Privacy notice

Controller

MHP Coaching, Chemin de la Fenetta 42, 1752 Villars-sur-Glâne, is the controller of personal data collected through mhp-coaching.ch.

For questions about your data, write to contact@mhp-coaching.ch or call +41 79 451 44 92.

This notice describes processing under the Swiss Federal Act on Data Protection (FADP) and, where Regulation (EU) 2016/679 (GDPR) applies — in particular if you live in the EU or EEA.

Data we collect

You can book without an account. Data is collected when you provide it or when the payment provider confirms a transaction.

• Course booking: first name, last name, date of birth, email, phone, postal address (street, postcode, city, country), language, selected course and session, amount, currency, payment status and related timestamps. The booking is stored when the form is submitted, including if online payment is not completed.
• Waiting list: first name, last name, email, phone, language, course concerned.
• Fifteen-minute advice call: first name, last name, email, phone, language, reserved time, the subject (training or sessions), the course being viewed if any, and an optional note.
• Appointment for a hypnosis or coaching session (booked on app.mhp-coaching.ch, also in the calendar embedded in www.mhp-coaching.ch): first name, last name, email, phone, language, the session, therapist and time chosen, the page you booked from, and the answers to the session questionnaire: date of birth, address, reason for consultation and whether you are currently seeing a psychiatrist or a psychotherapist, plus an optional message. The reason for consultation and current treatment are health data: they are collected only with your explicit consent, given with a separate checkbox in the questionnaire, which you fill in right after booking or from the link in your confirmation email.
• Written question from a course or sessions page: first name, last name, email, phone, language, message, the subject (training or sessions), and the course being viewed if any.
• Contact form and request for another payment method: name, email, phone if provided, message, language, and optionally the related course or booking.
• Account (optional): first name, last name, email, encrypted password, optional contact details, and the language you use the site in, which sets the language of our emails. A strictly necessary session cookie keeps you signed in.
• Referral and credit: a booking’s referral code (from the invitation link that was opened, kept for 30 days in a technical cookie “mhp_invitation” to apply the discount), the account that code belongs to, or the email address of the person who recommended the School, given on the referral page (used only to credit them and to tell them once by email), the discount granted, and an account’s credit entries (amount, date, reason, booking concerned). The referrer only learns that a booking was made through their link and what credit they receive; neither the name nor the contact details of the person who booked are disclosed to them.
• Invitations: when a referrer asks us to invite someone, we keep the email address, the optional first name and the language they gave, with the date sent, to send a single invitation and avoid repeats. We use that address for nothing else. The invited person may ask for its deletion at any time.
• Payment: Stripe sends transaction status, a payment reference and metadata needed for accounting. We do not store full card numbers or TWINT secrets.
• Audience measurement: Vercel Analytics records aggregated usage statistics without cookies and without naming visitors. PostHog measures the audience of www.mhp-coaching.ch and app.mhp-coaching.ch. Only if you accept, PostHog records, using cookies and local storage, the pages you view, your interactions with the site (clicks, technical errors encountered) and technical details (browser, device, approximate country); when you are signed in to your account, the account ID, your email and your name are linked to them. Without your answer, or after a refusal, PostHog measures the audience only anonymously and in aggregate, without any cookies or browser storage: the IP address and browser details are hashed on PostHog’s servers with a salt that changes daily, and visitors are not followed from one day to the next.

Purposes and legal bases

We use the data to process enrolment, confirm payment, write to you, keep the school’s register, answer messages, notify you when a session opens, honour a reserved advice call, and meet Swiss accounting and legal duties.

Bases: performance of the booking contract or pre-contractual steps; legal obligations (accounts, tax); legitimate interest in running a secure site and in anonymous, aggregate audience measurement without cookies (Vercel Analytics, PostHog without cookies), which you can object to by writing to contact@mhp-coaching.ch; consent for cookie-based analytics (PostHog), which you can withdraw at any time; consent when you accept this notice before submitting a form.

Session appointments: the data are used to book and hold the appointment, to send you the confirmation, the reminder and any change, and to let your therapist prepare the session; the questionnaire answers are passed on to your therapist and accessible only in the centre team’s protected area. Basis: pre-contractual steps and the session contract, and for the health data your explicit consent, which you can withdraw at any time by writing to us (the appointment can then stand without those answers).

Payment (TWINT, Visa, Mastercard)

Online payment is processed by Stripe. Available methods are TWINT (Swiss francs only), Visa and Mastercard. Stripe receives the data needed to take payment.

The charged amount is the published course price, less any referral discount or credit shown before payment. A browser-supplied amount never decides that a booking is paid: only a verified payment event does.

Processors and transfers

We use providers to host the site, database, payments and transactional email. Application hosting is with Vercel. The PostgreSQL database is hosted in the EU. PostHog analytics (PostHog Cloud EU, a processor) is hosted in the EU, whether or not you accepted cookies. Stripe and, depending on configuration, the email provider may process data in the United States or other countries.

Transfers out of Switzerland or the EEA rely on mechanisms provided by the FADP and GDPR, in particular standard contractual clauses or an adequacy decision where one exists.

Cookies and trackers

On your first visit to www.mhp-coaching.ch or app.mhp-coaching.ch, a banner asks whether you accept analytics cookies. “Decline” is as easy as “Accept”, and nothing is set before you answer. Your choice applies to both sites: it is kept in the “mhp_consent” cookie (at most 400 days, renewed on each visit) and in your browser’s local storage. This cookie is strictly necessary and only serves to respect your choice.

PostHog analytics. With your consent: PostHog sets a “ph_…_posthog” cookie (valid for one year) on the mhp-coaching.ch domain and uses the browser’s local storage, to recognise your browser from one visit to the next and across both sites. Without an answer, or after a refusal: PostHog runs without cookies and without local or session storage; the audience is measured anonymously and in aggregate, with the IP address and browser details hashed on PostHog’s servers using a salt renewed daily, so visitors are not followed from one day to the next. This cookieless measurement rests on our legitimate interest in knowing the site’s audience; you can object by writing to contact@mhp-coaching.ch.

You can change your choice at any time via “Manage cookies” at the bottom of every page. If you withdraw your consent, PostHog’s cookies and local data are deleted from your browser and measurement continues without cookies.

If you open an invitation link from a former participant, the strictly necessary cookie “mhp_invitation” (30 days) remembers that invitation so the discount applies when you register. It holds only the invitation code. The open referral page likewise sets the strictly necessary cookie “mhp_referred” (30 days), which only records that you came through that page, so the discount stays shown until you register. If you open the discount link sent to you after an information evening, the strictly necessary cookie “mhp_offer” (30 days) remembers that link’s identifier so the discount stays shown until you register; the email address you used for the evening is then used to check that the discount is yours.

The language is in the URL (/fr, /de, /en); no language cookie is stored. Vercel Analytics measures aggregated usage without cookies and without tracking visitors across days or websites.

Stripe may set strictly necessary cookies on its own checkout pages when you pay with TWINT, Visa or Mastercard. Those cookies exist to complete the payment you requested.

Session appointments are booked in our own calendar (app.mhp-coaching.ch), also when it is embedded in a page of www.mhp-coaching.ch: it sets no cookies and uses no third-party booking service.

During your visit, the contact details typed into a booking form (name, email, phone, date of birth, address) are kept in your browser’s session storage so you need not retype them. They are erased when the tab closes, after 24 hours at most, and reach us only when you send the form. The health questionnaire answers are never stored there.

Retention

Bookings, payment events and accounting records are kept as long as Swiss retention duties require, generally ten years.

Waiting-list requests are kept until a session is communicated or you ask for deletion, and no longer than twenty-four months after joining the list.

Contact messages, written questions and advice calls are kept while we handle the request, then at most two years unless a longer legal need applies.

Certificates: each certificate issued gets a code that lets its authenticity be checked. If you delete your account, we keep a minimal record (code, name as written on the certificate, title, issue date and status) so the certificate stays verifiable and for our obligations to recognition bodies (eduQua, ASCA); the scanned document is erased. You can ask us to erase this record too. A certificate's page is private until you make it public: anyone with the code and your surname can only check that it is valid. Public, it shows your name, the title, the date, the hours and the code, never the document. We count views and verifications without recording who makes them.

Appointments: the questionnaire answers (including health data) are passed on to your therapist, by email and in the centre team’s protected area; they are stored encrypted (AES-256) in our database and erased automatically from our database thirty days after the appointment ends. The appointment itself (identity, contact details, session, date and status) is kept as the practice's record. The answers never appear in emails to you, in our exports or in our audience measurement. You can cancel or reschedule with the personal link in your email until the stated deadline, or by calling us.

Your rights

You may request access, rectification, erasure, restriction, portability where the law requires it, and object to certain processing. Write to contact@mhp-coaching.ch. Erasure does not apply where retention is mandatory, in particular for accounting.

You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC). If the GDPR applies, you may also contact the supervisory authority in your EU or EEA country of residence.