Privacy Policy
Last updated: October 2026
1. Controller
The controller responsible for processing personal data on this website is:
Marie-Constance Muniz
Grünberger Straße 85
10245 Berlin
Germany
Email: hello@strengthforyou.com
2. General information
We process personal data only where there is a lawful basis to do so. Depending on the context, processing may be necessary to provide this website, respond to enquiries, deliver requested downloads, send marketing emails with consent, administer purchases, comply with legal obligations, or protect our legitimate interests in operating a secure and functional website.
Personal data means information relating to an identified or identifiable natural person. The legal bases referred to below are those of Article 6(1) GDPR unless otherwise stated.
3. Hosting, security and delivery through Cloudflare
We use Cloudflare services to host, deliver and protect this website. When you access the website, technical information may be processed, including IP address, date and time of access, requested URL, referrer information, browser and device information, connection data, security events and error logs.
Where this processing is necessary to provide a secure, stable and technically functional website, it is based on our legitimate interests in website security, reliability, abuse prevention and efficient delivery (Art. 6(1)(f) GDPR). Where storage of or access to information on your device is strictly necessary for a service you expressly request, the relevant exception under Section 25(2) TDDDG may apply.
Cloudflare may process data in several countries. Where data is transferred outside the European Economic Area, applicable transfer mechanisms and safeguards used by Cloudflare apply.
4. Google Analytics 4
With your consent, we use Google Analytics 4 (GA4) to analyse how visitors use our website. The service is provided within the EEA by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Depending on your settings and use of the website, GA4 may process information such as page views, interactions, approximate location, browser and device information, referrer information, timestamps, technical identifiers and cookie or similar storage information.
Google Analytics is activated only after you consent to the “Analytics” category. The legal basis is your consent (Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG). You may withdraw your consent at any time through the “Cookie Settings” link in the website footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Google’s basic consent mode is used so that Google tags do not load and no data is sent to Google before you interact with the consent banner and grant analytics consent.
5. Contact forms through Formspree
We use Formspree to process contact-form submissions. When you submit a form, the information you enter (such as your name, email address, message and any other information you choose to provide) is transmitted to Formspree and made available to us so that we can respond.
If your enquiry concerns an existing or potential contract, processing is based on Art. 6(1)(b) GDPR. Other enquiries are processed on the basis of our legitimate interest in responding to communications and business enquiries (Art. 6(1)(f) GDPR).
Formspree states that its services are hosted on Amazon Web Services in the United States and that it relies on Standard Contractual Clauses as a data processor for GDPR transfers. On Formspree’s free plan, submission history is currently stored for 30 days. If you change plans or retention settings, this policy will be updated to reflect the actual retention period.
6. Free guides and email delivery through Brevo
If you request a free guide, checklist, template or similar download, we process the email address you provide so that we can send the requested material. We use Brevo for email delivery and list management.
The legal basis for sending the specifically requested download is Art. 6(1)(b) GDPR where the processing is necessary to provide the service you requested, or Art. 6(1)(f) GDPR where appropriate for responding to your request. The request for a free download is kept separate from consent to ongoing marketing emails.
Brevo states that its hosting servers used to process and store its databases are located within the European Union, using infrastructure in France, Germany and Belgium. We maintain the relevant data-processing agreement with Brevo where required.
7. Newsletter and content updates through Brevo
If you separately opt in, we may send you occasional emails about new blog posts, guides, templates, checklists and related Strength For You content. The legal basis is your consent (Art. 6(1)(a) GDPR). Marketing emails are also subject to the requirements of Section 7 UWG.
We use a double opt-in process. After you submit the signup form, you receive a confirmation email and are added to the marketing list only after you confirm your subscription. We record information needed to demonstrate the consent process, such as the email address, subscription status and relevant timestamps.
You may withdraw your consent at any time, including by using the unsubscribe link contained in each marketing email. Withdrawal applies to future processing only.
8. Purchases through Lemon Squeezy
Paid digital products are intended to be sold through Lemon Squeezy as Merchant of Record. When you complete a purchase through a Lemon Squeezy checkout, Lemon Squeezy processes the information required to handle the transaction, payment, tax, fraud prevention, order administration, refunds/chargebacks and related customer-service functions under its own buyer terms and privacy information.
We may receive information from Lemon Squeezy that is necessary to fulfil or support the product, manage our supplier relationship, maintain business records and comply with legal obligations. Depending on the data and purpose, processing may be based on Art. 6(1)(b), (c) and/or (f) GDPR.
9. Affiliate links and external links
This website may contain external links and, in the future, affiliate links. If you follow an external link, the third-party website is responsible for its own data processing. Affiliate relationships will be clearly disclosed. If an affiliate programme later requires tracking technologies on strengthforyou.com, we will update this Privacy Policy and the consent settings before activating that tracking.
10. Social-media links
We link to social-media profiles, including Instagram, YouTube, TikTok and Substack. At present, these are ordinary hyperlinks rather than embedded social-media content. Personal data is generally transmitted to the relevant platform only when you choose to follow the link and visit that platform. The platform’s own privacy policy then applies.
11. Retention
We retain personal data only for as long as needed for the relevant purpose or as required by law. Contact enquiries are deleted when they are no longer needed unless contractual, legal or evidentiary reasons require longer retention. Marketing data is retained until consent is withdrawn or the data is otherwise no longer needed, subject to limited retention of proof of consent where necessary. Transaction and accounting records may be retained for statutory retention periods.
12. International data transfers
Some service providers operate globally. Where personal data is transferred outside the European Economic Area, transfers are made only where a lawful transfer mechanism exists, such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted by Articles 44 et seq. GDPR.
13. Your rights
Subject to the statutory requirements, you may have rights to access, rectification, erasure, restriction of processing, data portability, objection to certain processing and withdrawal of consent. You also have the right to lodge a complaint with a competent data-protection supervisory authority.
14. Right to object
Where we process personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to processing on grounds relating to your particular situation, subject to the statutory requirements of Article 21 GDPR. You may object to direct marketing at any time.
15. Changes to this Privacy Policy
We may update this Privacy Policy if our website, service providers or legal requirements change. The version published on the website is the current version.