Privacy & Data Protection Policy
Last Updated: July 3, 2025
At Doula Lili, I care deeply about your privacy and take the protection of your personal data seriously. This policy explains how I collect, use, store, and safeguard your information in accordance with the EU General Data Protection Regulation (GDPR).
1. Scope and Application
This policy applies to all interactions with Doula Lili, including:
-
My website: www.doulalili.dk (and any redirected domains)
-
Communication channels: email, WhatsApp, and social media (e.g., Instagram, Facebook)
-
In-person or online services, classes, consultations, and purchases
By using my services or contacting me through any of these platforms, you agree to the practices described here.
2. Data Controller
Doula Lili
CVR: 38821938
Valby, 2500 Copenhagen, Denmark
Email: info@doulalili.dk
3. Legal Basis for Processing
Your personal data is collected and processed based on one or more of the following legal grounds:
-
Your consent (e.g., signing up for a newsletter, filling in a contact form)
-
Performance of a contract (e.g., booking a session or workshop)
-
Compliance with legal obligations (e.g., bookkeeping, tax reporting)
-
Legitimate interest (e.g., improving services or communications)
-
Protection of vital interests (e.g., relevant disclosures during birth support)
4. What Data I Collect and Why
Depending on your interaction with me, I may collect:
-
Contact information (name, email, phone number)
-
Service or booking details (session history, preferences)
-
Health-related information, when relevant for doula care or safety
-
Payment data, solely for accounting purposes
-
Website analytics or cookie data, if applicable
Your data is used to:
-
Deliver services
-
Communicate important updates
-
Respond to inquiries
-
Comply with legal and tax regulations
-
Improve client experience
5. Handling of Sensitive Health Information
When necessary for your care, I may collect relevant health details (e.g., pregnancy status, medical concerns). These are handled with the highest confidentiality:
-
Handwritten notes are stored securely and destroyed after 1 year
-
Digital records (e.g., intake forms or email exchanges) are stored in Google Workspace and deleted within 6 months
-
Health information is never shared without your explicit consent
6. Payments & Financial Information
Payments are typically made through MobilePay, Stripe, or other platforms. I do not store your payment details. These are used only to process transactions and fulfill accounting obligations. Please see the privacy policies of each payment provider for further details.
7. Communication
I may contact you via email, phone, or WhatsApp for:
-
Appointment reminders and service-related notices
-
Payment or scheduling matters
-
Feedback or surveys
-
Legal or agreement-related issues
You may opt out of non-essential communications by contacting me at info@doulalili.dk.
8. Your Rights Under GDPR
You have the right to:
-
Access your personal data
-
Request corrections or updates
-
Request deletion of your data (“right to be forgotten”)
-
Restrict or object to certain types of processing
-
Request a copy of your data (portability)
-
Withdraw your consent at any time
To exercise your rights, simply email: info@doulalili.dk
9. Data Minimization & Retention
I only collect information that is necessary for the purpose of providing services or complying with the law. Personal data is retained only as long as needed and then securely deleted or anonymized.
10. Data Security Measures
Your data is protected through appropriate safeguards:
-
Password-protected systems
-
Encrypted communication (where applicable)
-
Limited access to files and data
-
Physical protection of paper records
Only trusted collaborators with a valid reason will ever access your personal data.
11. Third-Party Tools and Data Sharing
To operate my business, I may use third-party tools and platforms that are GDPR-compliant. These may include:
-
Wix / DanDomain (website hosting and sales platform)
-
Google Workspace (email and cloud storage)
-
Stripe / MobilePay (payment processors)
-
Social media platforms for communication and visibility
These providers handle your data under their own privacy policies and only as necessary for providing services.
12. Cookies and Tracking Technologies
My website may use cookies or similar technologies to enhance functionality and understand visitor behavior. When visiting the site, you may see a banner or pop-up asking for your cookie preferences.
For more information, please refer to the Cookie Policy.
13. Data Breach Notification
In the event of a data breach that may affect your rights or freedoms, I will notify both the relevant data authority and any affected individuals as required by GDPR.
14. Updates to This Policy
This policy is reviewed regularly and updated as needed to remain compliant. Any major changes will be posted clearly on my website.
For questions or concerns, feel free to write: info@doulalili.dk
.png)