. If the optional email checkbox is selected, these details are also used to send Village of Two emails.
• Diagnostic responses — selections made across the six assessment areas (Foundation, Fireplace, The Walls, The Windows, The Roof, Climate), including descriptor choices and section scores. Responses may be analysed collectively to understand common challenges and improve Village of Two articles, resources, workshops and services. Where email marketing consent has been given, structured diagnostic results may also be used to select content likely to be relevant to the individual.
• Free-text responses — optional written answers to anchor and reflection questions within the diagnostic. These are used for diagnostic and session preparation and are included in the EmailJS submission notification sent to the data controller. Free-text responses are not used to personalise marketing emails.
• Post-diagnostic feedback — optional written responses to feedback questions shown after submission. Used solely for product improvement.
• Referral source — optional selection indicating how the respondent heard about Village of Two. Used for internal purposes only.
• Marketing consent record — whether consent was given, together with the date, time and version of the consent wording. This is used to demonstrate and manage consent.

The diagnostic is not designed to collect financial data or identification documents. Some responses may relate to health, wellbeing or family circumstances. Respondents should not include information in optional free-text fields that they do not wish to provide.

3. Legal basis for processing

Personal data is processed on the following legal bases pursuant to Article 6 GDPR:

• Diagnostic consent (Art. 6(1)(a) GDPR): The data subject provides consent by ticking the required consent checkbox before starting the diagnostic. This consent may be withdrawn at any time by contacting the data controller at the address above. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Optional email marketing consent (Art. 6(1)(a) GDPR): Where the separate optional email checkbox is selected, Village of Two may send occasional practical insights, workshop invitations and relevant updates. These communications may be personalised using structured diagnostic results. Consent can be withdrawn at any time as described below.
• Performance of a contract (Art. 6(1)(b) GDPR): Where the data subject has booked a follow-up session, processing of diagnostic data is necessary for the performance of that service.

4. Data storage and processors

Personal data is stored and processed using the following third-party services:

• Google LLC (Google Drive, Google Sheets and Gmail) — diagnostic responses and consent records are stored in a private spreadsheet accessible solely to the data controller. Gmail is used for diagnostic-related and, where consent has been given, marketing emails. Google LLC is headquartered in the United States. Data transfers are governed by Standard Contractual Clauses (SCCs) in accordance with Chapter V GDPR. Google's privacy policy is available at policies.google.com/privacy.
• Netlify, Inc. — this website is hosted on Netlify. Netlify may automatically process technical information such as IP address, device and browser information in order to deliver and secure the website. Diagnostic form submissions are sent to Google Sheets and EmailJS rather than stored as website content on Netlify. Netlify's privacy statement is available at netlify.com/privacy.
• EmailJS — form submission data is transmitted via EmailJS to send an email notification to the data controller when a diagnostic is submitted. This notification may include the respondent's name, email address, selected context, and summary diagnostic results. EmailJS is used only for submission notifications and not for marketing.

Personal data is not sold or shared with third parties for their own advertising or marketing purposes. Village of Two sends marketing communications only where the recipient has opted in. Where consent has been given, diagnostic results may be used to select insights, articles and workshop invitations likely to be relevant to that person. Optional free-text responses are not used for this personalisation. No advertising platforms or behavioural tracking tools are used on this site.

5. Retention period

Diagnostic responses and optional free-text answers are retained for a maximum period of 12 months from the date of last meaningful contact. Where a person has subscribed to Village of Two emails, their name, email address, consent record and the structured diagnostic results used for personalisation may be retained while the subscription remains active.

After marketing consent is withdrawn, marketing emails will stop and data retained solely for email personalisation will be deleted. A minimal suppression record may be retained to ensure the person is not accidentally contacted again.

Data subjects may request deletion at any time prior to this period. Such requests will be fulfilled within 30 days.

6. Rights of data subjects

Under the GDPR, data subjects have the following rights with respect to their personal data:

• Right of access (Art. 15 GDPR): The right to obtain confirmation of whether personal data is being processed and, if so, access to that data.
• Right to rectification (Art. 16 GDPR): The right to request correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): The right to request deletion of personal data.
• Right to restriction of processing (Art. 18 GDPR): The right to request that processing be restricted under certain conditions.
• Right to data portability (Art. 20 GDPR): The right to receive personal data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR): The right to object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR): The right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact: villageof2coach@gmail.com. To unsubscribe from marketing emails, reply “unsubscribe” to any Village of Two marketing email or contact the same address. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Requests will be responded to within 30 days.

7. Right to lodge a complaint

Data subjects have the right to lodge a complaint with the competent supervisory authority. The supervisory authority for Berlin is:

8. Cookies and tracking

This website does not use tracking cookies or analytics tools. No personal data is stored on the user's device via cookies by this website.

Google Fonts is used for typography. Loading this resource establishes a technical connection to Google's servers and may result in Google receiving the user's IP address. This processing is carried out on the basis of legitimate interest (Art. 6(1)(f) GDPR) in delivering a consistent visual presentation of the site. No personal data is stored locally as a result of this connection. Users who wish to prevent this connection may disable JavaScript or use a browser extension that blocks third-party font requests.

9. Amendments

This policy may be updated from time to time. The date of the most recent revision is indicated at the top of this page. Where changes are material, data subjects who have previously submitted the diagnostic will be notified by email.