Privacy Policy

The data controller responsible for your personal data is Sige Nagels, Truth Core Essence. You can reach us at hello@truthcoreessence.com.

For data protection matters concerning Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).

We may collect and process the following categories of personal data:

• Contact and identification data: name, email address, phone number, and billing country when you contact us or enroll in a program.
• Question form submissions: when you submit a question through the in-page question form on our Letters pages, we collect your question, email address, and phone number (including country code). These submissions are stored temporarily in a private Google Sheet (“CRM Parking”) accessible only to Sige Nagels, so we can respond personally. We aim to reply within 48 hours on weekdays. This data is held only for as long as needed to answer your question and is not used for marketing unless you separately consent.
• Payment data: billing details processed through our third-party payment provider Stripe. We do not store full card numbers or other complete payment credentials on our own systems.
• Program data: information you share during intake, sessions, or correspondence, which may include personal reflections relevant to your participation.
• Technical data: IP address, browser type, device information, and usage data collected via cookies or similar technologies.

Your personal data is stored and processed on servers located in the United States. This applies to data collected through the Website, our hosting and analytics providers, and our payment processor. When personal data of individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland is transferred to the United States, such transfer constitutes an international transfer of personal data.

Because the United States is not considered to provide an equivalent level of data protection to the EEA, the UK, or Switzerland, we rely on appropriate safeguards to lawfully transfer your data. These safeguards include Standard Contractual Clauses (SCCs) adopted by the European Commission and recognized by the Swiss FDPIC, which our service providers have implemented, together with supplementary measures such as encryption in transit and at rest. A copy of the relevant safeguards may be requested by contacting us at the address above.

By using the Website and providing your personal data, you acknowledge that your data will be transferred to and processed in the United States under the safeguards described in this section.

We process your personal data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): when you voluntarily provide your data to contact us, join a waitlist, or receive marketing communications. You may withdraw consent at any time.
• Performance of a contract (Art. 6(1)(b) GDPR): to fulfill our obligations when you enroll in and participate in a program.
• Legal obligations (Art. 6(1)(c) GDPR): to comply with applicable tax, accounting, and record-keeping laws.
• Legitimate interests (Art. 6(1)(f) GDPR): to operate, secure, and improve the Website and to communicate with you about our services, balanced against your rights and expectations.

This Privacy Policy also complies with the revised Swiss Federal Act on Data Protection (FADP). If you are located in Switzerland, the provisions of the FADP apply to the processing of your personal data, including the right to information, correction, deletion, and, where applicable, the right to object to processing or to data transfers abroad.

As noted above, your data is transferred to the United States. Under the FADP, such cross-border transfer is permitted where the recipient is bound by adequate safeguards (such as Standard Contractual Clauses) or where an exception under Art. 16 FADP applies. We ensure appropriate safeguards are in place before transferring your data.

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. Account and program data is typically retained for the duration of your participation plus a reasonable period thereafter for legal and tax record-keeping. You may request earlier deletion where no legal retention obligation applies.

Under the GDPR and the FADP, you have the following rights regarding your personal data, subject to applicable legal limitations:

• The right to be informed about how we use your data.
• The right of access to your personal data.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure (“right to be forgotten”).
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent at any time, without affecting prior processing.
• The right to lodge a complaint with your local data protection authority or the Swiss FDPIC.

To exercise any of these rights, contact us at hello@truthcoreessence.com. We will respond within one month, as required by the GDPR.

The Website may use cookies and similar technologies to operate properly, analyze traffic, and improve your experience. You can control cookies through your browser settings. Where cookies are not strictly necessary, we rely on your consent, which you may withdraw at any time.

We share your personal data only with service providers who help us operate the Website and deliver our programs (such as hosting, analytics, email, and payment processing), and where required by law. These providers are based in the United States and are bound by contractual obligations of confidentiality and security. We do not sell your personal data.

We implement reasonable technical and organizational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular review of our systems. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Website and our programs are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. We encourage you to review this page periodically.