Privacy Policy

Who I am

Sync-In Flow is operated by Josie Thorne, based in Berlin, Germany. I offer digital products (courses, ebooks, guided meditations), coaching services, and workshops focused on menstrual health and cyclical living.

As a business based in the European Union, I comply with the General Data Protection Regulation (GDPR). This policy explains how I handle your personal data when you visit this website, purchase products, sign up for my newsletter, or work with me in any capacity.

What I collect and why

Contact forms

When you send me a message through the contact form, I collect your name, email address, and your message content. I use this solely to respond to your enquiry. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Newsletter signups

If you subscribe to my newsletter, I collect your email address and first name (optional). Your subscription is managed through ConvertKit (Kit), which stores this data on servers in the United States. ConvertKit is Privacy Shield certified and processes data under Standard Contractual Clauses. You can unsubscribe at any time using the link in every email. Legal basis: consent (Art. 6(1)(a) GDPR).

Purchases

When you buy a digital product or coaching package, your payment is processed by a third-party payment provider. They collect your name, email, billing address, and payment information. I do not store your credit card details — the payment provider handles all payment data directly. I receive your name, email, and purchase details so I can deliver your product and provide support. Legal basis: contract performance (Art. 6(1)(b) GDPR).

Booking calls

Discovery calls and coaching sessions are booked through Cal.com. When you book, Cal.com collects your name, email, and any notes you include. This data is used to schedule and manage our sessions. Legal basis: contract performance (Art. 6(1)(b) GDPR).

Analytics

I use Plausible Analytics to understand how people use this website. Plausible is a privacy-focused, EU-hosted analytics tool that does not use cookies, does not collect personal data, and does not track you across websites. No IP addresses are stored. All data is aggregated and anonymous. I cannot identify individual visitors.

Cookies

This website uses minimal cookies. Plausible Analytics is entirely cookie-free. The only cookies that may be set are essential, functional cookies required for the website to work properly (for example, if you log in to access purchased content). I do not use advertising cookies, tracking cookies, or third-party marketing cookies.

Third-party services

I work with a small number of trusted services to run this business. Each has been chosen with data protection in mind:

• ConvertKit (Kit) — email newsletter management
• Resend — transactional emails (order confirmations, password resets)
• Payment provider — payment processing and digital product delivery
• Cal.com — session booking and scheduling
• Plausible Analytics — privacy-focused, cookie-free website analytics (EU-hosted)

I do not sell, rent, or share your personal data with anyone outside of these service providers, and they only process your data on my behalf for the purposes described above.

How long I keep your data

Contact form messages are kept for up to 12 months after our last communication, then deleted. Newsletter subscriber data is kept for as long as you remain subscribed. Purchase records are retained for 10 years as required by German tax law. Coaching session notes are kept for 12 months after our last session, unless you request earlier deletion.

Your rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data I hold about you
• Rectification — ask me to correct inaccurate data
• Erasure — ask me to delete your data (subject to legal retention requirements)
• Portability — receive your data in a structured, commonly used format
• Restriction — ask me to limit how I process your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — for any processing based on consent (like the newsletter), you can withdraw at any time

To exercise any of these rights, email me at hello@syncinflow.com. I will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority. In Germany, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes to this policy

I may update this policy from time to time. If I make significant changes, I’ll notify newsletter subscribers by email and post a notice on this website. The “last updated” date at the top of this page always reflects the current version.