Last updated: 19.09.2026

The Inner Meridian - Elisa Papi Mentoring ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website at www.theinnermeridian.com (the "Website") in accordance with applicable data protection laws. Please read this Privacy Policy carefully. By accessing our Website or doing business with us, you confirm you have read and understand our Privacy Policy. For any data protection inquiries or queries related to this Privacy Policy, please use the contact details provided in this policy.

1. Personal Data We Collect and Process

"Personal data" means any information relating to an identified or identifiable natural person ('data subject'). We collect and process various types of personal data depending on our interactions with you. This includes:

Data collected directly from you:

·       Contact Information: Name, postal address, billing address, shipping address, email address, and phone number.

·       Account Information: Username, password, preferences, and marketing preferences.

·       Financial and Transaction Information: Payment information (e.g., encrypted credit card details via our payment processors, account numbers) and transaction history (e.g., viewed items, consultation bookings, digital product purchases).

·       Communications: Records of your messages, emails, or inquiries with us.

Special Categories of Personal Data (Sensitive Data)

We generally do not collect or process sensitive personal data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, or data concerning your sex life or sexual orientation. However, within the scope of our mentorship and consultation services (such as burnout and stress management), you may voluntarily choose to provide us with information regarding your physical or mental health. We will only process this health-related data based on your explicit consent, which you grant us when booking your session or during the consultation. We treat all such information with absolute confidentiality in accordance with professional secrecy obligations and applicable data protection laws (including Article 9(2) of the GDPR and equivalent provisions under the Swiss FADP).

Automated data collection through our Website:

When you visit our website, we automatically collect data such as IP addresses, cookie identifiers, location data, device information, browser type, and details regarding your interactions with our website (e.g., pages viewed, clicks, blog "likes"). These technologies are used for web analysis and may create profiles of natural persons to improve our services.

Third-Party Services and Platform Core Functions:

We may collect and process your data with trusted third-party service providers who assist us in operating our Website, conducting our business, or providing our services to our users, so long as those parties agree to keep this information confidential. Our Website is hosted by a third-party service provider called Squarespace.

·       Customer Account, Member Site Subscribers, Online Stores or Donations: If you create an account or purchase a membership on our Website, we collect personal data from you to enable your access (Billing/shipping address, details relating to subscription/orders, email, name, phone number). We send automated transactional messages (order confirmations, password resets) which you cannot unsubscribe from. As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API.

·       Squarespace Payments: When you make a purchase from us on this website, we use Squarespace Payments as our payment solution, which makes use of Stripe (payment processing) and Sift (fraud monitoring).

·       Scheduling: When you schedule an appointment by booking on this Website, we collect personal data from you (Name, email, phone number, appointment details, uploaded files) to complete the booking.

·       Invoicing: We use branded invoices to collect payments and process email address, line items, name, and payment history.

·       Form Blocks: When you submit information to this Website via webform, we collect the requested data to respond to your submissions. We provide this to Squarespace and to Google Drive for secure data storage.

·       Abandoned Cart Emails: You'll receive an automated email within 24 hours after you abandon your shopping cart if you enter your email at checkout while logged in or leaving a product in stock. You can unsubscribe at the bottom of the email.

·       Marketing Emails | Campaigns: We may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email.

·       Blog Comments and Likes: This Website collects name, email (optional), and URL (optional) when you comment. It also collects network/browser info and IP addresses to prevent multiple duplicate blog post likes.

2. How We Use Your Personal Data

Depending on how you engage with our Website and services, we use the information we collect for the following purposes:

·       Website Operation: To operate, maintain, and secure our website, and fulfil your orders and consultation bookings.

·       Mentorship Delivery: To conduct our mentoring sessions and individual strategic consultations.

·       Customer Communications: To communicate with you about your transactions, service-related announcements, and assist with customer support.

·       Payment Processing: To process your payments for services requested.

·       Marketing Activities: To perform marketing activities regarding our products, services, and promotional messages.

·       Platform Integrity: To foster the safety, security, and integrity of our Website and services, including fraud and risk monitoring related to payments, investigating malicious activity, and securing our systems.

·       Traffic Analytics: To analyse Website traffic and usage trends (e.g., via Google Analytics).

·       Legal Compliance: To comply with applicable legal requirements, such as tax regulations, statutory book-keeping rules, contracts, or law enforcement requests under Swiss government regulations.

3. Legal Basis To Process Your Personal Data

We process your personal data for specified, explicit, and legitimate purposes. The regional framework distribution applies as follows:

·       For Users in Switzerland: We process your personal data in accordance with the Swiss Federal Act on Data Protection (FADP) transparently, proportionately, and for the purpose of contract fulfilment or based on your consent.

·       For Users in the EU / UK: The legal bases for our processing activities under the GDPR and UK GDPR are as follows:
• Your Consent (Art. 6(1)(a) GDPR): For sending marketing communications or processing your health data during mentorship. You have the right to withdraw your consent at any time.
• Performance of a Contract (Art. 6(1)(b) GDPR): Necessary to deliver digital products or conduct your booked consultation sessions.
• Legitimate Interests (Art. 6(1)(f) GDPR): To ensure the IT security of our website, prevent fraud, and analyze traffic trends.
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with legal requirements, such as statutory tax retention periods.

4. How We Disclose and Transfer Your Information

As part of the services we provide, we disclose information about you to trusted third parties to run our business (including website hosting, scheduling, order processing, payment processing, fraud prevention, and email marketing). Because we serve a global clientele, personal data may be accessed from or transferred to the following countries:

·       Switzerland: Where our core business operations, administration, and data management are located.

·       United States / European Union (EU): Our infrastructure is hosted and supported by third-party processors located in the US/EU, including Squarespace, Squarespace Payments (Stripe, Sift), Google (Google Places API, Google Analytics), and Google Drive.

·       Qatar, the United Arab Emirates (UAE), and Saudi Arabia (KSA): If you are located in or booking a consultation from one of these countries, your order-related data (such as consultation notes, invoices, and emails) will naturally be transferred to and processed within your home country to fulfil our contract with you.

International Transfer Safeguards & Mechanisms:

·       Data Privacy Frameworks (For Swiss, EU, and UK Clients): Squarespace, Inc. is officially certified under the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Extension. The Swiss Federal Council, European Commission, and UK government recognize this as providing an adequate, legally equivalent level of data protection.

·       Standard Contractual Clauses (SCCs): For regions or circumstances where the Data Privacy Framework does not fully cover the data flow, Squarespace incorporates the approved Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum directly into our Data Processing Agreement to guarantee data security.

·       Middle Eastern & Global Clients (UAE, Saudi Arabia, Qatar): If you access our services from the GCC region, your cross-border data transfer to our infrastructure in Switzerland or the US is performed to fulfil our contract with you (e.g., executing your booking or delivering your digital files) or based on your explicit consent, utilizing rigorous encryption and security measures.

5. Data Retention and Security

We retain personal data for no longer than is necessary for the purposes for which it was collected. In some cases, such as accounting and billing documents, we are legally required under Swiss law to store data for longer statutory retention periods (up to 10 years).

We implement appropriate technical and organizational measures to ensure an appropriate level of security and confidentiality, including: using SSL certificates (HTTPS) to encrypt data shared between our Website and servers, implementing strong password policies for administrative accounts, and minimising data collection. Please note that no method of electronic transmission or storage is 100% secure, and absolute security cannot be guaranteed.

6. Your Data Protection Rights

Regardless of where you are located—whether in Switzerland, the EU/UK, or the GCC region (UAE, Saudi Arabia, Qatar)—you hold fundamental rights over your personal data. We are committed to honoring these rights efficiently and free of charge. Depending on your local laws, your primary rights include:

·       Access & Information: You have the right to know exactly what data we hold about you and receive a copy of it.

·       Correction (Rectification): You can request that we immediately correct any inaccurate or incomplete information.

·       Deletion (Erasure): You can ask us to delete your personal data, provided we are not legally obligated to keep it (e.g., for statutory Swiss tax and accounting purposes).

·       Data Portability: You have the right to request a digital export of the personal data you provided to us in a structured format.

·       Restriction & Objection: You can ask us to stop processing your data for specific reasons, including an absolute right to object to any direct marketing or newsletter campaigns.

·       Withdrawal of Consent: If we process your data based on your consent (such as for health notes or marketing), you can withdraw that consent at any time.

To make a request, please contact us using the details provided below. To protect your privacy, we may ask you to verify your identity before fulfilling certain requests. If you believe your data has been handled unlawfully, you have the right to lodge a complaint with your local supervisory authority—such as the Federal Data Protection Commissioner (FADP) in Switzerland, your home EU/UK authority, or the relevant data protection authority in the UAE, Saudi Arabia, or Qatar.

7. Cookies, Fonts, and Third-Party Links

·       Cookies & Analytics: Functional and required cookies are always used to allow Squarespace to securely serve this Website. Analytics and performance cookies are used to view Website traffic and user interactions (clicks, scrolling, internal links) only when you acknowledge and accept our cookie banner.

·       Fonts: This Website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site, these third parties may receive your browser, network, device info, and IP address.

·       Third-Party Services and External Links: Our Website may contain links to third-party Websites. We are not responsible for the privacy practices of these third parties, and we encourage you to review their policies independently.

8. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last updated' date. Changes are effective when posted.

9. Contact Us

If you have any questions about this Privacy Policy or any data protection inquiries, please contact us at:

Website: www.theinnermeridian.com
Email: elisa@theinnermeridian.com
Address: Brandrietstrasse 1, 8307 Effretikon, Switzerland