Privacy Policy

Last Updated: 30 September, 2026

At Aliki Hoidas (including TruthFlow, TruthFlow Courses and Aliki Hoidas Academy), your privacy and security are top priorities. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our websites, services, and coaching programs. Please read it carefully to understand how we handle your information.

1. Who We Are

This Privacy Policy applies to the websites and services operated by Aliki Hoidas, including:

  • alikihoidas.com

  • truthflow.com

  • Aliki Hoidas Academy (Thinkific)

  • TruthFlow Courses (Thinkific)

  • Associated YouTube channels (“Aliki” and “Aliki’s Insights”)

The data controller responsible for your personal data is:
Aliki Hoidas
Email: [email protected]
Based in Greece.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us, including:

    • Full name

    • Email address

    • Phone number

    • Billing and shipping information

    • Account and course registration information

    • Coaching preferences and limited coaching notes, where relevant to the services we provide
    • Information you choose to provide when contacting us, completing forms, or participating in surveys

Payment information is processed through third-party payment providers such as Stripe, PayPal and Thinkific Payments. We do not generally receive or store your full payment card details.

Technical and Usage Data

When you use our websites, certain technical and usage information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device information

  • Referring website

  • Pages visited and time spent on each page

  • Cookie and analytics information, where applicable

Some of this information may constitute personal data under applicable data protection law.

3. How We Collect Information

We collect information when you:

  • Register on our websites or Thinkific course platforms

  • Subscribe to newsletters via MailerLite

  • Schedule coaching sessions through Calendly

  • Participate in surveys, programs, or promotions

  • Engage with our coaching services via Zoom or Thinkific

  • Contact us directly by email or social media

  • Register for or attend live events

  • Purchase a product, course, program, coaching service or other offering

  • Request a cancellation, statutory withdrawal, refund, rescheduling or other customer-service assistance

Information Received From Third Parties

We may also receive personal data from third-party platforms you use to interact or transact with us, including Thinkific, Stripe, PayPal, Calendly and other service providers.

This may include purchase and transaction information, account or registration details, scheduling information, payment status and other information reasonably necessary to administer the service or transaction you requested.

Automated Technologies

We use cookies and similar technologies to support website functionality and, where you have given the required consent, to measure website usage and performance through tools such as Google Analytics.

Necessary cookies may be used without consent where they are required for the operation of the website. Optional analytics and similar cookies are used only where permitted by applicable law and, where required, after you have made a choice through our cookie banner.

You can manage your cookie preferences through our cookie banner and, where applicable, through your browser settings.

4. How We Use Your Information

We may use your personal data to:

  • Provide and maintain our websites, coaching services, courses and other services

  • Create and manage accounts and course access

  • Process transactions and deliver purchased products or services

  • Communicate with you regarding purchases, coaching sessions, accounts, enquiries or service-related matters

  • Schedule and manage coaching sessions

  • Process and administer cancellations, statutory withdrawal requests, refunds, payment disputes and chargebacks

  • Send newsletters and marketing communications where you have consented or where otherwise permitted by law

  • Maintain limited coaching notes where appropriate to providing coaching services

  • Improve and secure our websites, courses and services

  • Prevent fraud, misuse or security incidents

  • Maintain business, accounting and transaction records

  • Comply with legal, tax, accounting and regulatory obligations

  • Issue and send invoices and transmit required invoicing information to AADE/myDATA in compliance with Greek tax and invoicing obligations

5. Legal Basis for Processing

Where the EU General Data Protection Regulation (GDPR), UK GDPR or similar laws apply, we process personal data only where we have an appropriate legal basis.

Depending on the purpose, we may rely on:

  • Contractual necessity: where processing is necessary to provide coaching, courses, purchased products or other services you have requested, including account administration, scheduling and payment processing.
  • Legal obligations: where we are required to retain or process information for tax, accounting, regulatory or other legal purposes.
  • Consent: where you have made a voluntary and informed choice, including for certain marketing communications, optional cookies and analytics, and any recordings or testimonials for which consent is the appropriate basis. Where processing is based on consent, you may withdraw that consent at any time.
  • Legitimate interests: where processing is reasonably necessary for purposes such as responding to enquiries, maintaining website and service security, preventing fraud, administering our business and improving our services, provided those interests are not overridden by your rights and interests.

Information Required to Provide Our Services

Certain personal information is necessary for us to enter into or perform a contract with you.

For example, we may need your name, contact information and relevant payment, registration or scheduling details to process a purchase, provide course access, schedule coaching, deliver a product, administer a refund or otherwise provide the service you requested.

If you do not provide information that is necessary for these purposes, we may be unable to complete the transaction or provide the requested service.

Sensitive Information

During coaching, you may choose to share information that could be considered sensitive or “special category” personal data under applicable law, such as information relating to health, beliefs or other highly personal matters.
Where we record or otherwise process special-category personal data, we do so only where an appropriate legal basis and an additional lawful condition for processing such information apply.

6. Information Sharing and Disclosure

We do not sell, rent or trade your personal information.

We may share personal data with third-party service providers and, where required by law, public authorities or government systems. These may include:

  • MailerLite: email marketing
  • Calendly: scheduling
  • Zoom: virtual coaching sessions
  • Thinkific and Thinkific Payments: course delivery and payment processing
  • Stripe: payment processing
  • PayPal: payment processing
  • Epsilon Smart: invoicing, accounting, tax reporting and related compliance purposes
  • AADE / myDATA: receipt and processing of invoice and transaction data where required under Greek tax and invoicing law
  • Google Analytics: website analytics, where consent has been provided where required
  • Merchandise production and shipping providers: order fulfilment and delivery
  • Other hosting, technical, administrative or professional service providers where reasonably necessary

Depending on the service and circumstances, these providers may process personal data on our behalf or may act as independent data controllers for certain processing activities.

Where required by law, we use appropriate contractual and data-protection arrangements with service providers.

We may also disclose personal information where reasonably necessary:

  • To comply with applicable law, regulation, court orders or lawful governmental requests
  • To establish, exercise or defend legal claims
  • To protect our rights, property or services
  • To investigate or prevent fraud, security incidents or unlawful activity
  • To protect the safety of individuals where legally permitted or required

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain appropriate business records and comply with legal, tax, accounting and regulatory obligations.

Retention periods may vary depending on the type of information. For example:

  • Transaction, billing and accounting records may be retained for the period required by applicable tax and accounting laws.
  • Course and account information may be retained while your account or access remains active and for a reasonable period afterward.
  • Marketing information is retained until you unsubscribe, withdraw consent where applicable, or we otherwise determine that it is no longer appropriate to retain it.
  • Coaching notes are retained only for as long as reasonably necessary for the coaching relationship, follow-up, legitimate business needs or applicable legal requirements.
  • Testimonials and related permissions may be retained for as long as the testimonial remains in use, subject to applicable rights and the terms of any consent given.

When personal data is no longer required, we take reasonable steps to delete, anonymize or securely dispose of it.

8. Security of Your Data

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, unauthorized access, alteration or disclosure.
These measures may include secure website connections, access controls and the use of established service providers such as Thinkific, Stripe, PayPal, MailerLite, Calendly and Zoom.
No method of electronic transmission or storage can be guaranteed to be completely secure, but we take reasonable measures appropriate to the nature of the information we process and the risks involved.

9. Your Data Protection Rights

Depending on where you live and the laws that apply, you may have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal data where applicable
  • Request restriction of processing in certain circumstances
  • Object to certain types of processing
  • Object at any time to the use of your personal data for direct marketing
  • Request data portability where applicable
  • Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal
  • Lodge a complaint with an applicable data protection supervisory authority

To exercise your rights, please contact: [email protected]

We will respond within the timeframes required by applicable law.

As we are based in Greece, you may also lodge a complaint with the Hellenic Data Protection Authority at www.dpa.gr. Individuals in other jurisdictions may also have the right to contact their local data protection authority.

These rights are subject to applicable legal conditions and exceptions.

Automated Decision-Making

We do not use your personal data to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Third-party payment and security providers may use automated systems for fraud prevention, security, payment authorization or risk assessment in accordance with their own privacy notices and applicable law.

10. Cookies and Tracking Technologies

Our websites use cookies and similar technologies for website functionality, preferences, security and analytics.

Necessary cookies may be used where they are required for the operation of the website.

Optional cookies, including analytics cookies such as those used by Google Analytics, are used only where permitted by applicable law and, where required, after you have provided consent through our cookie banner.

When you first visit our website, you can choose which optional cookies to accept. Where consent is required, optional analytics cookies remain disabled until you make a positive choice.

You can later change or withdraw your cookie preferences through the cookie settings available on our website.

11. Coaching Sessions, Notes and Confidentiality

Information shared with us in connection with coaching services is treated confidentially and is used only as reasonably necessary to provide and administer those services, as otherwise described in this Privacy Policy, or where disclosure is required or permitted by law.

We may keep limited written coaching notes from time to time where they are useful for providing or following up on coaching services.

We do not record coaching sessions.

Live group sessions and events may be recorded, and photos or video may be taken at in-person events. You will be told in advance when this is the case. We will not use recordings, photos, or video in which you can be identified for promotional purposes without your permission.

Testimonials

From time to time, we may invite clients to provide written, audio or video testimonials about their experience.

Providing a testimonial is entirely voluntary. Where a video or audio testimonial is recorded, the recording is made specifically for that purpose and with the client’s permission.

We will only publish or use a testimonial, including a client’s name, image, voice or other identifying information, with the appropriate permission.

12. Social Media

We may interact with users on platforms such as LinkedIn, Facebook, Instagram, Pinterest, or YouTube. If you contact us through social media, we may respond via private message.
Communications on these platforms are also subject to each platform’s privacy policy.

13. Children’s Privacy

Our services, coaching, and online content are intended for adults. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

14. Google Analytics

We use Google Analytics to help us understand how visitors use our websites and to improve our content, services and website performance.

Google Analytics may collect information such as:

  • IP address
  • Browser and device information
  • Pages visited
  • Approximate location information
  • Referring websites
  • Interaction and usage information

Where required by applicable law, Google Analytics is activated only after you have consented to analytics cookies through our cookie banner.

You can change or withdraw your analytics-cookie preferences through the cookie settings on our website.

For additional information about how Google processes data, please refer to Google’s privacy information.

15. International Data Transfers

Some of the service providers we use may process personal data outside the European Economic Area, including in countries such as the United States and Canada.

Where personal data is transferred outside the EEA, we rely on an applicable lawful transfer mechanism where required. Depending on the recipient and circumstances, this may include:

  • An adequacy decision adopted by the European Commission
  • The EU-US Data Privacy Framework where the US recipient is certified to participate
  • Standard Contractual Clauses approved by the European Commission
  • Another transfer mechanism permitted under applicable data protection law

The appropriate safeguard depends on the particular service provider and transfer involved.

If you would like more information about international transfers relating to your personal data, please contact: [email protected].

16. Refunds and Returns

For information on refunds, statutory withdrawals, cancellations and returns, please see our Refund Policy.

When you contact us regarding a withdrawal, refund, cancellation, payment dispute or return, we may process the personal data reasonably necessary to identify your purchase, communicate with you, administer the request, process any applicable payment or refund, maintain transaction records and comply with applicable legal obligations.

17. Links to Other Websites

Our websites may include links to third-party sites. We are not responsible for their privacy practices or content.
We recommend reviewing the privacy policies of any external sites you visit.

18. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, the tools we use, or legal requirements. The updated version will be posted on this page with a new “Last Updated” date. If we make significant changes that affect how we use your personal data, we will let you know, for example by email where we have your address.

19. Contact Information

For questions or concerns about this Privacy Policy or your personal data, please contact:

Aliki Hoidas
Email: [email protected]
Based in Greece.