Last updated: July 2026
I take the protection of your personal data seriously. This policy explains what data I process when you visit my websites, take the quiz, subscribe to my emails, buy a product, join the community, or work with me 1:1, and what rights you have. Processing takes place in accordance with the EU General Data Protection Regulation (GDPR) and German data protection law. Tap a section to read it.
The controller responsible for data processing is:
Theresa McIntyre, trading as Anchored Anywhere, contact email: theresa@anchoredanywhere.com.
When you visit my pages, technically necessary data is processed automatically by the hosting infrastructure: IP address, date and time of access, browser type, operating system, referrer URL, and pages accessed. This data is needed to deliver the pages securely and to detect and defend against misuse.
Legal basis: legitimate interest (Art. 6 (1)(f) GDPR) in the secure and functional operation of the websites. Server log data is deleted or anonymized within a short period, typically no later than 30 days.
If you take the free quiz, your answers to the quiz questions are evaluated directly on your device, in your browser. The individual answers are not transmitted to me and are not stored anywhere. When you submit the form at the end of the quiz, only the following data is transmitted and stored: your first name, your email address, your result type (one of four pattern labels), and the stage of your move that you selected. I use the result type and stage to show your result on screen and to send you content that fits your situation.
Legal basis: consent (Art. 6 (1)(a) GDPR), which you give when submitting the form. You can withdraw it at any time with effect for the future by unsubscribing; your result type and stage are then deleted together with your subscription data.
If you subscribe to my newsletter or free email content (including quiz result emails), I process your email address, your first name if provided, your quiz result type if you came through the quiz, and technical data about your subscription (date and time of sign-up and confirmation, IP address at confirmation). Sign-up uses double opt-in: you receive a confirmation email, and only after you confirm is your address added to the list. The confirmation data is logged to be able to prove your consent.
My emails contain standard measurement of whether emails are opened and which links are clicked. I use this to understand what content is useful and to send you content relevant to your interests (for example, based on your quiz result type). This is light segmentation for relevance; it has no legal or similarly significant effect on you.
Legal basis: consent (Art. 6 (1)(a) GDPR). You can unsubscribe at any time via the link in every email or by contacting me. After you unsubscribe, your address is removed from the mailing list; minimal data may be kept on a suppression list to make sure you are not contacted again, and consent records are kept as long as needed to demonstrate compliance.
If you buy a product or book a service, I process the data needed to conclude and perform the contract: name, email address, billing information, the product purchased, price, and the date of the transaction, as well as data about the performance of the contract (delivery of access, support requests).
Payment itself is processed by external payment service providers. Your full payment details (such as card numbers) are entered directly with the payment provider and are not stored by me. I receive confirmation of payment and the data needed for my records.
Legal basis: performance of a contract (Art. 6 (1)(b) GDPR); for the retention of invoices and accounting records, compliance with legal obligations (Art. 6 (1)(c) GDPR).
If your purchase includes access to a members area or the community, I process your login data (email, password in encrypted form), your profile information as you choose to provide it, and the content you post. Other members can see your profile name and your posts; please share only what you are comfortable sharing in that space.
Legal basis: performance of a contract (Art. 6 (1)(b) GDPR). Moderation of the community is based on my legitimate interest (Art. 6 (1)(f) GDPR) in a safe and respectful space.
If you book 1:1 work with me, I process your contact details, scheduling data, and the notes I take to prepare and deliver our sessions. Sessions take place via video call; no recordings are made without the consent of both sides. Anything you share in sessions is treated confidentially as described in my Terms and Conditions.
Legal basis: performance of a contract (Art. 6 (1)(b) GDPR). To the extent you share health-related information with me during our work together, this is processed only with your explicit consent (Art. 9 (2)(a) GDPR).
If you contact me by email, I process your email address, your name if provided, and the content of your message in order to respond and handle your request.
Legal basis: performance of a contract or pre-contractual steps (Art. 6 (1)(b) GDPR) where your request relates to a product or service; otherwise legitimate interest (Art. 6 (1)(f) GDPR) in responding to inquiries.
I run profiles on social platforms. If you interact with me there (for example, by sending a keyword by direct message to receive a link), the platform processes your data under its own privacy policy and its own responsibility; I receive and process your message, username, and the interaction needed to respond, including automated replies to keyword messages. For the processing of data on the platforms themselves, the respective platform provider is responsible, and where applicable jointly responsible with me for page insights the platform provides to me in aggregated form.
Legal basis: legitimate interest (Art. 6 (1)(f) GDPR) in communicating with my audience and responding to requests; you initiate these interactions yourself.
My pages use technically necessary cookies (for example, to keep a checkout session working). These do not require consent. Any cookies or similar technologies that are not technically necessary, such as statistics or marketing cookies, are only set with your consent via the cookie notice shown on the page, and you can change or withdraw your choice there at any time.
Legal basis: § 25 (2) TDDDG for technically necessary storage; consent (§ 25 (1) TDDDG, Art. 6 (1)(a) GDPR) for everything else.
I share personal data only to the extent necessary, with the following categories of recipients:
These service providers process data on my behalf under data processing agreements (Art. 28 GDPR) or, in the case of payment providers and platforms, under their own responsibility. Upon request, I will inform you of the specific recipients to whom your personal data has been or will be disclosed (Art. 15 (1)(c) GDPR).
Some of the service providers I use are based in, or process data in, countries outside the European Economic Area, in particular the United States. Where this is the case, transfers take place on the basis of an adequacy decision of the European Commission (including certification under the EU-U.S. Data Privacy Framework) or on the basis of the EU Standard Contractual Clauses with supplementary measures where required (Art. 44 ff. GDPR). You can request a copy of the relevant safeguards via the contact details above.
I keep personal data only as long as needed for the purposes described above:
After the respective period, data is deleted or anonymized.
You have the following rights regarding your personal data:
To exercise any of these rights, contact me at theresa@anchoredanywhere.com.
You also have the right to lodge a complaint with a data protection supervisory authority of your choosing (Art. 77 GDPR).
I do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).
You are not legally obliged to provide personal data. However, without certain data, some things are not possible: without an email address I cannot deliver digital products or the newsletter, and without billing data I cannot conclude a purchase contract.
I may update this notice when my services or the legal situation change. The current version is always available on this page.
Questions about data protection: theresa@anchoredanywhere.com