PRIVACY POLICY

3. HOW WE USE YOUR DATA 

We process your personal data only where it is lawful, necessary, and proportionate. We use your data for the following purposes:

• to provide, operate, and deliver our services, digital content, and offerings
• to process payments, transactions, and grant access to purchased products or services
• to communicate with you, including responding to inquiries and providing customer support
• to send essential service-related communications (such as confirmations, updates, and technical notices)
• to send marketing and promotional communications, where you have provided explicit consent or where otherwise permitted by applicable law
• to personalize your experience and tailor content based on your interactions with the Website
• to analyze usage, improve functionality, and optimize our Website, services, and business operations
• to ensure the security of the Website, prevent fraud, abuse, and unauthorized access
• to comply with legal obligations and enforce our terms, policies, and rights

We will not process your personal data for purposes that are incompatible with those described above.

4. LEGAL BASIS FOR PROCESSING (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data in accordance with the following legal bases:

• Consent — where you have given clear and explicit consent for specific purposes (e.g., marketing communications)

• Performance of a Contract — where processing is necessary to fulfill a contract with you or to take steps prior to entering into a contract

• Legal Obligation — where processing is required to comply with applicable laws and regulations

• Legitimate Interests — where processing is necessary for our legitimate interests (such as improving services, ensuring security, and preventing fraud), provided that such interests do not override your fundamental rights and freedoms

Where we rely on consent, you have the right to withdraw it at any time.

5. COOKIES AND TRACKING TECHNOLOGIES 

We use cookies and similar tracking technologies (such as pixels, tags, and analytics tools) to enhance your experience and analyze how the Website is used.

Cookies may be used to:

• ensure the proper functioning and security of the Website
• remember your preferences and settings
• analyze traffic, usage patterns, and user behavior
• improve performance, functionality, and user experience
• support marketing and advertising activities (where applicable)

By continuing to use the Website, you acknowledge and agree to the use of cookies as described in this Policy.

You can manage, disable, or delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of the Website.

We may use third-party services, including but not limited to:

• Google Analytics
• advertising and tracking pixels
• other analytics and marketing tools

These third-party providers may independently collect and process your data in accordance with their own privacy policies, including transferring data to jurisdictions outside your country of residence.

6. SHARING OF DATA

We may share your personal data with third parties only where necessary and in accordance with applicable data protection laws.

Such third parties may include:

• service providers (such as hosting providers, email platforms, payment processors, and IT service providers) who support the operation of the Website and delivery of services
• analytics and marketing providers that help us understand user behavior and improve our services
• professional advisors (such as legal or accounting services), where necessary
• government or regulatory authorities, where disclosure is required by law or to protect our legal rights

All third parties are contractually or legally obligated to process your personal data securely, confidentially, and only for specified purposes.

We do not sell, rent, or trade your personal data to third parties.

7. INTERNATIONAL DATA TRANSFERS 

Your personal data may be transferred to, stored, and processed in countries outside your country of residence, including jurisdictions that may not provide the same level of data protection as your local laws.

Where such transfers occur, we take appropriate safeguards to ensure your personal data is protected, including:

• relying on legally recognized transfer mechanisms (such as standard contractual clauses, where applicable)
• working with service providers that implement adequate data protection measures
• applying additional safeguards where necessary to protect your data

By using the Website, you acknowledge and consent to such international transfers where permitted by applicable law.

8. DATA RETENTION 

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• providing services and fulfilling contractual obligations
• complying with legal, accounting, or regulatory requirements
• resolving disputes and enforcing our agreements and policies

Where personal data is no longer required, we will securely delete, anonymize, or otherwise dispose of it.

In cases where processing is based on your consent, your personal data will be retained until you withdraw such consent, unless retention is required or permitted by law.

9. YOUR RIGHTS

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• the right to access and obtain a copy of your personal data
• the right to correct or update inaccurate or incomplete data
• the right to request deletion of your personal data (“right to be forgotten”)
• the right to withdraw your consent at any time (where processing is based on consent)
• the right to restrict or object to the processing of your data
• the right to data portability (to receive your data in a structured, commonly used format)
• the right to lodge a complaint with a supervisory authority

We may request verification of your identity before processing your request to ensure the security of your data.

To exercise your rights, please contact us at:
📧 milana.reiki.school@gmail.com

We will respond to your request within a reasonable timeframe in accordance with applicable laws.

10. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• the right to know what categories and specific pieces of personal data we collect, use, and disclose
• the right to request deletion of your personal data, subject to certain exceptions
• the right to request information about data sharing practices
• the right to non-discrimination for exercising your privacy rights

We do not sell your personal data.

To exercise your rights, please contact us using the contact details provided in this Policy

11. DATA SECURITY

We implement appropriate technical and organizational measures designed to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure.

These measures include, but are not limited to:

• secure data storage and access controls
• use of trusted service providers
• monitoring and protection against potential security threats

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

12. THIRD-PARTY LINKS

The Website may contain links to third-party websites, services, or content that are not operated or controlled by us.

We are not responsible for the privacy practices, policies, or content of such third-party resources. We encourage you to review their privacy policies before providing any personal data.

13. CHILDREN’S PRIVACY

Our Website and services are not intended for individuals under the age of 18.

We do not knowingly collect, use, or process personal data from children. If we become aware that personal data of a minor has been collected without appropriate consent, we will take steps to delete such data promptly.

If you believe that a child has provided us with personal data, please contact us immediately.

14. CHANGES TO THIS POLICY

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, or legal requirements.

Any updates will be posted on this page with a revised “Last updated” date. Where required by applicable law, we may notify you of significant changes.

We encourage you to review this Policy periodically.

15. CONTACT INFORMATION

If you have any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, you may contact us at: milana.reiki.school@gmail.com