1. Introduction

            Welcome to Spiritual Therapy Journey ("we", "our", "us").

            Your privacy is important to us. This Privacy Policy explains how we collect, use, store, disclose                    and protect your personal information when you visit our website, purchase our products, book a                  service, or otherwise interact with us.
 

             This Privacy Policy has been prepared in accordance with:

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018

• Privacy and Electronic Communications Regulations (PECR)

• Applicable consumer protection legislation in England and Wales

             By using our website or purchasing our services, you acknowledge that you have read this                               Privacy Policy.
 

         2. Who We Are
 

              Business Name:

              Spiritual Therapy Journey
 

              Business Owner:

              Cosmin (Sole Trader)
 

              Website : https://spiritualtherapyjourney.com
 

               Email:

                spiritualtherapy50@gmail.com
 

               Spiritual Therapy Journey provides:

• Reiki Sessions

• Dowsing Sessions

• Digital Dowsing Charts

• Personalised Dowsing Readings

               For the purposes of UK GDPR, Spiritual Therapy Journey acts as the Data Controller for the                           personal information collected through this website.

          3. Scope of this Privacy Policy
 

               This Privacy Policy applies to personal information collected through:

• our website;

• Wix Bookings;

• Wix Stores;

• Wix Checkout;

• email communications;

• Zoom appointments;

• customer support enquiries;

• contact forms;

• digital purchases;

• personalised dowsing reading requests.

               It also applies to information collected before, during and after a Reiki session or Dowsing                                 session where reasonably necessary to provide our services.
 

         4. Our Commitment to Privacy

              We are committed to:

• processing personal information lawfully, fairly and transparently;

• collecting only information that is necessary;

• keeping your information secure;

• respecting your privacy;

• complying with UK data protection laws;

• never selling your personal information.

         

          5. Information We Collect
 

              Depending on how you interact with Spiritual Therapy Journey, we may collect different categories of personal information.

              Identity Information
             This may include:

• Full name
  Date of birth

• Billing name

• Username (if you create an account)
  
  Contact Information
  This may include:

• Email address

• Telephone number (if voluntarily provided)
  
  Booking Information
  When booking a Reiki or Dowsing session we may collect:

• preferred appointment date

• preferred appointment time

• Zoom booking information

• booking history

• service selected
  
  Payment Information
  Payments are securely processed through Wix's payment systems and supported payment providers.
  Depending on your chosen payment method, payment processing may involve:

• credit card

• debit card

• PayPal
  For security reasons we do not store your full payment card information.
  Payment information is processed by authorised payment providers in accordance with their own privacy policies.
  
  Purchase Information
  When purchasing digital products we may collect:

• purchased product

• purchase date

• order number

• transaction status

• invoice information

• VAT or tax information where applicable
  
  Communication Information
  When contacting us we may collect:

• emails

• messages

• enquiries

• customer support requests
  This allows us to respond appropriately and maintain records of customer communications.
  
  Dowsing Reading Information
  If you request a personalised Dowsing Reading, we collect the information you voluntarily provide.
  Examples include:

• your question;

• your chosen chart;

• any additional information you decide to share that is relevant to the reading.
  You are responsible for deciding what information you choose to provide.
  
  Reiki Session Information
  If you book a Reiki session, you may voluntarily share information relevant to the session.
  Participation is entirely voluntary, and you are under no obligation to disclose personal details beyond those necessary to arrange and deliver the service.
  
  Technical Information
  When visiting our website, certain technical information may be collected automatically, including:

• IP address

• browser type

• browser version

• operating system

• device type

• pages visited

• referral source

• time spent on pages

• website usage statistics
  Some of this information is collected through Wix infrastructure and is used for website functionality, security and performance.
  
  Cookies
  Our website uses cookies and similar technologies.
  Further details are provided in our separate Cookie Policy.
  
  6. Information We Do Not Intentionally Collect
  
  We do not intentionally collect:

• information from children under the age of 18;

• sensitive biometric information;

• criminal records;

• government identification documents;

• payment card numbers.
  Please do not send us unnecessary sensitive personal information.
  
  7. Legal Bases for Processing Personal Data
  
  Under UK GDPR, every use of personal information must have a lawful basis.
  Depending on the circumstances, we rely on one or more of the following legal bases.
  
  Performance of a Contract
  We process information because it is necessary to fulfil our agreement with you.
  Examples include:

• processing bookings;

• delivering Reiki sessions;

• providing Dowsing sessions;

• sending purchased digital charts;

• preparing personalised Dowsing readings;

• responding to customer enquiries regarding purchased services.
  Without this information we may be unable to provide the requested services.
  
  Legitimate Interests
  We process certain information where it is necessary for our legitimate business interests.
  Examples include:

• improving website performance;

• maintaining website security;

• preventing fraud;

• responding to customer support enquiries;

• maintaining business records;

• improving customer experience.
  We always balance our legitimate interests against your rights and freedoms.
  
  Legal Obligations
  We may process information where required to comply with legal obligations, including:

• tax legislation;

• accounting obligations;

• fraud prevention;

• law enforcement requests where legally required.
  
  Consent
  Certain activities rely on your consent.
  Examples include:

• optional marketing emails;

• optional cookies;

• information you voluntarily provide beyond what is necessary to perform our services.
  You may withdraw your consent at any time where consent is the lawful basis for processing.
  
  8. How We Use Your Information
  
  We use personal information only where necessary to operate Spiritual Therapy Journey.
  This may include:

• providing Reiki sessions;

• conducting Dowsing sessions;

• delivering digital Dowsing Charts;

• preparing personalised Dowsing readings;

• scheduling Zoom appointments;

• confirming bookings;

• processing payments;

• issuing invoices;

• responding to customer enquiries;

• providing customer support;

• maintaining accurate business records;

• preventing fraud;

• complying with legal obligations;

• protecting the security of our website;

• improving our services and customer experience.
  We do not use your personal information for automated profiling or decision-making that produces legal or similarly significant effects.
  
  9. Third-Party Service Providers
  
  To operate our business efficiently and provide our products and services, we use carefully selected third-party service providers ("Processors"). These providers process personal data on our behalf or independently where necessary to perform services you request.
  We seek to work with providers that implement appropriate technical and organisational measures to protect personal data.
  Where these providers act as independent data controllers (for example, payment providers), their own privacy policies will also apply.
  
  10. Wix
  
  Our website is built and hosted using Wix.com Ltd.
  Wix provides the infrastructure necessary to operate our website, including:

• Website hosting

• Website security

• Online store functionality

• Shopping cart

• Checkout

• Customer accounts (if enabled)

• Order management

• Booking management

• Contact forms

• Automated emails

• Invoicing

• Payment integrations

• Website backups
  When you interact with our website, certain information may be processed through Wix systems to provide these services.
  For more information about how Wix processes personal information, please refer to Wix's Privacy Policy.
  
  11. Payment Processing
  
  Payments made through Spiritual Therapy Journey are securely processed using Wix's integrated payment solutions and supported payment providers.
   

• Accepted payment methods include:

• Credit Cards

• Debit Cards

• PayPal
  We do not receive or store your complete payment card details.
  Payment information is encrypted and processed directly by authorised payment providers using industry-standard security measures.
  Depending on your chosen payment method, payment providers may process:

• cardholder name;

• payment amount;

• billing address;

• transaction identifiers;

• payment status;

• fraud prevention information.
  These providers are responsible for processing payment information in accordance with their own legal obligations and privacy policies.
  
  12. PayPal
  
  If you choose PayPal as your payment method, certain information necessary to complete the transaction will be shared with PayPal.
  
  This may include:

• your name;

• email address;

• purchase amount;

• transaction reference;

• billing information where required.
  PayPal acts as an independent data controller for payment processing activities.
  
  13. Zoom
  
  Online Reiki Sessions and Dowsing Sessions are conducted using Zoom.
  
  When booking and attending a session, Zoom may process information including:

• your name;

• email address;

• meeting participation details;

• device information;

• IP address;

• technical connection data.
  Spiritual Therapy Journey does not control how Zoom processes information collected through its platform.
  Clients are encouraged to review Zoom's own privacy information before participating in online sessions.
  
  14. Email Communications
  
  We use email to communicate with clients regarding:

• booking confirmations;

• appointment reminders;

• invoices;

• purchased products;

• personalised Dowsing readings;

• customer support;

• responses to enquiries.
  Emails may contain personal information necessary to provide the requested services.
  We take reasonable steps to minimise the amount of personal information included in email communications.
  
  15. Delivery of Digital Products
  
  When purchasing a Dowsing Chart:

• the digital chart is made available for automatic download following successful payment;

• your purchase is recorded within our order management system;

• confirmation emails may be generated automatically.
  
  When purchasing a personalised Dowsing Reading:

• your submitted question is reviewed personally by Cosmin;

• your completed interpretation is normally delivered by email within 48 hours.
  The information you provide is used solely for preparing and delivering the requested reading.
  
  16. Sharing Personal Information
  
  We do not sell, rent or trade your personal information.
  We only share information where necessary to operate our business or where required by law.
  
  This may include sharing information with:

• Wix;

• payment providers;

• Zoom;

• email service providers used by Wix;

• accountants or professional advisers (where required);

• government authorities where legally required;

• law enforcement agencies where required by law.
  We do not share your personal information with third parties for their own marketing purposes.
  
  17. Confidentiality of Reiki and Dowsing Sessions
  
  We understand that many clients share personal or sensitive information during Reiki Sessions and Dowsing Sessions.
  We treat these communications as confidential.
  
  Information shared during a session will not be disclosed to third parties except where:

• you provide your consent;

• disclosure is required by law;

• disclosure is necessary to protect someone's safety or comply with a legal obligation.
  
  Please note that email and online communication methods cannot be guaranteed to be completely secure. While we take reasonable precautions, no method of electronic transmission is entirely risk-free.
  
  18. International Data Transfers
  
  Because we use internationally recognised service providers such as Wix, Zoom and PayPal, your personal information may be transferred to, processed in or stored outside the United Kingdom.
  
  Where international transfers occur, we seek to ensure that appropriate safeguards are in place, which may include:

• adequacy regulations approved by the UK Government;

• the UK International Data Transfer Agreement (IDTA);

• recognised contractual safeguards;

• other lawful transfer mechanisms permitted under UK GDPR.
  We take reasonable steps to ensure that any international transfers provide an appropriate level of protection for your personal information.
  
  19. Data Security
  
  Protecting your information is extremely important to us.
  We implement appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access;

• accidental loss;

• destruction;

• misuse;

• disclosure;

• alteration.

• Security measures include, where appropriate:

• encrypted website connections (HTTPS);

• secure payment processing;

• password-protected business accounts;

• restricted access to customer information;

• regular software updates where applicable;

• security features provided through the Wix platform.
  While we take reasonable steps to protect personal information, no internet transmission or electronic storage method can be guaranteed to be completely secure.
  Accordingly, we cannot guarantee absolute security.
  
  20. Data Retention
  
  We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including satisfying legal, accounting and tax obligations.
  Retention periods may vary depending on the nature of the information.
  
  Examples include:
  
  Booking Information

• Retained for as long as reasonably necessary to administer bookings, maintain business records and respond to customer enquiries.
  
  Personalised Dowsing Reading Requests
  Questions submitted for personalised Dowsing Readings and the completed responses may be retained for a reasonable period to:

• provide customer support;

• verify completed services;

• respond to follow-up enquiries;

• maintain business records.
  
  Reiki Session Records
  Where minimal notes are created solely to assist in delivering a service, they will be retained only for as long as reasonably necessary and then securely deleted.
  We do not create extensive client health records.
  
  Legal Obligations
  Certain records may be retained longer where required by:

• tax legislation;

• accounting obligations;

• fraud prevention requirements;

• legal proceedings;

• regulatory obligations.
  When personal information is no longer required, we will securely delete, anonymise or otherwise dispose of it where reasonably practicable.
  
  21. Accuracy of Information
  
  We rely on the information you provide.
  
  Please notify us promptly if:

• your email address changes;

• your contact information changes;

• you discover any inaccuracies in the personal information we hold about you.
  We will take reasonable steps to correct inaccurate or incomplete personal information without undue delay.
  
  22. Cookies and Similar Technologies
  
  Our website uses cookies and similar technologies to ensure the website functions correctly, improve user experience, enhance security, and help us understand how visitors use our website.
  Cookies are small text files stored on your device when you visit a website.
  Some cookies are essential for the operation of the website, while others are optional and may only be used with your consent where required by law.
  
  23. Types of Cookies We Use
  
  Strictly Necessary Cookies
  These cookies are essential for the operation of our website and cannot be disabled through our website.
  
  They may be used to:

• enable secure logins;

• maintain shopping cart functionality;

• process bookings;

• complete purchases;

• remember session information;

• prevent fraudulent activity;

• improve website security.
  Without these cookies, parts of the website may not function correctly.
  
  Functional Cookies
  These cookies help remember your preferences to improve your browsing experience.
  Examples include:

• preferred language;

• display settings;

• remembered form entries (where applicable);

• customer account preferences.
  
  Performance and Analytics Cookies
  At the time this Privacy Policy was last updated, Spiritual Therapy Journey does not use Google Analytics or similar analytics platforms.
  If analytics tools are introduced in the future, this Privacy Policy and our Cookie Policy will be updated accordingly, and any required consent will be obtained before non-essential analytics cookies are placed on your device.
  
  Marketing Cookies
  At the time of writing, Spiritual Therapy Journey does not use advertising or marketing cookies, including but not limited to:

• Meta Pixel (Facebook Pixel)

• Google Ads Remarketing

• TikTok Pixel

• Pinterest Tag

• LinkedIn Insight Tag
  Should this change in the future, we will request your consent where required and update this Privacy Policy accordingly.
  
  24. Managing Cookies
  
  Most web browsers allow you to:

• block cookies;

• delete existing cookies;

• receive notifications before cookies are stored;

• manage cookie preferences.
  Please note that disabling certain cookies may affect the functionality of our website, including the checkout process, booking system, and customer account features.
  If our website displays a cookie consent banner, you may manage your cookie preferences through that tool.
  
  25. Marketing Communications
  
  We respect your inbox and do not send unsolicited marketing communications.
  If you choose to subscribe to newsletters or promotional emails in the future, we may send information about:

• new services;

• new Dowsing Charts;

• special offers;

• educational content;

• updates relating to Spiritual Therapy Journey.
  Marketing communications will only be sent where permitted under applicable law and, where required, with your consent.
  You may unsubscribe from marketing emails at any time by:

• clicking the unsubscribe link contained within the email; or

• contacting us directly.
  Please note that even if you opt out of marketing communications, we may still send essential service-related emails, including:

• booking confirmations;

• invoices;

• order confirmations;

• customer support responses;

• personalised Dowsing Readings;

• important service updates.
  
  26. Your Rights Under UK GDPR
  
  Under the UK General Data Protection Regulation, you have important rights regarding your personal information.
  These rights are not absolute and may be subject to certain legal limitations.
  
  Right to Be Informed
  You have the right to receive clear information about how your personal information is collected, used, stored and shared.
  This Privacy Policy is intended to fulfil that obligation.
  
  Right of Access
  You have the right to request confirmation that we process your personal information and to receive a copy of the personal data we hold about you.
  Where permitted by law, we may request information necessary to verify your identity before responding.
  
  Right to Rectification
  If you believe any personal information we hold about you is inaccurate or incomplete, you may request that it be corrected.
  We will take reasonable steps to update inaccurate information without undue delay.
  Right to Erasure ("Right to be Forgotten")
  You may request that we delete your personal information where:

• the information is no longer necessary;

• you withdraw consent where consent is the legal basis;

• you successfully object to processing;

• processing is unlawful;

• deletion is required by law.
  Please note that we may retain certain information where necessary to comply with legal obligations or establish, exercise or defend legal claims.
  
  Right to Restrict Processing
  In certain circumstances you may request that we temporarily restrict the processing of your personal information.
  For example:

• while a dispute regarding accuracy is being resolved;

• where processing is unlawful but you prefer restriction rather than deletion;

• where information is needed for legal claims.
  
  Right to Data Portability
  Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal information in a commonly used electronic format.
  Where technically feasible, you may also request that this information be transferred directly to another organisation.
  
  Right to Object
  You have the right to object to certain types of processing, including processing based on our legitimate interests.
  Where we receive a valid objection, we will stop processing unless we have compelling legitimate grounds to continue or another lawful basis applies.
  
  Rights Relating to Direct Marketing
  You may object to direct marketing at any time.
  If you do so, we will stop sending marketing communications.
  This does not affect essential communications relating to services you have requested.
  
  Right to Withdraw Consent
  Where we rely upon your consent, you may withdraw that consent at any time.
  Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
  
  27. Exercising Your Rights
  
  If you wish to exercise any of your privacy rights, please contact us using the contact details provided at the end of this Privacy Policy.
  To protect your privacy, we may ask you to verify your identity before processing certain requests.
  We aim to respond within one month of receiving a valid request, although this period may be extended where permitted by law due to the complexity or number of requests.
  
  28. Children's Privacy
  
  Spiritual Therapy Journey is intended for adults.
  Our services are not directed toward children under the age of 18, and we do not knowingly collect personal information from children.
  If we become aware that personal information relating to a child has been collected without appropriate legal authority or parental involvement where required, we will take reasonable steps to delete that information.
  If you believe a child has provided personal information through our website, please contact us promptly.
  
  29. Automated Decision-Making and Profiling
  
  We do not use your personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.
  Our services, including personalised Dowsing Readings and Reiki Sessions, are conducted personally by Cosmin and are not generated through automated profiling or artificial intelligence.
  Where website systems perform automated functions (such as payment processing, booking confirmations, fraud detection or digital product delivery), these functions are limited to facilitating the services you request and do not involve automated decision-making as defined by UK GDPR.
  
  30. Links to Other Websites
  
  Our website may contain links to third-party websites for your convenience or information.
  Examples may include:

• Zoom;

• PayPal;

• Wix;

• social media platforms; or

• other external websites.
  We are not responsible for the privacy practices, security or content of third-party websites.
  We encourage you to review the privacy policies of any external websites you visit before providing personal information.
  
  31. Data Accuracy and Your Responsibilities
  
  You are responsible for ensuring that the information you provide to us is accurate, complete and up to date.
  Where you submit information relating to another individual, you confirm that you have the appropriate authority to do so or that the information has been shared with their knowledge and in accordance with applicable law.
  
  32. Data Breach Response
  
  We take the security of personal information seriously and have procedures in place to respond appropriately if a personal data breach occurs.
  A personal data breach may include the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
  If we become aware of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will:

• investigate the incident promptly;

• take reasonable steps to contain and minimise the impact;

• notify the Information Commissioner's Office (ICO) where required by law;

• notify affected individuals where legally required; and

• review our procedures to reduce the risk of similar incidents in the future.
  
  33. Complaints
  
  We hope to resolve any questions or concerns regarding your personal information directly.
  If you have any concerns about how we process your personal information, please contact us first so that we have an opportunity to address the issue.
  We will make reasonable efforts to investigate and respond to privacy-related concerns promptly and fairly.
  
  34. Information Commissioner's Office (ICO)
  
  If you remain dissatisfied after contacting us, or you believe your personal information has been processed unlawfully, you have the right to lodge a complaint with the UK's supervisory authority for data protection.
  Information Commissioner's Office (ICO)
  Website: https://ico.org.uk/
  The ICO provides guidance on privacy rights and investigates complaints concerning the processing of personal information.
  We encourage you to contact us first so we can attempt to resolve your concern before you approach the ICO.
  
  35. Changes to this Privacy Policy
  
  We may update this Privacy Policy from time to time to reflect:

• changes in applicable laws or regulations;

• changes to our services;

• improvements to our website;

• changes to the technologies we use;

• changes to third-party service providers;

• business developments.
  When significant changes are made, we will update the "Last Updated" date shown at the beginning of this Privacy Policy.
  Where required by law, we will provide additional notice or request your consent before any material changes take effect.
  Your continued use of our website after an updated Privacy Policy becomes effective constitutes acceptance of the revised policy to the extent permitted by law.
  
  36. Third-Party Service Providers
  
  To operate Spiritual Therapy Journey, we currently use or may use trusted third-party service providers to help deliver our services.
  These providers may process personal information only where necessary for the services they provide.
  Current providers include:

• Website Platform
  Wix.com Ltd.
  Used for:

• Website hosting

• Website security

• Online store

• Customer accounts (if enabled)

• Checkout

• Orders

• Bookings

• Contact forms

• Invoicing

• Website management
  
  Payment Providers
  Including:

• Wix Payments (where available)

• PayPal
  Authorised credit/debit card payment processors integrated through
  Wix Used for:
  secure payment processing;

• fraud prevention;

• payment verification;

• refunds where applicable.
  
  Online Meetings

• Zoom Communications, Inc.

• Used for:

• Reiki Sessions;

• Dowsing Sessions;

• appointment meetings.
  
  Email Services
  Email providers used in connection with Wix or your chosen email service.
  Used for:

• booking confirmations;

• personalised Dowsing Readings;

• invoices;

• customer support;

• service communications.
  
  Tax Services
  Where applicable:

• Wix Tax

• Avalara Tax Calculator
  Used solely for calculating applicable taxes and supporting compliance with relevant tax requirements.
  We review our service providers periodically and may change providers as our business develops.
  
  37. Confidentiality
  
  Respecting client privacy is one of the core principles of Spiritual Therapy Journey.
  We understand that clients may choose to share personal experiences or sensitive information during Reiki Sessions, Dowsing Sessions, or through personalised Dowsing Reading requests.
  We treat this information confidentially and only use it for the purpose of providing the requested service, unless disclosure is required by law or necessary to protect legal rights or safety.
  
  38. International Visitors
  
  Although Spiritual Therapy Journey is operated from the United Kingdom, our website may be accessed from other countries.
  By using our website, you acknowledge that your personal information may be processed in the United Kingdom and, where necessary, by trusted service providers operating in other jurisdictions, subject to appropriate legal safeguards.
  
  39. Business Transfers
  
  If Spiritual Therapy Journey is ever sold, merged, reorganised or transferred to another owner, personal information may be transferred as part of the business assets where permitted by law.
  Any successor business would be required to respect this Privacy Policy or provide an updated privacy notice in accordance with applicable data protection legislation.
  
  40. Governing Law
  
  This Privacy Policy shall be governed by and interpreted in accordance with the laws of England and Wales.
  Any disputes relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales, unless applicable consumer protection legislation provides otherwise.
  
  41. Contact Us
  
  If you have any questions about this Privacy Policy or how your personal information is processed, please contact:

• Spiritual Therapy Journey

• Owner: Cosmin (Sole Trader)

• Website: https://spiritualtherapyjourney.com

• Email: spiritualtherapy50@gmail.com
  We aim to respond to legitimate privacy enquiries as promptly as reasonably possible and, where applicable, within the time limits required by UK GDPR.
  
  42. Final Statement
  
  Your trust is important to us.
  Spiritual Therapy Journey is committed to protecting your privacy, handling your personal information responsibly, and complying with applicable UK data protection laws.
  We collect only the information necessary to provide our services, maintain our website, comply with legal obligations and improve the experience of our clients.
  We appreciate the trust you place in us and will continue to take reasonable steps to safeguard your personal information.
  
  Changes to This Privacy Policy
  
  We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.