Effective Date: 30.12.2024

1. Introduction
At My Healing Sanctuary, your privacy is of utmost importance to us. This Privacy Policy outlines how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR), the Swiss Data Protection Act (DPA), and other applicable laws. By using our services or signing up for our newsletters, you agree to the terms outlined in this policy.

2. Data Controller
My Healing Sanctuary

Switzerland

3. What Data We Collect
We may collect and process the following personal data:

Personal Identifiable Information: Name, email address, and any additional details you provide when signing up for our newsletter, booking a session, or purchasing a product.Technical Data: IP address, browser type, and other technical information collected via cookies or similar technologies.Payment Information: If you make a purchase, payment details may be processed by third-party providers such as [e.g., Stripe, PayPal]—we do not store payment details.Communication Data: Any messages or information you provide when contacting us.

4. How We Use Your Data
Your personal data will be processed for the following purposes:

Providing Services: To deliver healing sessions, workshops, and other services you’ve booked.

Email Newsletters: To send newsletters, updates, offers, and event announcements.

Marketing and Advertising: To provide personalised marketing, including Meta (Facebook) Ads.

Analytics: To track and improve the performance of our website and services.

Legal Compliance: To comply with legal obligations under Swiss and international law.

5. Legal Basis for Processing Data
We process your personal data based on the following legal grounds:

Consent: When you sign up for our newsletter, request a freebie, or agree to receive marketing emails.Contractual Necessity: To fulfil services you have booked or purchased.Legitimate Interests: For marketing, analytics, and improving our services.

You may withdraw your consent at any time by contacting us or clicking “unsubscribe” in our emails.

6. Sharing Your Data
We do not sell, rent, or trade your personal data. However, we may share your data with the following third parties:

Email Marketing Providers: For managing newsletters and promotional campaignsAdvertising Platforms: For targeted advertising (e.g., Meta Ads, Google Ads). Payment Processors: For secure payment transactions (e.g., Stripe, PayPal). Legal Authorities: When required by law or for legal claims. These third parties are GDPR-compliant and will only use your data as necessary to provide their services.

7. Data Retention
We retain your data for as long as necessary to fulfil the purposes outlined in this policy:

Newsletter Subscribers: Until you unsubscribe.

Clients: For as long as necessary to provide services and comply with legal obligations.

Once the retention period expires, we will securely delete your data.

8. International Transfers
As we are based in Switzerland, your data may be transferred and processed outside of the European Economic Area (EEA). Such transfers will comply with GDPR and other relevant regulations, ensuring adequate protection of your personal data.

9. Your Rights Under GDPR
You have the following rights regarding your personal data:

Right to Access: Request a copy of the data we hold about you.Right to Rectify: Request corrections to inaccurate or incomplete data.Right to Erasure: Request the deletion of your data (“Right to be Forgotten”).Right to Restrict Processing: Limit how we use your data.Right to Data Portability: Receive your data in a portable format.Right to Object: Opt-out of data processing for marketing or legitimate interest purposes.Right to Withdraw Consent: At any time, for activities based on your consent.

To exercise your rights, please contact us here. (LINK TO FORM)

10. Cookies and Tracking Technologies
We use cookies and similar technologies to:

Enhance website functionality and user experience.Track website traffic and performance (e.g., Google Analytics).Deliver targeted ads through platforms like Meta (Facebook) Ads. You can manage your cookie preferences via your browser settings. For more details, please see our [Cookie Policy] (if applicable).

11. Data Security
We take appropriate measures to protect your personal data from loss, theft, and unauthorised access, including encryption, secure storage, and access restrictions.

12. Updates to This Privacy Policy
This Privacy Policy may be updated periodically. Any changes will be posted on this page, and where significant, notified via email or other appropriate means.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights under GDPR, please contact us via our Contact Page

(insert link) We will respond to your inquiry within 30 days.