Privacy Policy

Last Updated: January 4, 2026

This website is operated by Octopus Tech GmbH, Switzerland.
Her Next Position is a brand of Octopus Tech GmbH.

Octopus Tech GmbH ("we", "us", "our") is the data controller responsible for the processing of your personal data under the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

We take your privacy seriously and are committed to handling personal data lawfully, transparently, and securely.

1. Personal data we collect

We collect personal data in the following ways:

a) Information you provide to us

When you:

Purchase a strategic decision support service or digital course
Complete an AI-powered intake questionnaire for strategic review
Subscribe to a newsletter
Contact us directly via email or support

This may include:

Name
Email address
Billing address
Payment and transaction details (processed securely via Stripe)
Information you voluntarily provide as part of a decision intake or strategic review questionnaire
Professional background and career situation details shared during intake

We only collect data that is necessary for the specific purpose.

b) Information collected automatically

When you visit the website, we may automatically collect limited technical information, including:

IP address
Browser type and version
Device information
Time zone and access times
Cookies or similar technologies
Pages visited and interaction data
Referral source

This information is used for security, website performance, and basic analytics. It is not used to identify you personally unless required for security or legal reasons.

2. Why we process your data

We process personal data for the following purposes:

To deliver services:

Process payments for strategic decision support services and digital courses
Conduct AI-powered client intake questionnaires
Deliver strategic reviews and voice memos from Lisa Mayer
Provide ongoing support for Decision Partnership, Intensive Sprint, and 90-Day Intensive clients
Grant access to self-paced courses (Her Wealth Position, Her Career Playbook)

To communicate with you:

Respond to enquiries and support requests
Send service-related communications (intake confirmation, review delivery notifications, upgrade payment requests)
Provide customer communication related to your purchase
Send newsletters (only with your consent)

To operate and improve the service:

Manage payments and transactions via Stripe
Store intake data and strategic review summaries in secure Google Sheets and Google Drive
Operate and secure the website
Improve service quality based on anonymized usage patterns

To meet legal obligations:

Comply with legal, tax, and accounting requirements
Respond to lawful requests by authorities

We do not:

Sell personal data to third parties
Use data for profiling or automated decision-making beyond the AI-powered intake process (which is designed to gather structured information for human strategic review, not to make automated decisions about you)

3. Legal basis for processing

Depending on the situation, we process your data based on:

Performance of a contract:
When you purchase a service or course, we process your data to deliver what you've paid for.

Your consent:
When you subscribe to newsletters or provide information voluntarily in intake questionnaires.

Compliance with legal obligations:
To meet tax, accounting, and regulatory requirements.

Legitimate business interests:
To operate and secure the website, prevent fraud, and improve services.

You may withdraw consent at any time where processing is based on consent. This will not affect the lawfulness of processing before withdrawal.

4. Data sharing and third parties

We may share personal data only with trusted third parties where necessary to deliver our services:

Payment processing:

Stripe - Processes all payments securely. Stripe's privacy policy: stripe.com/privacy

Data storage and automation:

Google Sheets and Google Drive - Stores intake data and strategic review documents securely
Zapier - Automates workflows between Stripe, Google Sheets, and email notifications

Email and communication:

Gmail / Google Workspace - Sends service-related emails and notifications

AI-powered intake:

OpenAI (ChatGPT) - Powers the structured intake questionnaire. Your intake data is processed to generate summaries for Lisa's strategic review. OpenAI's privacy policy: openai.com/privacy

Website hosting:

Hosting provider for website infrastructure is Hostinger.

All third parties are contractually required to handle data securely and lawfully in accordance with applicable data protection standards.

5. International data transfers

Some service providers may process data outside Switzerland or the European Economic Area, including in the United States (Stripe, Google, OpenAI, Zapier).

Where this occurs, we ensure appropriate safeguards are in place in accordance with Swiss and EU data protection laws, including:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Certification under recognized frameworks

6. Data retention

We retain personal data only for as long as necessary to:

Active service delivery:

For the duration of your service engagement (Decision Brief, Partnership, Sprint, 90-Day Intensive)
For ongoing access to purchased courses

Legal and accounting requirements:

Payment records: 10 years (Swiss tax and accounting obligations)
Intake data and strategic reviews: Retained for the duration of service plus 2 years for quality assurance and continuity of care if you return

Marketing communications:

Newsletter subscriptions: Until you unsubscribe

When data is no longer required, it is securely deleted or anonymized.

You can request deletion of your data at any time (subject to legal retention requirements for payment records).

7. Your rights

Under Swiss data protection law (nFADP) and, where applicable, GDPR, you have the right to:

Right to be informed:
Understand how your data is processed (this Privacy Policy)

Right of access:
Request a copy of your personal data

Right to rectification:
Request correction of inaccurate data

Right to erasure ("right to be forgotten"):
Request deletion of your data (subject to legal retention requirements)

Right to restriction:
Request restriction of processing in certain circumstances

Right to object:
Object to processing based on legitimate interests

Right to data portability:
Request your data in a structured, machine-readable format

Right to withdraw consent:
Where processing is based on consent, you can withdraw it at any time

Right to lodge a complaint:
You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.

To exercise your rights, contact us using the details in Section 12 below.

8. Cookies and tracking technologies

This website uses cookies and similar technologies to:

Ensure proper functionality
Remember your preferences (e.g., language, currency selection)
Provide basic analytics on website usage

Types of cookies we use:

Essential cookies: Required for website functionality
Analytics cookies: Help us understand how visitors use the site (if applicable)

You can control or disable cookies through your browser settings. Disabling cookies may affect certain website features (e.g., currency selector, form functionality).

We do not use cookies for third-party advertising or tracking.

9. AI-powered intake process

Our strategic decision support services use an AI-powered intake assistant (built with OpenAI's ChatGPT) to conduct structured interviews before Lisa's strategic review.

How it works:

You provide your email address for payment verification
The AI assistant asks 15-20 structured questions about your career decision
Your responses are organized into a summary for your review
After confirmation, your intake data is sent to Lisa for strategic review
Lisa provides human strategic judgment based on the intake (AI does not make decisions about you)

Data processing:

Your intake responses are processed by OpenAI to generate structured summaries
OpenAI's API does not use your data to train their models (per OpenAI's API Terms)
All intake data is stored securely in Google Sheets and Google Drive
Lisa reviews all intake data personally—AI is used only for structure, not strategic judgment

Your rights:

You can request deletion of your intake data at any time
You can request a copy of your intake data
You can correct any inaccuracies in your intake summary

10. Links to other websites

Our website may contain links to external websites (e.g., Stripe payment pages, social media).

We are not responsible for the privacy practices or content of those sites. Please review their privacy policies separately.

11. Data security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or misuse, including:

Technical measures:

Encrypted data transmission (HTTPS/SSL)
Secure cloud storage (Google Workspace with encryption)
Access controls and authentication
Regular security updates

Organizational measures:

Limited access to personal data (only Lisa and authorized personnel)
Confidentiality agreements with service providers
Regular review of data protection practices

However, no online transmission or storage system can be guaranteed to be completely secure. We cannot guarantee absolute security but take all reasonable precautions.

12. Legal disclosure

We may disclose personal data if:

Required by law or legal process
Necessary to protect our legal rights
Required to comply with regulatory obligations
Necessary to respond to lawful requests by Swiss or EU authorities
Necessary to prevent fraud or protect security

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Updated policies will be posted on this page with a new "Last Updated" date.

For material changes, we will notify active clients via email.

14. Contact information

If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us at:

Her Next Position
A brand of Octopus Tech GmbH

Email: contact@hernextposition.com
Website: hernextposition.com

Data Protection Officer: contact@hernextposition.com

Swiss Data Protection Authority:
Federal Data Protection and Information Commissioner (FDPIC)
www.edoeb.admin.ch