Socratyc, LLC

GDPR Notice.

How we handle personal data of individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland under the EU General Data Protection Regulation (GDPR) and UK GDPR.

Last updated July 24, 2026

This notice supplements our Privacy Policy and describes rights and practices specific to individuals protected by the EU GDPR and UK GDPR. Where this notice and the Privacy Policy differ for EEA or UK residents, this notice applies.

Data Controller

Socratyc, LLC (“Socratyc,” “we,” “us”) is the controller of personal data collected through nicolealos.com and in the course of coaching and advisory services provided by Nicole Alos.

EU / UK Representative

Socratyc does not currently have an appointed representative in the European Union or the United Kingdom under Article 27 of the GDPR. Our processing of EEA and UK personal data is limited to the categories described below. Requests from data subjects in the EEA or UK can be sent directly to nicole.alos@socratyc.com.

Personal Data We Process

  • Contact and engagement data for coaching and advisory clients: name, business email, role, company, session notes, and correspondence.
  • Website data: pages viewed, referrer, approximate location derived from IP, device and browser information, and cookie identifiers.
  • Communications data: email you send us, form submissions, and Calendly booking details.

We do not knowingly process special categories of personal data (Article 9 GDPR) and ask that you do not share them with us unsolicited.

Lawful Bases

We rely on the following lawful bases under Article 6 of the GDPR:

  • Contract (Art. 6(1)(b)): to deliver coaching, advisory, and other services that a client has engaged us to provide, and to administer the client relationship.
  • Legitimate interests (Art. 6(1)(f)): to run and secure our website, understand aggregate site usage, respond to inquiries, and conduct limited business outreach. We balance these interests against your rights and freedoms and you may object at any time.
  • Consent (Art. 6(1)(a)): for non-essential cookies (analytics and marketing) and for any marketing emails you opt in to receive. Consent can be withdrawn at any time through the cookie preferences link on our site or by contacting us.

How We Use Your Data

  • Deliver, schedule, and follow up on coaching and advisory engagements.
  • Respond to inquiries submitted through the site or by email.
  • Operate, secure, and improve the website and our services.
  • Send occasional business communications where you have opted in.
  • Meet legal, tax, and record-keeping obligations.

Sharing and Processors

We share personal data only with service providers that help us operate our business, under written terms that require appropriate safeguards. Current categories include scheduling (Calendly), email and productivity, website hosting and analytics, and payment processing for invoiced clients.

International Transfers

Socratyc is based in the United States. Where personal data of EEA, UK, or Swiss individuals is transferred outside those jurisdictions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) with our processors, together with supplementary measures where needed.

Retention

We retain personal data only as long as needed for the purposes described above, to comply with legal obligations (for example tax and business records), and to resolve disputes or enforce agreements. Client engagement records are typically retained for the duration of the relationship plus a reasonable period afterward. Website analytics data is retained in aggregated or de-identified form.

Your Rights

Subject to the conditions set out in the GDPR and UK GDPR, you have the right to:

  • Access the personal data we hold about you and receive a copy.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your data where a lawful basis to retain it no longer applies.
  • Restrict or object to certain processing, including processing based on our legitimate interests and direct marketing.
  • Receive your data in a portable, machine-readable format where processing is based on consent or contract and is carried out by automated means.
  • Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Lodge a complaint with your local supervisory authority, such as the UK Information Commissioner’s Office (ICO) or your national Data Protection Authority in the EEA.

To exercise any of these rights, email nicole.alos@socratyc.com. We will respond within one month, extendable by two additional months for complex requests as permitted by GDPR.

Automated Decision-Making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

Cookies and Tracking

Non-essential cookies are set only after you consent through our banner. You can change your choice at any time using the Preferences link in the banner. See our Privacy Policy for a fuller description of the categories used.

Changes to This Notice

We may update this notice from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site after changes are posted constitutes acknowledgment of the updated notice.

Contact Us

For GDPR-related questions or requests: