Privacy Policy

Introduction

Laura Zanuna ("we", "us", "our") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our spiritual coaching and Soul-to-Soul session services.

We are based in the Netherlands and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

What Data We Collect

We collect the following types of personal data:

• Identity information: Full name
• Contact information: Email address, phone number (optional)
• Location information: Country and timezone
• Session information: Service type requested, appointment dates and times, session notes taken during our work together
• Communication data: Information you provide about your situation when requesting a session
• Payment information: Payment method used, transaction references (we do not store full payment card details)
• Technical data: Browser type, IP address (for security purposes only)

How We Use Your Data

We use your personal data for the following purposes:

• To provide our spiritual coaching and Soul-to-Soul session services
• To communicate with you about appointments, scheduling, and follow-up
• To process payments and send payment instructions
• To maintain records of our sessions together for continuity of care
• To respond to your inquiries and support requests
• To send you updates about our services (only with your explicit consent)
• To comply with legal obligations

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary to provide our services to you
• Consent: For marketing communications and processing sensitive information about your wellbeing
• Legitimate interests: For improving our services and ensuring security
• Legal obligation: When required by law

Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• Client records and session notes: Retained for 7 years after our last interaction, or until you request deletion
• Payment records: Retained for 7 years for tax and legal purposes
• Marketing preferences: Until you withdraw consent
• Technical logs: 90 days

Data Sharing

We do not sell your personal data. We may share your data with:

• Payment processors: Stripe and PayPal for processing payments
• Email service providers: For sending appointment confirmations and communications
• Cloud hosting: Our website and data are hosted on secure servers
• Legal authorities: When required by law

All third-party providers are bound by data processing agreements and must comply with GDPR.

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at leelalaura9@outlook.com. We will respond within 30 days.

Cookies

Our website uses essential cookies to ensure proper functionality, including:

• Session cookies: To maintain your login session and booking progress
• Security cookies: To protect against unauthorized access

We do not use advertising or tracking cookies. Essential cookies are necessary for the website to function and cannot be disabled.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments
• Limited access to personal data on a need-to-know basis

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through our website. The "Last updated" date at the top of this policy indicates when it was last revised.

Complaints

If you have concerns about how we handle your personal data, please contact us first at leelalaura9@outlook.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.