How we handle
your information.

Last updated: 25 October 2026

Global Exceptional ("we", "us", "our") operates globalexceptional.com. This page explains what personal data we collect, why, on what legal basis, who receives it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Who is responsible

Global Exceptional is the controller of the personal data described here. You can reach us about anything on this page at info@globalexceptional.com.

What we collect, why, and on what basis

• Membership list and newsletter: your first name and email address. We use them to tell you when membership places open (legal basis: your request, GDPR Art. 6(1)(b)). We send you the newsletter only if you tick the newsletter box (legal basis: your consent, Art. 6(1)(a)). You can withdraw that consent at any time on our unsubscribe page or with the link in our emails.
• Bookings and purchases: your name, email address, the session or product you chose, the date and time, and any note you add. We use them to provide what you booked or bought and to send confirmations (legal basis: performing our contract with you, Art. 6(1)(b)).
• Group session requests: your name, email address, group size, time zone, preferred times, company name if you give one, and any note. We use them to reply with a proposal (legal basis: steps you asked for before a contract, Art. 6(1)(b)).
• Payments: payments are handled by Stripe. We receive the result of the payment and your email address, but never your card details.
• Site statistics: which page was viewed, the referring page, and the type of device (desktop, tablet, or mobile). We do not store your IP address for this and we do not use cookies for it (legal basis: our legitimate interest in understanding how the site is used, Art. 6(1)(f)).
• Security: to protect our forms from abuse, we keep a temporary record of the IP address that sent each request and how many requests it made. These records are deleted automatically after about two days (legal basis: our legitimate interest in keeping the site secure, Art. 6(1)(f)).

Cookies and similar technology

Our website does not set advertising or tracking cookies. It uses your browser's session storage for one technical setting that makes page transitions smooth; this is deleted when you close the tab. The owner's dashboard uses a login cookie, which only applies to the person signed in to it.

The podcast player on our home and podcast pages is provided by Spotify. It does not load until you click "Load the Spotify player". Once you do, Spotify sets its own cookies and receives data such as your IP address, under Spotify's privacy policy.

Who receives your data

We use a small number of service providers, each of which only receives what it needs for its job and processes it on our behalf:

• Vercel, for hosting this website.
• Supabase, for our database and file storage.
• Resend, for sending emails.
• Google, for the calendar we use to schedule sessions. Your booking details appear in that calendar.
• Stripe, for processing payments. Stripe is also responsible in its own right for the payment data it handles, under Stripe's privacy policy.
• Spotify, only if you choose to load the podcast player (see above).

Some of these providers are based in, or process data in, the United States. Where personal data is transferred outside the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework where the provider is certified under it, or otherwise by the European Commission's Standard Contractual Clauses. We do not sell your personal data to anyone.

How long we keep it

• Newsletter: until you unsubscribe.
• Membership list: until membership opens and we have written to you, or until you ask us to remove you.
• Bookings and purchases: for as long as tax and accounting law requires us to keep records of them.
• Group session requests that do not lead to a booking: up to 12 months.
• Security records of IP addresses: about two days.

Your rights

You have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict how we use it, to receive it in a portable format, and to object to processing based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time; this does not affect anything we did before you withdrew it. To use any of these rights, email info@globalexceptional.com.

You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work.

Children's privacy

Our services are intended for adults and are not directed to children under 16.

Changes to this policy

We may update this policy occasionally. Material changes will be reflected by updating the "Last updated" date above.

Contact us

Questions about this policy or your information? Email info@globalexceptional.com.