Privacy Policy

1. Privacy at a Glance

General Information The following information provides a simple overview of what happens to your personal data when you visit this website or use our services. Personal data is any data that can be used to identify you personally. For detailed information, please refer to the full privacy policy below.

Data Collection Data is processed by the website operator (contact details in Section 3). Data is collected when you provide it to us (e.g. by email, booking, intake forms) or automatically when you visit the website (technical data, cookies). You have the right to access, rectify, delete and restrict your data at any time, to withdraw any consent you have given, and to lodge a complaint with the competent supervisory authority.

2. Hosting & Infrastructure

Hostinger (Website Hosting, VPS & Automation) This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit the website, Hostinger automatically collects server log files, including your IP address, browser type, operating system, referrer URL and time of access. We also use Hostinger’s server infrastructure for automation processes (n8n), in which personal data (e.g. email addresses from booking processes) may be processed. Legal basis: Art. 6(1)(f) GDPR (secure and efficient operation of our website). A DPA is in place. Privacy policy: https://www.hostinger.com/privacy-policy

GoDaddy (Domain & DNS) Our domain is registered with GoDaddy.com, LLC, 14455 North Hayden Road, Suite 226, Scottsdale, Arizona 85260, USA, which also provides DNS services. When you access our website, your browser’s request is resolved via GoDaddy’s DNS servers, which may process your IP address. Legal basis: Art. 6(1)(f) GDPR. GoDaddy is certified under the EU-US Data Privacy Framework (DPF). Privacy policy: https://www.godaddy.com/legal/agreements/privacy-policy

3. General Information & Mandatory Disclosures

Controller

Actually Living LLC

5830 E 2nd St
Casper, WY 82609
United States

Registered with the Wyoming Secretary of State, Filing ID: 2026-002057551

Represented by: Edgar Bobb, Managing Member
Email: connect@edgarbobb.com

Retention Period Personal data is stored until the purpose of processing ceases or you request deletion. Statutory retention periods remain unaffected. Tax-relevant documents are retained for ten years, commercial correspondence for six years.

Your Rights You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Complaints may be directed to the competent data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

Withdrawal of Consent Many data processing operations are only possible with your consent. You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR), for example by email to connect@edgarbobb.com. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to Object to Direct Marketing You have the right to object at any time to the processing of your personal data for direct marketing purposes. After objection, your data will no longer be processed for this purpose.

SSL/TLS Encryption This website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser.

International Data Transfers Where data is transferred to third countries (outside the EU/EEA), this is done only on the basis of appropriate safeguards (e.g. EU Standard Contractual Clauses, EU-US Data Privacy Framework) pursuant to Art. 44 et seq. GDPR.

4. Cookies & Consent

This website uses cookies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR. All other cookies (analytics, marketing) are only set with your explicit consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Until you give your consent, these tools are not loaded.

Consent Management To obtain and manage your consent, we use the cookie consent function provided by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Your consent decision, the time of consent and technical data (e.g. browser information) are stored in a cookie on your device. Legal basis: Art. 6(1)(c) GDPR (obligation to document consent). You can change or withdraw your consent at any time via the cookie settings on this website.

Types of Cookies

• Session cookies: Deleted automatically after you leave the website

• Persistent cookies: Remain stored until you delete them or your browser removes them automatically

5. Analytics & Tracking

Google Analytics 4 (GA4) To analyse user behaviour, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 uses cookies and collects data including shortened IP addresses, page views and interactions. Processing takes place only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data may be transferred to the USA; Google is certified under the EU-US DPF. You can withdraw your consent at any time via the cookie settings. Privacy policy: https://policies.google.com/privacy

Meta Pixel We use the Meta Pixel by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The Pixel tracks visitor behaviour for ad optimisation and remarketing purposes. Processing takes place only with your explicit consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data may be transferred to the USA; Meta is certified under the EU-US DPF. You can withdraw your consent at any time via the cookie settings. Privacy policy: https://www.facebook.com/privacy/policy

6. Communication & Marketing

Contact by Email If you contact us by email at connect@edgarbobb.com, we process the data you provide (e.g. name, email address, content of your message) to handle your enquiry and any follow-up questions. Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). Your data is deleted once your enquiry has been fully resolved, unless statutory retention obligations apply.

Email Marketing (Alfima) For email and newsletter delivery, we use Alfima by alfima GmbH, Gärtnerstraße 26a, 20253 Hamburg, Germany. Your email address and any additional information are stored and processed only after your explicit consent via a double opt-in process (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email. A DPA is in place. Privacy policy: https://alfima.io/datenschutz

ManyChat (Instagram & WhatsApp Automation) We use ManyChat Inc., 535 Mission Street, San Francisco, CA 94105, USA, for automated communication via Instagram Direct Messages and WhatsApp. Usernames, messages and phone numbers may be processed. Legal basis: Art. 6(1)(a) GDPR (consent through active interaction). Data is transferred to the USA. A DPA is in place. Privacy policy: https://manychat.com/privacy

Meta Instagram & WhatsApp Business We use Instagram and WhatsApp Business, both services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, for communication and marketing. Legal basis: Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR where active consent is given. Data may be transferred to the USA; Meta is certified under the EU-US DPF. Privacy policy: https://www.facebook.com/privacy/policy

7. Bookings, Courses & Payment Processing

Digistore24 (Reseller, Checkout & Payment Processing) Our products and programs are sold via Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany, or one of its affiliated companies, depending on the customer’s location. Digistore24 acts as reseller: it purchases our products and sells them in its own name to customers, which makes it your contractual partner for the purchase. Digistore24 processes your personal data as an independent controller, in particular name, email address, billing address, payment data, IP address and order data. Digistore24 shares the data required to deliver the product and provide access (such as name, email address and order details) with us. Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (statutory retention obligations, e.g. under tax law). Privacy policy: https://www.digistore24.com/page/privacy/1/en

Alfima (Coaching Platform, Bookings, Online Courses) For client management, appointment bookings, email communication and the delivery of online courses and membership content, we use Alfima by alfima GmbH, Gärtnerstraße 26a, 20253 Hamburg, Germany. Personal data processed includes name, email address, order and access data, course progress, coaching notes and form data. Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR for marketing emails. A DPA is in place. Privacy policy: https://alfima.io/datenschutz

Calendly (Appointment Scheduling) For booking calls and appointments, we use Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. Name, email address and further details may be processed. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). Data is transferred to the USA. A DPA is in place. Privacy policy: https://calendly.com/privacy

TidyCal (Appointment Scheduling) For booking calls and sessions, we also use TidyCal, a service of AppSumo (Sumo Group Inc.), Austin, Texas, USA. Name, email address, booking details and any information you provide in the booking form are processed. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures and contract performance). Data is transferred to the USA on the basis of EU Standard Contractual Clauses. Privacy policy: https://tidycal.com/privacy

Stripe (Payment Processing & Checkout) Payments are processed via Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe processes payment data and personal data for fraud prevention purposes. Legal basis: Art. 6(1)(b) GDPR. Stripe is certified under the EU-US DPF. Privacy policy: https://stripe.com/privacy

8. Coaching Sessions, Breathwork & Health Data

Health Data (Art. 9 GDPR) To deliver coaching and breathwork sessions safely, we may process information about your physical and mental health, for example contraindications for breathwork (such as cardiovascular conditions, pregnancy or epilepsy) and personal topics you share in coaching. This information constitutes special categories of personal data. We process it only on the basis of your explicit consent (Art. 9(2)(a) GDPR), which we obtain separately, e.g. in our intake form. You can withdraw this consent at any time with effect for the future. Without this information, we may not be able to offer certain breathwork practices to you safely. Health data is only accessible to the facilitator working with you and is deleted when it is no longer needed for the coaching relationship, unless statutory retention obligations apply.

Tally (Intake Forms & Consent) For intake questionnaires, including health information and your consent to its processing, we use Tally by Tally BV, Belgium. The data you enter in the form (e.g. name, email address, health information, signature) is stored on Tally’s servers within the EU. Legal basis: Art. 6(1)(b) GDPR and, for health information, your explicit consent pursuant to Art. 9(2)(a) GDPR. A DPA is in place. Privacy policy: https://tally.so/help/privacy-policy

Zoom (Video Sessions) For online coaching sessions, breathwork journeys and men’s circles, we use Zoom by Zoom Communications, Inc., 55 Almaden Blvd, San Jose, CA 95113, USA. Name, email address, image and voice data, meeting metadata and chat content may be processed. Legal basis: Art. 6(1)(b) GDPR (contract performance). Data may be transferred to the USA; Zoom is certified under the EU-US DPF. A DPA is in place. Privacy policy: https://www.zoom.com/en/trust/privacy/privacy-statement/

Fireflies.ai (Call Recording & Transcription) With your prior consent, we record and transcribe selected calls (e.g. discovery calls or coaching sessions) using Fireflies.ai by Fireflies.AI Corp., 5424 Sunol Blvd, Ste 10-531, Pleasanton, CA 94566, USA. Audio recordings, transcripts, names and email addresses of participants are processed to create notes and summaries. Recordings only take place if all participants have agreed beforehand; you can decline or withdraw your consent at any time, in which case the call will not be recorded. Legal basis: Art. 6(1)(a) GDPR and, where health information is discussed, Art. 9(2)(a) GDPR. Data is transferred to the USA; Fireflies is certified under the EU-US DPF. A DPA is in place. Privacy policy: https://fireflies.ai/privacy

9. Internal Tools & Productivity

Google Workspace For internal communication, documentation and the processing of client data (coaching notes, forms), we use Google Workspace by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Legal basis: Art. 6(1)(b) and (f) GDPR. A DPA is in place. Data may be transferred to the USA; Google is certified under the EU-US DPF. Privacy policy: https://policies.google.com/privacy

Notion For documentation, client management and project organisation, we use Notion by Notion Labs, Inc., 2300 Harrison Street, San Francisco, CA 94110, USA. Client data such as names, contact details and session notes may be stored. Legal basis: Art. 6(1)(b) and (f) GDPR. Data is transferred to the USA; Notion is certified under the EU-US DPF. A DPA is in place. Privacy policy: https://www.notion.com/notion/privacy

ClickUp For task and project management, we use ClickUp by Mango Technologies, Inc. d/b/a ClickUp, San Diego, CA, USA. Client names and project-related information may be processed. Legal basis: Art. 6(1)(f) GDPR (efficient organisation of our business). Data is transferred to the USA; ClickUp is certified under the EU-US DPF. A DPA is in place. Privacy policy: https://clickup.com/privacy

Riverside.fm (Podcast Production) For podcast recordings and interviews, we use Riverside.fm by Riverside Technologies Inc., 228 Park Ave S, New York, NY 10003, USA. Personal data of interview guests (name, email, image, voice) may be processed. Legal basis: Art. 6(1)(a) GDPR (consent of participants). Data is transferred to the USA. Privacy policy: https://riverside.fm/privacy

10. Social Media & External Links

Instagram & WhatsApp We maintain a presence on Instagram and use WhatsApp Business (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When you contact us via these channels, your data is processed by Meta. We have no influence over Meta’s data processing. Legal basis: Art. 6(1)(f) GDPR. Privacy policy: https://www.facebook.com/privacy/policy

Links to YouTube & Spotify This website contains links to our podcast on YouTube and Spotify. No data is transferred to these providers when you visit our website. Only when you click a link are you redirected to the respective platform, whose privacy policy then applies:

YouTube (Google Ireland Limited): https://policies.google.com/privacy

Spotify (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden): https://www.spotify.com/legal/privacy-policy/

11. Consumer Dispute Resolution

We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

12. Changes & Updates

We update this privacy policy whenever changes to our data processing practices require it. We recommend checking this page regularly.

Last updated: October 2026