Last updated: 1 October 2026
Privacy policy
This explains what we collect, why, who else sees it and what you can do about it. It describes the site as it actually works rather than in general terms, so where something is imperfect it is written down instead of left out.
01
Who is responsible
Zolotco Consulting FZCO, a free zone company registered in the United Arab Emirates, trading as Psychology of Movement, is the controller of the personal data described here.
For anything in this policy, including a request to see, correct or delete your data, write to psychologymovementvz@gmail.com.
02
What we collect
There is one account record per person. It holds only the following, and nothing is collected from you that is not listed:
- Your email address, name and profile photograph, which come from Google or Apple when you sign in. We never see your password. If you sign in with Apple and choose to hide your address, we only ever receive Apple's relay address.
- Your date of birth, which you type in yourself.
- A display name, if you choose to set one instead of the name your sign-in provider supplied.
- Your chosen language, English or Russian.
- Which parts of your Inner Forces portrait you have opened.
- What you have bought, and whether a membership or consultation is currently active.
- The times of consultations you have booked, with the links to join, reschedule or cancel them.
- An identifier linking your account to your customer record at our payment processor.
- If you joined the book's former waiting list, your email address, the time you gave consent and your chosen language. Used for one message when the book is released, nothing else; removed on request.
- If you register interest in the Premium Movement Laboratory or in the book, your email address, the name and city you choose to give, the time you gave consent and your chosen language. Used only to contact you about that programme, or about the book's release and its tour events, and removed on request.
- If you ticked "Send me news" when signing in, the time you did so. Your email address, first name and language are then added to our mailing list for news about new videos, the book and events. Every email has a link to unsubscribe.
03
Your date of birth, specifically
The date of birth is the one genuinely personal thing the site asks for, so it is worth being precise about it. It is used to calculate your archetypal portrait, and it is stored with your account so the portrait can be shown to you again. It is not sold, not shared for advertising, and not sent to our analytics provider.
One honest caveat. When you submit the date on the home page, it travels in the address of the next page. That means it appears in the server access logs kept by our hosting provider, Google Cloud, alongside the usual record of requests. It is not included in anything we send to Google Analytics.
The portrait itself is a reading, not a diagnosis. It says nothing about your health, and we do not treat it as medical information.
04
Why we use it
To give you an account and keep you signed in. To calculate and show your portrait. To sell and deliver what you have bought, and to know what you are entitled to see. To let you book a consultation. To keep records of payments, which we are obliged to keep. To send news by email, only to people who asked for it.
Where the law requires a basis: performing our contract with you covers the account, the purchases and the bookings; your consent covers analytics cookies and news by email; our legitimate interest in running and securing the site covers the rest; and a legal obligation covers the financial records.
05
Who else processes it
We use a small number of services, each for one job. They see only what that job needs:
- Google Firebase, for sign-in. It holds your account identity and the record of your sign-ins.
- MongoDB Atlas, where the account record described above is stored.
- Google Cloud Run, which serves the site from data centres in Belgium and keeps ordinary server access logs.
- Stripe, for payments. Stripe receives your email address and name, and collects your card details directly on its own pages. Your card number never reaches this site.
- Calendly, for scheduling. When you open the booking page we pass your name and email so you do not have to retype them; Calendly then holds the booking itself.
- Mailchimp, operated by Intuit, which keeps our mailing list and sends our emails. It receives the email address, first name, city and language of people who registered interest in the book or ticked "Send me news", and nothing else. You can unsubscribe from any email it sends.
- Mailgun, which sends the site's own emails from data centres in the European Union: confirmations after you register interest in the book or the Premium Movement Laboratory or write to us through the contact form, the welcome when you create an account or ask for news, a note after a purchase or when a membership ends, a goodbye when you delete your account, and your portrait when you ask for it by email. It receives your email address, the name you gave, and the text of that email.
- Google Analytics, which measures how the site is used, and only after you accept analytics cookies.
- Bunny, which delivers the video. It receives no information about who you are, only a request for a video file.
06
Where your data goes
The site is served from Belgium. Firebase, Stripe, Calendly, Mailchimp, Mailgun and Google Analytics are operated by companies based in the United States and process data internationally, under their own safeguards for such transfers.
We are a company in the United Arab Emirates, so your data is also accessible to us from there.
07
Cookies
The site sets a small number of cookies, and asks before setting any that are not strictly necessary. The cookie policy lists every one of them, what it is for and how long it lasts.
08
How long we keep it
Your account record is kept until you delete it. We do not expire accounts on a schedule, and we do not delete inactive ones automatically.
Records of payments are kept longer, because they are financial records and we are required to be able to produce them.
09
Deleting your account, and what survives it
You can delete your account yourself, from the profile tab. Doing so cancels any active subscription immediately, removes your account record including your date of birth and your portrait, and deletes your sign-in identity.
Four things deliberately survive, and you should know about them. Your customer record at Stripe is kept, with your email and name, because it is attached to payment records we have to retain. Bookings you made through Calendly remain in Calendly. Measurements already sent to Google Analytics, if you accepted analytics cookies, stay there. If you subscribed to news, your address stays on the mailing list at Mailchimp until you unsubscribe, which you can do from any email.
If you want any of those removed as well, write to psychologymovementvz@gmail.com and say so.
10
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we use it, or ask us to stop processing it while a question is resolved. Where the law gives you the right to receive your data in a portable form, you can ask for that too.
Most of this you can do yourself in the profile tab, which is faster. For anything else, or if you are unhappy with how we have handled a request, write to psychologymovementvz@gmail.com.
If you are in the European Union or the United Kingdom, you also have the right to complain to your national data protection authority.
11
Changes
If this policy changes, the new version is published here with a new date at the top. We only email people who asked for news, so the site is where to look.