Last updated: 17 October 2026

 

This policy explains how GraceCo Ventures OÜ (registry code 17491999, Estonia) ("GraceCo Ventures", "we", "us") collects and uses personal data when you visit graceco.com, contact us, join a waitlist or book a session. We are the data controller for this data under the EU General Data Protection Regulation (GDPR).

 

Contacting us

For any privacy question or request, please use the Get in Touch form on our website and mention "Privacy" in your message. We will reply within one month.

 

What we collect

• Get in Touch form: your name, email address, your message and any file you choose to attach.

• Course waitlist: your email address.

• Bookings: your name, email address, phone number (if given) and the details of the session you book.

• Website use: technical data such as your IP address, browser and device type, and cookies (see below).

 

Why we use it, and our legal basis

• To answer your enquiry – our legitimate interest in responding to people who contact us, or steps taken at your request before entering into a contract.

• To provide coaching sessions, courses and services you book – performance of a contract.

• To tell you when our video courses open – your consent, which you give by joining the waitlist. You can withdraw it at any time.

• To keep the website secure and working – our legitimate interest.

• Analytics and marketing cookies – only with your consent, given through the cookie banner.

• To meet legal obligations, for example tax and accounting records – legal obligation.

 

Who we share it with

We do not sell your personal data. We share it only with service providers that process it on our behalf, under contracts that protect it:

• Wix.com, which hosts our website, forms and booking system.

• Usercentrics, which provides our cookie consent banner.

• Our accountants and professional advisers, where needed.

We may also disclose data where required by law.

 

International transfers

Some of our providers store data outside the European Economic Area, including in the United States and Israel. These transfers rely on a European Commission adequacy decision (including the EU–US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.

 

How long we keep it

• Enquiries: up to 24 months after our last contact.

• Waitlist: until the course launches or you unsubscribe, whichever is first.

• Bookings and invoices: 7 years, as required by accounting law.

• Cookie consent records: as set out in the cookie banner.

 

Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time without affecting earlier processing. To use any of these rights, please contact us through the Get in Touch form. You also have the right to complain to a data protection authority: the Estonian Data Protection Inspectorate (www.aki.ee), the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it), or the authority in the EU country where you live or work.

 

Cookies

Cookies are small files stored in your browser. We use:

• Essential cookies – needed for the site, forms and bookings to work. These are always on.

• Analytics cookies – help us understand how the site is used. Only with your consent.

• Marketing cookies – only with your consent.

When you first visit, a banner lets you accept or reject non-essential cookies; rejecting is as easy as accepting. You can change your choice at any time through the cookie settings link on the site or in your browser settings.

 

Children

Our services are intended for adults and we do not knowingly collect data from children.

 

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.