Security & Privacy
This page is maintained by PurposeCoach® (c/o WBC Wellbeing Business Community GmbH) to answer common questions about security, privacy, and data handling on purposecoach.ch. It is owner-maintained content, not an independent certification.
Controller & Scope
The controller for this website and the practices described here is PurposeCoach® c/o WBC Wellbeing Business Community GmbH, Seftigenstrasse 302, 3084 Wabern, Switzerland. The contents of this page refer to purposecoach.ch and the directly connected booking, lead, and customer flows. They do not replace our legally binding privacy notice.
What data we collect
We collect the data you actively submit (e.g. name, email, phone, and message in forms, bookings, the Kompass funnel, or testimonials) as well as technical logs required for operations, security, and abuse prevention. Details and legal bases are in our privacy notice.
Security controls
- TLS/HTTPS encryption for all traffic between browser and backend.
- Database with Row Level Security (RLS) enabled by default — tables are not reachable without an explicit policy.
- Role-based access control (RBAC) using a dedicated user_roles table; admin areas are protected server-side.
- Rate limiting and honeypot fields on public forms to mitigate bots and abuse.
- Have-I-Been-Pwned password check on sign-up and password change.
- Edge functions encapsulate sensitive operations; service keys stay server-side.
Hosting & subprocessors
The site runs on Lovable Cloud (Supabase infrastructure). For specific features we use specialised providers, e.g. for transactional email, appointment booking, course payments, and web analytics. The current list of providers, purposes, and data categories is maintained in our privacy notice.
Retention & deletion
Personal data is retained only as long as needed for its purpose (e.g. inquiry, coaching engagement, statutory retention). On request we will inform, correct, or delete your data within the limits set by applicable law.
Your rights (FADP / GDPR)
You have the right to access, rectification, erasure, restriction of processing, and data portability. Please send requests to info@purposecoach.ch.
Security & vulnerability reports
Please report security concerns or potential vulnerabilities confidentially to info@purposecoach.ch with the subject “Security”. We acknowledge receipt and investigate promptly.
Note
This page describes currently enabled, app-visible controls. It is not a certification, audit result, or attestation under SOC 2, ISO 27001, HIPAA, or PCI. Binding statements are in our privacy notice and imprint.
Your trust is the foundation of every coaching conversation
At PurposeCoach®, confidentiality is not merely a legal requirement — it is a core principle of professional coaching. Clients frequently discuss career transitions, leadership challenges, personal values, health-related stress factors and major life decisions. Protecting this information is essential to creating a safe environment for reflection, growth and change.
Our coaching practice follows Swiss privacy requirements and internationally recognised coaching standards. Personal information is handled with care, transparency and respect for client autonomy.
What information is collected?
PurposeCoach® only collects information necessary to provide coaching services and to improve the client experience. This may include:
- Contact information
- Coaching objectives
- Assessment results (e.g. CliftonStrengths®)
- Session notes
- Scheduling information
- Voluntary feedback provided by clients
We do not sell personal data to third parties.
Confidentiality in coaching
Definition
Coaching confidentiality
The ethical and professional obligation to protect information shared by clients during coaching conversations, unless explicit consent is given or disclosure is legally required.
PurposeCoach® treats coaching discussions as confidential. Client information is never shared without prior consent.
Practical security measures
PurposeCoach® applies several layers of organisational and technical safeguards.
Administrative measures
- Restricted access to client information
- Secure password management
- Limited data retention
- Regular review of stored information
Technical measures
- SSL/TLS encrypted website connections
- Multi-factor authentication where available
- Cloud-based infrastructure from established providers
Definition
End-to-end encryption (E2EE)
A communication security method where only the communicating parties can access the transmitted information. Service providers cannot read the content while it is in transit.
Where coaching sessions are conducted on platforms that support strong encryption, communication benefits from additional protection against unauthorised access.
How coaching data is used
Coaching information is used exclusively for:
- Preparing coaching sessions
- Tracking client progress
- Delivering assessments and reports
- Improving coaching quality
PurposeCoach® does not use coaching conversations for advertising purposes.
Real-world examples
The following examples are published with client permission or have been anonymised to protect privacy.
Example 1 — Executive career transition
A senior manager in the financial sector completed a six-month coaching engagement focused on leadership development and career clarity. The process involved a CliftonStrengths® assessment, values analysis, goal-setting workshops and structured reflection exercises.
To protect confidentiality:
- Only anonymised notes were retained
- Assessment results were shared exclusively with the client
- No information was disclosed to the employer
Outcome: the client successfully transitioned into a new leadership role while maintaining full control over personal information and coaching records.
Example 2 — Entrepreneur burnout prevention
A business owner sought coaching support during a period of high stress and organisational growth. The client requested strict confidentiality due to sensitive personnel matters. PurposeCoach® delivered private online sessions, secure document sharing and limited-access client documentation.
Outcome: the client reported greater clarity, improved delegation and reduced stress levels while maintaining complete privacy throughout the engagement.
Research and professional standards
International Coaching Federation (ICF) (opens in a new tab)
The ICF defines globally recognised coaching competencies, including confidentiality, ethical practice and client trust. According to the ICF Core Competencies (opens in a new tab), professional coaching requires a safe environment that supports learning, growth and client autonomy.
Gallup (opens in a new tab) research on strengths
Research published by Gallup on CliftonStrengths® (opens in a new tab) indicates that people who have the opportunity to use their strengths every day are six times more likely to be engaged at work and report higher quality of life. Strengths-based development is therefore integrated into many of our coaching processes.
Source: Gallup, Inc. — see “Employees Who Use Their Strengths Outperform Those Who Don’t” (Gallup Workplace) (opens in a new tab). Statistic is attributed to Gallup’s published research, not to PurposeCoach®.
Note on PurposeCoach® data: we currently do not publish internal client-outcome statistics. Any future first-party numbers will be released only with an explicit description of sample size, period and methodology.
Related entities: CliftonStrengths® (opens in a new tab) · Positive psychology (opens in a new tab) · ICF (opens in a new tab) · Gallup, Inc. (opens in a new tab)
Frequently asked questions
Are coaching sessions confidential?
Yes. Coaching discussions remain confidential unless a client explicitly authorises disclosure or disclosure is required by law.
Who can access my coaching data?
Only authorised personnel directly involved in delivering coaching services.
How long is data retained?
Information is retained only as long as necessary for service delivery, legal obligations or agreed coaching objectives.
Can I request deletion of my information?
Yes. Clients may request access, correction or deletion of eligible personal information in accordance with applicable privacy laws — write to info@purposecoach.ch.
About PurposeCoach®
PurposeCoach® specialises in strengths-based coaching, leadership development and purpose-driven personal growth. The methodology integrates recognised frameworks and entities including Gallup CliftonStrengths®, values-based assessments such as Profilingvalues®, positive psychology, International Coaching Federation (ICF) professional standards and values-based leadership development.
While PurposeCoach® currently does not maintain an independent Wikidata entity, the methodology is closely connected to internationally recognised coaching frameworks and evidence-based development approaches.