Privacy

Last updated 19 October 2026

​

Who is responsible for your information

Maria Luisa Polimeni, P.IVA 14536350961, based in Milan, Italy. I am the data controller, which means I decide what happens to the information described here and I am responsible for looking after it.

You can reach me about anything on this page at privacy@marialuisapolimeni.com.

​

What this covers

This notice covers two groups of people: anyone who contacts me through this website, and anyone who becomes a coaching client. It explains what I hold, why, who else sees it, and how long I keep it.

It is written to be read. If anything in it is unclear, write to me and I will explain it.

 

If you get in touch through the website

The contact form asks for your first name, last name and email address. It also offers two optional fields: where you work and what your role is, and anything you want to tell me before we speak. You do not have to fill in either.

I use that information for one thing only: to reply to you and, if it goes further, to arrange a conversation. I do not add you to a mailing list, because I do not have one. I do not pass your details to anyone.

The legal basis is that responding to your own enquiry is something you have asked me to do, and that I have a legitimate interest in answering people who write to me.

If we do not end up working together, I delete your enquiry, including the email, within twelve months.

 

If you become a client

I hold your name and contact details, the coaching agreement we both signed, my notes from our sessions, and the invoices for your fees.

If you complete the questionnaire I send before the first session, I hold your answers to that too.

Coaching conversations go where they go. People talk about their work, but also about pressure, health, family and how they are. I do not write down more than I need to. My notes are brief, they are for me, and nobody else reads them.

The legal basis for most of this is our agreement: I cannot coach you without holding it. For invoices it is Italian tax law, which requires me to keep them.

 

Recording

I record our sessions, so that I can write proper notes afterwards rather than taking them while you are talking.

I ask you at the start of the session, every time, and you can say no. Saying no changes nothing about how we work, and you can change your mind at any point.

The recording and any transcript are deleted as soon as I have written my notes, and in any event within twelve months. The notes are what I keep.

 

Who else handles your information

I run a small practice and I use ordinary tools to do it. The companies behind them process information on my behalf, under contract, and are not allowed to use it for their own purposes.

• Google. Email, calendar, documents and video calls run on Google Workspace. Our sessions are held on Google Meet, and the recordings and my notes are stored in Google Drive.

• Wix. This website, including the contact form.

• WhatsApp. If you choose to message me between sessions. You do not have to; email works just as well, and if you would rather nothing about our work sits on WhatsApp, tell me and we will use email only.

• My accountant and the Italian electronic invoicing system. Invoices have to pass through both, by law.

• My bank. For the payment itself.

Beyond the companies above, I do not share your information with anyone without asking you first. I would disclose something without asking only if the law required it, and I would tell you where I was able to.

 

Information leaving Europe

Some of the companies above are based outside the European Union, or hold data outside it. Where that happens, the transfer is covered by the European Commission's standard contractual clauses or by an adequacy decision, which are the mechanisms European law provides for sending information abroad safely.

If you want to know exactly where a particular piece of information sits, ask me and I will find out.

 

How long I keep things

• Enquiries that do not become anything: twelve months.

• Recordings and transcripts: deleted as soon as I have written my notes, and never longer than twelve months.

• Session notes: twelve months after our work ends.

• Questionnaire answers: twelve months after our work ends, with the notes.

• Signed agreements and invoices: ten years, because Italian law requires it.

 

Your rights

You can ask me to show you what I hold about you, to correct it, to delete it, or to send it to you in a portable form. You can object to my holding it, or ask me to restrict what I do with it. Where you have given consent, for a recording, you can withdraw it at any time, and withdrawing it does not affect anything that happened before.

Write to privacy@marialuisapolimeni.com and I will respond within a month. There is no charge.

If you are not satisfied with how I have handled it, you can complain to the Garante per la protezione dei dati personali, the Italian data protection authority, at garanteprivacy.it.

 

Cookies

This site does not use advertising cookies, tracking cookies, or analytics. I do not know how many people visit it and I have decided not to find out.

The site does set a small number of technical cookies, which are what make it work at all:

• A caching flag, so pages load faster.

• A security token, which protects the contact form from misuse.

• A session identifier, which lets the site tell one visit from another while you are on it.

Wix, which hosts the site, also keeps a small record in your browser to monitor whether pages are loading properly, and uses an error reporting service so that faults get noticed.

None of this identifies you, none of it is shared, and none of it follows you to other websites. Cookies of this kind do not require your consent under European law, which is why you are not being asked to click anything.

 

Changes

If this notice changes, the new version goes up here with the date at the top. If a change materially affects anyone I am working with, I will tell them directly rather than relying on them to check.