Updated: 2 October 2026
This notice covers only the public website at www.bdsmcoach.eu and enquiries sent through its contact form. Other projects have separate services and notices. BDSM counselling can be a sensitive topic; please read the Google Analytics choice before agreeing.
1. Controller and contact
W1 Concept Ltd (BDSM Coach)
124 City Road
London EC1V 2NX
United Kingdom
For privacy questions or to exercise your rights, email info@bdsmcoach.eu. W1 Concept Ltd has not currently appointed a representative in the European Economic Area under Article 27 EU GDPR.
2. Website operation and security
Our own web server processes the IP address, time, requested address with method and host, response status, browser information and any referrer supplied by the browser to deliver and protect the website. Technical logs help investigate faults and abuse. Our lawful basis is our legitimate interest in operating a safe, reliable website (Article 6(1)(f) UK GDPR and, where applicable, EU GDPR).
Access logs rotate weekly, with four older files retained; error logs rotate weekly, with ten older files retained. These are rotations, not exact calendar-day deletion periods. Additional container and application logs currently remain until the relevant container is replaced; they have no fixed calendar-day retention. Records relevant to an incident or legal claim may be kept longer as necessary. Backups are described below.
Fonts and images are served by this website. The form has no external CAPTCHA. Links to WhatsApp, Telegram, Messenger, Facebook, Instagram and X take you to those providers only when you choose to open them; their own privacy terms then apply.
3. Contact form and email
If you contact us, we use the name or nickname, email address and message you enter to answer your enquiry. The form asks for an express statement of agreement. It sends the message to info@bdsmcoach.eu; WordPress does not keep a separate copy of the form submission. The website hands outgoing form email to Mailjet. The current project mailbox is Google Workspace, supplied through Wix. Your own email provider also processes any reply.
The basis for voluntary form messages is your consent (Article 6(1)(a)). If you voluntarily include information about health or sex life, your express form statement is also the condition for processing those particular details solely to answer you (Article 9(2)(a)). Please keep your first message general where possible. We do not add you to marketing lists. You may withdraw consent for future processing by contacting us; we may still need to retain information where a legal duty or a live claim applies.
A short-lived salted check value based on the sending IP limits repeat submissions for one minute; the plain IP is not kept in this form check. Successful sends receive a temporary receipt for up to 30 minutes so that an optional Analytics success event cannot be fabricated by changing a URL. The receipt contains no message content. It briefly appears in the redirect address and may therefore remain in the technical access log until that log rotates; we do not send it to Google. Correspondence is kept for as long as needed to answer and reasonably document the enquiry; contractual, legal or claim-related duties may require longer. The applicable duty determines that period.
4. Cookies and your choice
Google Analytics is optional. No Google tag, connection or consentless measurement ping is made until you expressly agree. “Only necessary” declines Google and stops future local counts. You can change or withdraw your choice through “Cookie settings” in the footer at any time. Withdrawal stops future Google measurement and removes this site’s Analytics cookies. It cannot reverse data already sent.
| Storage | Purpose | Maximum duration |
|---|---|---|
| __Host-bdsmcoach_consent | Remembers your choice on this project website without a visitor ID. Needed to respect your decision. | 180 days |
| _ga and _ga_… | Google Analytics identifiers for consented usage measurement. | 180 days in our configuration; your browser may delete them sooner |
The choice cookie is necessary to honour your decision; our basis for any related personal-data processing is legitimate interests. With JavaScript disabled, Google Analytics stays off.
5. Our local daily totals
We keep our own daily totals of public page requests and messages successfully handed to the outgoing mail service. Only the UTC date, public page ID, type of count and total are stored. We do not store IP addresses, visitor IDs, browser profiles, message contents, full request URLs or referrers in this statistic, and do not send these totals to Google. The separate technical logs above still exist. These counts are requests, not unique people.
We use the totals to check whether the website and contact route are useful. Our basis is legitimate interests (Article 6(1)(f)): the limited aggregate is useful for maintenance and improvement, while the absence of visitor tracking, the sensitive context, the short retention and the easy objection protect visitors. “Only necessary”, DNT and GPC stop further counts. You can also disable “Local basic statistics” in Settings. Without JavaScript, use the objection button in the footer. Counts already pooled cannot be separated by person. Daily totals are removed after no more than 400 UTC days. Do not add these request counts to Google visitor figures.
6. Google Analytics 4, only after express agreement
If you agree, Google’s free Analytics service receives page-view and confirmed-enquiry events, Google cookie identifiers and technical browser/device data. Your IP address is involved in the connection. The site’s subject may suggest a sensitive interest; please choose freely. We do not use Google Analytics to infer a person’s sex life, health or identity. To minimise disclosure, we send the site’s general address and title rather than topic-specific page paths, search terms, URL parameters, form values or receipt tokens. Detailed page totals stay local.
Google Signals, advertising personalisation, detailed location/device collection and automatic enhanced measurement are off. An older link to this project’s own Google Ads account remains, but personalised advertising through that link is disabled. We are not adding a new advertising link or campaign. Google does not load after refusal. We use basic consent mode: no Google data or denied-consent pings are sent before agreement. Tracking blockers may make the reports incomplete.
The basis is consent (Article 6(1)(a) and applicable cookie rules); to the extent this use would involve special-category data, we seek your express consent under Article 9(2)(a). Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland provides the service. Google LLC in the US and other listed subprocessors may also process data. Google’s data processing terms describe international-transfer safeguards; see also Google’s information about partner sites.
Detailed user and event data are set to 14 months without reset on renewed activity. This does not govern aggregated standard reports, which may remain longer. We do not make automated decisions about you with legal or similarly significant effects.
7. Backups and your rights
We keep local website backups and encrypted off-site backups in Microsoft OneDrive. File contents and names are encrypted before transfer. Microsoft processes technical data needed to provide the storage service. Backups are kept under the server’s recovery plan; older maintenance snapshots may remain for recovery. A restored backup may require previously actioned deletions to be applied again.
Subject to the law, you may request access, correction, erasure, restriction or portability, withdraw consent for future processing, and object to legitimate-interests processing on grounds relating to your situation. Email info@bdsmcoach.eu. You can complain to the UK Information Commissioner’s Office or, where EU GDPR applies, the relevant EU supervisory authority.
You do not need to agree to Google Analytics to use the site. The fields marked as required are needed if you want to use the form; you may instead contact us by email.