Privacy Policy

This English version is provided for convenience only. In the event of any discrepancy, the German version shall prevail.

1. Controller and contact

Controller for the processing of personal data pursuant to Art. 4 (7) GDPR:

Nicole Bedraoui
c/o IP-Management #9553
Ludwig-Erhard-Straße 18
20459 Hamburg
Deutschland
Email: info@live-your-humandesign.com
Phone: +49 170 8934660

2. Questions about data protection

If you have questions about data protection, please contact us using the contact details given above.

3. Hosting

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server of this website is located in Frankfurt am Main (Germany); backup copies are stored in France. When you visit the website, the host automatically collects information in server log files that your browser transmits.

Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in the reliable operation of the website). Hostinger may use service providers outside the European Economic Area for its operations. You will find information on recipients and the transfer safeguards provided for this in Hostinger’s privacy policy. Hostinger describes the terms for processing website data on our behalf in its Data Processing Addendum.

4. Data collection on this website

4.1 Automatically collected data

Each time you visit this website, the following information is collected automatically:

Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in the security, functionality and improvement of the website).

Retention period: Hostinger has not confirmed a fixed regular retention or deletion period to us for access logs including IP addresses, or for server and PHP error logs, while hosting is ongoing. The evaluation of the last seven days that can be selected in the hosting dashboard is not a confirmed deletion period for the underlying log data.

4.2 Contact and form inquiries

If you send us a message via a form or by email, the data you enter (name, email address, message text) is processed in order to handle your inquiry.

Legal basis: Art. 6 (1)(a) GDPR (your consent) or Art. 6 (1)(b) GDPR (pre-contractual steps).

Retention period: The data is deleted as soon as it is no longer needed to handle your inquiry, but after 12 months at the latest.

4.2.1 Reading requests and free Intro Reading

For a reading request we also process the offer you want, date of birth, time of birth, place of birth, and any questions and context you voluntarily provide. The details are sent to our email inbox in order to answer your request and to prepare an agreed reading. Please send only the information needed for this.

For the free Intro Reading we additionally store your name, email address, language, time, and the calculated details of Type, Authority and Profile in a protected list outside the public website directory. It serves to match your request and to handle follow-up questions. There is no automatic deletion routine for it. On request we delete the entry, unless statutory retention obligations or open claims prevent this. The request does not automatically subscribe you to the newsletter.

Legal basis: Art. 6 (1)(b) GDPR (request and provision of the requested reading). Contractual documents are kept for as long as they are needed to perform the contract and to defend or assert claims; Art. 6 (1)(c) GDPR applies to documents subject to a statutory retention obligation.

4.2.2 Newsletter

The newsletter is voluntary and requires a separate sign-up. We store your email address, language, subscription status, sign-up and confirmation times, the IP addresses used for them, a confirmation token, the sign-up source and, where applicable, the time of unsubscription in a protected file outside the public directory. You are only subscribed once you have confirmed via the link sent by email (double opt-in). The newsletter is sent via our email inbox at the hosting provider.

Legal basis: Art. 6 (1)(a) GDPR for sign-up and sending; Art. 6 (1)(f) GDPR for proof of consent and for preventing unwanted further mailings. You can unsubscribe at any time via the unsubscribe link. Unconfirmed sign-ups expire after 30 days and are removed at the next write operation. Confirmed and unsubscribed entries are not deleted automatically; you can request deletion via the contact address given above.

4.2.3 Payments via Stripe

If you use a Stripe payment link, Stripe processes your payment and transaction details as well as technical connection data. We receive the details needed to match and confirm the payment; we do not receive full card data. The recipient is Stripe Payments Europe, Limited, Ireland, together with affiliated companies and service providers. Processing outside the EEA is possible. Information on roles, recipients and transfer safeguards can be found in Stripe’s privacy notices.

Legal basis: Art. 6 (1)(b) GDPR (processing your payment) and Art. 6 (1)(c) GDPR (statutory retention of payment records). We keep payment receipts for the applicable statutory retention periods.

4.2.4 Electronic withdrawal

If you use the withdrawal function, we process your name, the details of the contract and your email address to handle the withdrawal and to send an immediate confirmation of receipt (Art. 6 (1)(b) and (c) GDPR). The declaration and the time it was received are stored on our server outside the public directory and sent by email to you and to our inbox. The server copy is deleted after 30 days at the next call of the function. The emails are kept for as long as they are needed to handle and prove the withdrawal or for statutory retention obligations.

4.3 Bodygraph calculator

The Bodygraph calculator calculates your chart exclusively locally in your browser. Date of birth, time of birth, time zone and an optional first name are not transmitted to a server for the calculation. If you agree to local storage, the details you entered last are saved in your browser so that you can reuse them on your next visit (see clause 5.1).

One exception concerns the place of birth: So that a place name becomes coordinates and the historically valid time zone, your entry in the “Place of birth” field queries an external service. What is transmitted is described in clause 4.4. Without this query the chart could not be calculated correctly; you can alternatively choose the time zone by hand and thereby bypass the place search.

If you voluntarily pass on data from your chart by email or via a form, you decide on that transmission yourself. The pure calculation in the browser remains unaffected.

New shared chart links contain the inputs in the fragment after “#”; this part is not sent to the web server when the page is called. Older links with inputs after “?” technically send them to the server on the first page call and may appear in access logs. The browser then converts such calculator links into a fragment. Analytics receives neither the inputs nor a referrer with these parameters.

4.4 Place search for the chart calculation (Geoapify)

The place search determines two pieces of information for your place of birth: the time zone that applied there at the time of your birth, and the geographic coordinates. Every calculator needs the time zone to convert your local birth time correctly into universal time; the coordinates are used solely by the Birth Time Finder to determine sunrise and sunset on your birthday. For this we use the geocoding interface of Geoapify (KEPTAGO LTD, N. Nikolaidi and T. Kolokotroni, 8011 Paphos, Cyprus).

When and what: While you type, your browser sends the search term, from three characters on and with a short delay, to our own server. If you click “Calculate”, a place name of at least two characters is also searched. The server forwards only the search term and the selected language to the EU endpoint api-eu.geoapify.com. As a result, Geoapify receives the IP address of our server, not the IP address of your device. Our hosting provider technically receives your IP address and the usual connection data when the page is called. Date of birth, time of birth, name or chart data are not transmitted to Geoapify. Suggestions with coordinates and time zone come back; you make the selection yourself.

To protect the interface against automated abuse, our server counts requests per IP address in a ten-minute window. For this, only a pseudonymized SHA-256 check value of the IP address is stored, not the search term. Expired entries are removed at the next call; in addition, only the total number for each day is counted.

Storage by the provider: According to its own information, Geoapify logs the request, headers, IP address and time of API calls for access control, usage counting and error analysis. Data of successful requests is generally kept for 24 hours at most and afterwards only evaluated in aggregated form.

Legal basis: Art. 6 (1)(f) GDPR — our legitimate interest in a working and precise place search. Geoapify is a provider based in the EU and, according to its own information, operates the EU endpoint used in European data centers.

If you do not want this: Do not enter a place; instead open “Set the time zone manually instead” and choose it yourself. Then no query to Geoapify takes place. Choose a city or region: the calculator automatically takes the historical time zone rules on the birthday into account.

The notices on Geoapify and OpenStreetMap required by Geoapify are shown directly at the suggestion list.

4.5 PDF creation for the Intro Reading (Cloudflare)

When you request the free Intro Reading, a PDF file is created from it. It is not generated in your browser but by a remote-controlled browser at Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; in Germany: Cloudflare Germany GmbH, Rosenheimer Straße 143C, 81671 Munich) — so that the file looks the same for everyone who orders it.

How this works: Your reading data (first name, birth data and the details calculated from it such as Type, Strategy, Authority, Profile and your Bodygraph) are first stored on our own server — outside the public web directory and reachable only via a random, unguessable render address. We pass only this address to Cloudflare. Cloudflare’s browser calls it, creates the PDF file from it and processes the data contained on this page in the process. As soon as Cloudflare is done, the job with your data is deleted immediately on our server. The finished PDF stays only until you download it — it is removed with the download. After 15 minutes, files that have not been collected can no longer be retrieved; expired files are deleted at the next call of the PDF service. The render address remains valid until the render job is completed or until the 15 minutes have expired; it is not used up by its first call.

Legal basis: Art. 6 (1)(b) GDPR — creating the file you requested. Transfer to a third country: According to its own information, Cloudflare bases transfers to the USA on the EU Standard Contractual Clauses and on its certification under the EU-U.S. Data Privacy Framework.

If you do not want this: Do not request an Intro Reading. The chart calculators on this website work independently of it and without this transfer.

5. Cookies and similar technologies

5.1 Technically necessary storage in the browser

A language setting can be stored locally in your browser so that your choice (DE/EN) is retained on your next visit. We also store your decision on Google Analytics under the key lyhd-analytics-consent-v2 in your browser’s local storage. This decision contains only the chosen status and the time, is asked for again after six months at the latest, and is not transmitted to us or to third parties. lyhd-local-remembered-keys-v1 remembers explicitly selected storage purposes, not birth data. These settings do not permit any analysis.

Legal basis: § 25 (2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6 (1)(f) GDPR (legitimate interest in technically error-free operation and in storing your privacy choice).

5.1.1 Chart data and learning progress on your device

With “Save” you deliberately store selected profiles in your chart collection on this device. The “Save” selection in the Celebrity Library stores your comparison profile. No additional checkbox in the analytics window is needed for this. Storage takes place in your browser’s localStorage; the details are therefore not transmitted to us. On a shared device, other people using the same browser profile can access them.

Calculator inputs remain available in sessionStorage while the browser tab is open. This way you don’t have to enter them again when switching between calculators. This storage ends when you close the tab. Without a “Save” selection, learning progress stays only in the working memory of the open page and is lost on reload. A choice for permanent chart and learning storage given earlier remains effective for functions already used. The details remain until they are deleted or overwritten.

You can remove saved profiles in the chart collection via “×”. With the following button you delete the stored chart inputs, profiles, questions and learning progress and end a general storage choice given earlier. Language and analytics choice are retained. After deleting, close any calculator tabs that are still open. Alternatively, you can remove all website data for this domain in your browser settings.

Legal basis: Art. 6 (1)(b) GDPR and § 25 (2) No. 2 TDDDG for the explicitly requested “Save” function and the chart calculation. The optional chart collection is only created by “Save”. This does not involve any permission to send birth data or advertising. The Celebrity Library also keeps the current comparison profile ready in sessionStorage until the tab is closed (§ 25 (2) No. 2 TDDDG for the requested comparison function).

5.2 Google Analytics 4

If you actively select “Allow analytics” in the consent window, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us understand which pages are visited and how the website is used. We use these statistics solely to improve the content, usability and technical quality of the website.

Without your consent, Google Analytics is not loaded and no analytics data is transmitted to Google. Your consent is voluntary and not required to use the website.

After your consent, the following data in particular may be processed:

The IP address is technically processed when the page is called. According to Google, IP addresses of users from the EU are not logged or stored but only used to derive approximate location data and then discarded. We do not transmit names, birth data, email addresses or chart inputs to Google Analytics. Google signals and personalized advertising are disabled in our integration.

After your consent, Google Analytics sets in particular the cookies _ga (distinguishing users) and _ga_<Measurement ID> (storing the session state). We technically limit their lifetime to 396 days at most and do not extend it with every new visit.

Retention of analytics data: In our Google Analytics property, two months are set for event data and 14 months for user data. According to Google, the period for user data also applies to key event data. The option “Reset on new activity” is enabled: with new activity, the 14-month retention period of the user identifier starts again. It can therefore remain stored for longer than 14 months from the first visit. Data whose retention period has expired is deleted by Google monthly. These periods do not apply to the standard aggregated reports; they may be retained for longer.

Legal basis: Your prior consent pursuant to § 25 (1) TDDDG for storing and reading information on your device, and Art. 6 (1)(a) GDPR for the subsequent processing of personal data.

Recipients of the data are Google Ireland Limited and Google’s affiliated companies and processors. Processing may also take place outside the European Economic Area, in particular in the USA by Google LLC. Google LLC is certified under the EU-US Data Privacy Framework. Where necessary, Google additionally bases transfers on the Standard Contractual Clauses of the European Commission.

You can withdraw your consent at any time with effect for the future. To do so, open “Privacy settings” at the bottom left and select “Reject analytics”. From that moment, further analytics transmissions are blocked and the Google Analytics cookies reachable for this website are deleted. The lawfulness of the processing carried out until the withdrawal remains unaffected.

You will find further information in Google’s privacy notices, the notes on data and privacy in the EU and the information on international data transfers.

6. Online sessions (readings & coaching)

Readings and coaching take place online by video call. We use Zoom (Zoom Communications, Inc., USA) to conduct them; the data required for participation (e.g. name, email address, connection data and, where applicable, audio and video data) is processed. Participation may transmit data to Zoom and its service providers, also outside the EEA. You will find information on recipients, retention and transfer safeguards in Zoom’s privacy notices. Recording takes place only after a separate agreement and with your express consent.

Legal basis: Art. 6 (1)(b) GDPR (performance of a contract).

7. The “Live Your Human Design” app

The iPhone app “Live Your Human Design” works entirely on your device. For your chart you enter your name (optional), date, time and place of birth. This information, the calculated charts, your learning progress and your settings are stored and calculated only locally on your device. They are not transferred to us or to third parties; we have no access to them.

Backups and images: A backup file is only created when you create one. You choose where it is saved (e.g. “On My iPhone” or iCloud Drive); the terms of that storage location apply there. The file contains birth data. A shared chart image is also created on the device and only goes to the recipients you choose in the share menu.

Links: Links to articles or readings open this website in your browser. The other sections of this privacy policy apply there.

Apple: Downloads, updates and – if you have allowed it in iOS – crash reports are processed by Apple under its own responsibility. At most, Apple provides us with aggregated statistics (e.g. the number of downloads) that do not allow any conclusions about you.

Deletion: “Delete all data” in the app’s settings, or deleting the app, removes all data stored in the app from your device. Backup files you saved yourself are deleted wherever you stored them.

8. Fonts (self-hosted)

This website uses the fonts “Marcellus”, “Mulish”, “Playfair Display” and “Inter”. The fonts are hosted locally on our own server. No connection to third-party servers (e.g. Google Fonts) takes place; your IP address is not transmitted to third parties.

9. Security

This website uses SSL/TLS encryption (HTTPS) to protect your data in transit. You can recognize a secure connection by the padlock symbol in the address bar.

10. Your rights

You have the following rights against us:

To exercise these rights, contact us at info@live-your-humandesign.com.

11. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority.

You can in particular contact a data protection supervisory authority at your place of habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

12. Data storage and deletion

We store your data only for as long as this is necessary for the purposes for which it was collected or as required by law. Afterwards it is deleted or anonymized.

13. Changes to the Privacy Policy

We reserve the right to adapt this Privacy Policy at any time. You will always find the current version on this page.

As of: 18 October 2026