Last updated: 29 October 2026

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that could personally identify you. For detailed information on data protection, please refer to our privacy policy set out below this text.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found under "Notice Regarding the Responsible Party" in this privacy policy.

How do we collect your data?
Your data is collected partly by you providing it to us — for example, data you enter in a contact form. Other data is collected automatically or with your consent when you visit the website, primarily technical data (e.g. browser, operating system, or time of access), collected automatically as soon as you access this website.

What do we use your data for?
Part of the data is collected to ensure the website functions without errors. Other data may be used to analyse your user behaviour. Where contracts are concluded or initiated via the website, the transmitted data is also used for contract offers, orders, or other inquiries.

What rights do you have regarding your data?
You have the right, at any time, to free information about the origin, recipient, and purpose of your stored personal data, and a right to request its correction or deletion. If you have given consent, you may withdraw it at any time for the future. You also have the right, under certain circumstances, to request restriction of processing, and a right to lodge a complaint with the competent supervisory authority. You're welcome to contact us any time with questions on data protection.

Analytics Tools and Third-Party Tools

Your browsing behaviour may be statistically evaluated when you visit this site, primarily through analytics programs. Detailed information on these is provided below.

2. Hosting

We host this website with:

Squarespace
The provider is Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland ("Squarespace"). When you visit our website, your data is processed on Squarespace's servers; personal data may also be transmitted to Squarespace's parent company, Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA. Squarespace also stores cookies necessary for displaying the page and ensuring security.

Use of Squarespace is based on Art. 6(1)(f) GDPR — our legitimate interest in reliably presenting our website. Where consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

Transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (details: support.squarespace.com/hc/en-us/articles/360000851908). The company is certified under the EU-US Data Privacy Framework (DPF); further information: dataprivacyframework.gov/participant/4774.

Data Processing Agreement: A data processing agreement is in place with Squarespace, ensuring personal data of our website visitors is processed only on our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection
We take the protection of your personal data seriously and treat it confidentially and in accordance with statutory data protection regulations and this privacy policy. Data transmission over the internet (e.g. email) may have security vulnerabilities; complete protection against third-party access is not possible.

Notice Regarding the Responsible Party

Alice Mary Bassett
Römerstrasse 30
70180 Stuttgart, Germany

Phone: +49 176 40485307
Email: alice@alicebassett.com

The responsible party is the natural or legal person who alone, or jointly with others, decides on the purposes and means of processing personal data.

Storage Duration
Unless a more specific period is stated in this policy, your data remains with us until the purpose for processing no longer applies, subject to any legal retention obligations (e.g. tax or commercial law).

Legal Basis for Processing
Where you've consented, we process on the basis of Art. 6(1)(a) GDPR (or Art. 9(2)(a) for special categories); where cookies or device access are involved, also § 25(1) TDDDG. Where processing fulfils a contract or pre-contractual steps, Art. 6(1)(b) applies; where required by law, Art. 6(1)(c); where based on our legitimate interest, Art. 6(1)(f). The specific basis for each activity is given in the relevant section below.

Recipients of Personal Data
We only pass personal data to external parties where required to fulfil a contract, where legally obliged, where we have a legitimate interest (Art. 6(1)(f)), or where another legal basis permits it. Any data processors we use are bound by a valid data processing agreement.

Withdrawal of Consent
You may withdraw any consent at any time, with future effect. The lawfulness of processing carried out before withdrawal is unaffected.

Right to Object (Art. 21 GDPR)
Where processing is based on Art. 6(1)(e) or (f), you may object at any time on grounds relating to your particular situation, including to related profiling. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves legal claims. Where data is processed for direct marketing, you may object at any time with immediate effect.

Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, in particular in your member state of residence, workplace, or the place of the alleged infringement.

Right to Data Portability
You have the right to receive data we process automatically based on consent or contract, in a common machine-readable format, and to have it transferred directly to another controller where technically feasible.

Right to Information, Rectification, and Erasure
You have the right to free information about your stored data, its origin, recipients, and purpose, and a right to correction or deletion. Contact us any time.

Right to Restriction of Processing
You may request restriction of processing where you dispute the data's accuracy, where processing was unlawful, where we no longer need the data but you need it for legal claims, or while an Art. 21(1) objection is being balanced. Restricted data may only otherwise be processed with your consent or for legal claims, protection of others' rights, or important public interest.

SSL/TLS Encryption
This site uses SSL/TLS encryption to protect confidential content such as inquiries or orders. An encrypted connection is shown by "https://" and the padlock icon in your browser. When active, data you transmit cannot be read by third parties.

Objection to Advertising Emails
We hereby object to the use of contact data published under our legal notice obligation for sending unsolicited advertising or information material. We reserve the right to take legal action against unsolicited promotional emails (e.g. spam).

4. Data Collection on This Website

Cookies
This website uses "cookies" — small data packets stored on your device, either temporarily (session cookies, deleted when you leave) or permanently (until deleted by you or your browser). Cookies may be ours (first-party) or from third parties. Some are technically necessary for website functions; others analyse behaviour or serve advertising purposes. Necessary cookies are stored on the basis of Art. 6(1)(f) GDPR — our legitimate interest in reliable, optimised delivery of the site. Where consent has been requested for cookies or comparable technologies, processing is based exclusively on that consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), withdrawable at any time. You can configure your browser to notify you about cookies, block them selectively or entirely, or delete them automatically on closing — this may limit site functionality.

Website Analytics (Squarespace Analytics)
In addition to Google Analytics, we use Squarespace's built-in "Squarespace Analytics" tool, which evaluates page views, time on site, and visitor origin to help us understand and improve site use. Where cookies or comparable technologies are used, processing is based on your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); otherwise on our legitimate interest (Art. 6(1)(f) GDPR). Consent may be withdrawn at any time. Further information is available in Squarespace's privacy policy.

Google Analytics
This site uses Google Analytics, a web analytics service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies to analyse your use of the site; information generated is generally transmitted to and stored on a Google server.

Storage of Google Analytics cookies is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, withdrawable at any time. We use Google Analytics with IP anonymisation enabled — Google shortens your IP address within the EU/EEA before transmission to the USA. Transfer to the USA is based on the European Commission's Standard Contractual Clauses. Further information: policies.google.com/privacy.

Contact Form
If you contact us via the contact form, your details — including contact information you provide — are stored for handling your inquiry and any follow-up. We don't pass this on without your consent. Processing is based on Art. 6(1)(b) GDPR where your inquiry relates to a contract, otherwise on our legitimate interest (Art. 6(1)(f)) or your consent (Art. 6(1)(a)), withdrawable at any time. Data remains with us until you request deletion, withdraw consent, or the purpose no longer applies, subject to statutory retention periods.

Inquiries by Email, Phone, or Fax
Inquiries sent this way, including resulting personal data, are stored and processed to handle your request, on the same legal bases and retention terms as above.

5. Social Media

Instagram
This website incorporates Instagram functions, offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When active, a direct connection is established between your device and Instagram's servers, informing Instagram of your visit. If logged into Instagram, clicking the Instagram button lets you link this site's content to your profile, allowing Instagram to associate your visit with your account. We have no knowledge of the data transmitted or its use by Instagram.

Use is based on your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), withdrawable at any time. Where personal data is collected here and forwarded to Facebook/Instagram, we and Meta Platforms Ireland Limited are joint controllers for that collection and transfer (Art. 26 GDPR) — joint responsibility ends there; Facebook/Instagram's subsequent processing is their own. Our respective obligations are set out at facebook.com/legal/controller_addendum. Data subject rights regarding Facebook/Instagram's own processing can be exercised directly with Facebook, or with us, in which case we'll forward your request.

Transfer to the USA is based on the European Commission's Standard Contractual Clauses (facebook.com/legal/EU_data_transfer_addendum). Further information: privacycenter.instagram.com/policy/. The company is DPF-certified: dataprivacyframework.gov/participant/4452.

6. Newsletter

Newsletter Data
To receive our newsletter, we need your email address and information confirming you're its owner and consent to receiving it. No further data is required, or only on a voluntary basis. This data is used exclusively for sending the newsletter and is not passed to third parties.

Newsletter Delivery via Flodesk
Our newsletter is sent via Flodesk, Inc., Claymont, DE, USA. Your email and any other sign-up data is stored and processed on Flodesk's servers; Flodesk may evaluate open and click behaviour to measure reach and effectiveness. Sign-up uses double opt-in: after signing up you receive a confirmation email, and you're added to the list only after confirming. Transfer to the USA is based on the European Commission's Standard Contractual Clauses. A data processing agreement is in place with Flodesk. Further information: flodesk.com/legal/privacy-policy.

Processing is based exclusively on your consent (Art. 6(1)(a) GDPR), withdrawable at any time via the "unsubscribe" link. Your data is retained until you unsubscribe or the purpose no longer applies. We may delete or block addresses from our list at our discretion under our legitimate interest (Art. 6(1)(f)). After unsubscribing, your address may be kept on a blacklist to prevent future mailings — used only for that purpose, not time-limited, and you may object where your interests outweigh ours.

7. Scheduling and Payment

Scheduling and Payment via Calendly
For booking appointments (e.g. consultation calls), we embed Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. Accessing the relevant page connects to Calendly's servers, processing data including your IP address, browser information, and the details you provide when booking (name, email, appointment preference). Calendly uses cookies.

Where a booking is paid, payment is processed via our connected provider, Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland ("Stripe") — your payment details go directly to Stripe.

Processing is based on your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) and, where the booking initiates or fulfils a contract, Art. 6(1)(b) GDPR. Consent may be withdrawn at any time. Calendly, LLC is DPF-certified. A data processing agreement is in place with Calendly through your use of its services. Further information: calendly.com/legal/privacy-notice and stripe.com/privacy.

Payment via Stripe Payment Links, PayPal and Klarna

Programmes such as The Steady Build are paid via payment links on this website. Payments are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland (“Stripe”). Depending on the payment method you choose, your payment data is also transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, or to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Processing is based on Art. 6(1)(b) GDPR, as it is required to fulfil the contract. Further information: stripe.com/privacy, paypal.com/privacy and klarna.com/privacy.

8. Links to External Services (Booking, Purchase, Events)

For certain offerings, we link from this site to external platforms where the actual booking, purchase, or registration takes place. Clicking these links takes you away from our site; we don't transmit any data at that point. Each external operator is solely responsible for processing your data there, under their own privacy policy.

• Gumroad (digital products) — Gumroad, Inc., USA. gumroad.com/privacy

• Eventbrite (event registration) — Eventbrite, Inc., USA. eventbrite.com/l/privacypolicy/

• Substack (newsletter sign-up for "Soulful Playground") — Substack Inc., USA. substack.com/privacy

9. Plugins and Tools

YouTube with Extended Privacy Mode

This website embeds videos from YouTube. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page on this website where YouTube is embedded, a connection is established to YouTube's servers, which tells YouTube which of our pages you've visited. If you're logged into your YouTube account, this allows YouTube to associate your browsing behaviour directly with your personal profile — you can prevent this by logging out of YouTube beforehand.

We use YouTube in extended privacy mode. According to YouTube, videos played in this mode aren't used to personalise browsing on YouTube, and ads shown are also not personalised. No cookies are set in extended privacy mode; instead, local storage elements are stored in the browser, which, similar to cookies, may contain personal data used for recognition. Details: support.google.com/youtube/answer/171780.

Activating a YouTube video may trigger further data processing beyond our control.

Use of YouTube serves our interest in presenting our content in an appealing way (Art. 6(1)(f) GDPR). Where consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

Further information: policies.google.com/privacy. The company is certified under the EU-US Data Privacy Framework (DPF): dataprivacyframework.gov/participant/5780.

10. Working Together: The Continuum Process and Programmes

Data You Share With Us

To deliver The Continuum Process, The Steady Build and related programmes, we process the information you share with us in the course of our work together. Processing is based on Art. 6(1)(b) GDPR. Where you share information about your health or other special categories of personal data within the meaning of Art. 9(1) GDPR, we process it solely on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time with future effect.

Video Sessions and Email via Google Workspace

Sessions take place via Google Meet, and we communicate via Gmail. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing is based on Art. 6(1)(b) GDPR. A data processing agreement is in place with Google. Further information: policies.google.com/privacy.

Visual Collaboration via Mural

We use the online whiteboard Mural to lay out and work with your self-reflection cards. The provider is Tactivos, Inc. d/b/a Mural, 611 Gateway Boulevard, Suite 120 - #1015, San Francisco, CA 94080, USA. Mural’s EU representative is the European Data Protection Office (EDPO), Ground Floor, 71 Lower Baggot Street, Dublin, D02 P593, Ireland. Transfer of data to the USA is based on the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Processing is based on Art. 6(1)(b) GDPR. Further information: mural.co/terms/privacy-statement.

Community Space and Materials via Notion

Our community space and programme materials are provided via Notion. The provider is Notion Labs, Inc., 685 Market St., San Francisco, CA 94105, USA. Transfer of data to the USA is based on the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Processing is based on Art. 6(1)(b) GDPR. Further information: notion.com/trust/privacy-policy.

Recordings of Group Sessions

Group check-ins are recorded and made available only to participants of the same programme. Recordings are deleted by 31 January of the following year at the latest. You may switch off your camera at any time. Processing is based on Art. 6(1)(b) GDPR.

Personal Intelligence Summary (AI-Assisted Analysis)

With your separate, explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), we analyse your self-reflection cards using Claude, an AI service provided by Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, Ireland. Before the analysis, we remove names and identifying details. Your data is not used to train AI models. Your consent is voluntary and can be withdrawn at any time with future effect. Further information: anthropic.com/legal/privacy.

How Long We Keep Your Work

The Continuum Process can be a one-off or an annual practice. We keep your Canvas and session materials while we work together and for up to three years after your last session, so that you can build on your previous work if you return. You can ask us to delete them sooner at any time. Invoices and payment records are kept for the periods required by tax and commercial law.