Privacy Policy

The Enneagram Group LLC ("we," "us," or "our") operates the website enneagram.is (the "Site") and provides Enneagram-based coaching, training, and facilitation services (the "Services"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By using the Site or our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site.

1. Who We Are

The Enneagram Group LLC, an Illinois limited liability company, is the data controller responsible for your personal information. If you have questions about this policy or how we handle your data, contact us at info@enneagram.is or by mail at 20 E Cedar St, Chicago, IL 60611.

2. Information We Collect

2.1 Information you provide to us

• Contact and inquiry details: name, email address, phone number, and any message you send through contact or inquiry forms.
• Booking and scheduling information: details you provide when you schedule a session, consultation, or program, including preferred times and the service requested.
• Account information: if you create an account for the Enneagram assessment or related services, the username, password, and profile details tied to that account, along with your assessment responses and results.
• Coaching and intake content: notes, intake questionnaires, assessment results, reflections, and other information you share in the course of receiving Services. This may include sensitive personal information you choose to disclose. We treat this information as confidential and use it only to deliver the Services.
• Payment information: when you purchase a service, payment is processed by a third-party payment processor. We do not store full payment card numbers on our systems. We may retain transaction records such as date, amount, and service purchased.
• Communications: records of your correspondence with us by email, form, or message.

2.2 Information we collect automatically

When you visit the Site, we and our service providers may automatically collect:

• Device and connection data: IP address, browser type, operating system, and device identifiers.
• Usage data: pages viewed, links clicked, time spent on pages, referring URLs, and similar analytics.
• Cookies and similar technologies: see our Cookie Policy for details on what we use and how to manage it.

2.3 Information from third parties

We may receive information about you from third-party tools we use to run our business, such as scheduling, email marketing, analytics, and payment providers, consistent with their own privacy practices.

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Site and Services.
• Respond to inquiries and communicate with you about your bookings, programs, and account.
• Schedule and deliver coaching, trainings, and group programs.
• Process payments and maintain financial and tax records.
• Send service-related messages and, where you have opted in, marketing and educational emails.
• Understand how the Site is used and improve its content and performance.
• Protect the security and integrity of the Site and our business.
• Comply with legal obligations and enforce our agreements.

4. Legal Bases for Processing (EEA and UK Visitors)

If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

• Consent: where you have given consent, for example to receive marketing emails or to set non-essential cookies.
• Contract: where processing is necessary to provide Services you have requested.
• Legitimate interests: to operate, secure, and improve our Site and business, where those interests are not overridden by your rights.
• Legal obligation: where we must process your information to comply with the law.

You may withdraw consent at any time where consent is the legal basis.

5. How We Share Your Information

We do not sell your personal information. We share it only as described below:

• Service providers: with vendors who perform services on our behalf, such as website hosting, scheduling, email delivery, analytics, and payment processing. These providers are permitted to use your information only to perform services for us.
• Legal and safety: when required by law, subpoena, or government request, or to protect the rights, safety, and property of The Enneagram Group, our clients, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
• With your direction: when you ask us to share your information with someone else.

6. Third-Party Services

The Site relies on third-party tools to function. The specific providers we currently use include:

• Website hosting and infrastructure: Vercel
• Database and file storage: Supabase
• Content management: Directus
• Scheduling: Calendly
• Payment processing: Stripe
• Transactional and service email: Resend
• Business email: Google (Gmail)

Each provider processes data under its own privacy policy. We encourage you to review them.

7. Data Retention

We keep your personal information only as long as necessary for the purposes described in this policy, including to provide and improve Services, maintain business and tax records, resolve disputes, and comply with legal obligations. When information is no longer needed, we delete or anonymize it.

8. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access: request a copy of the information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your information, subject to legal exceptions.
• Objection and restriction: object to or ask us to restrict certain processing.
• Portability: request your information in a portable format.
• Withdraw consent: withdraw consent where processing is based on consent.
• Opt out of marketing: unsubscribe at any time using the link in our emails.

To exercise any of these rights, contact us at info@enneagram.is. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

California residents

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended, including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information. We do not sell your personal information. To exercise these rights, contact us at info@enneagram.is.

10. Children's Privacy

The Site and Services are intended for adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with information, contact us and we will delete it.

11. International Data Transfers

We are based in the United States, and your information may be processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your own. Where required, we use appropriate safeguards for international transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above and, where appropriate, notify you. Your continued use of the Site after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

Questions, requests, or complaints about this Privacy Policy can be directed to:

The Enneagram Group LLC Email: info@enneagram.is Mail: 20 E Cedar St, Chicago, IL 60611