This policy explains what personal information we collect on this site and through your order, why, and what you can do about it. To stop receiving our emails, see How to unsubscribe.
1. Who is responsible for your data
Xenia Vocal Consultant SRL, registered in Romania under number 42209070, Str. 1 Mai nr. 10, Baia Mare, Maramureș 610126, Romania, trading as Xenia Vocal Healer, is the data controller. For anything in this policy, write to contact@xeniavocalhealer.com.
Because we are established in the European Union, we handle everyone's data to the GDPR standard — including yours if you live in the United States. Where your own state or country gives you additional rights, those apply too.
BuyGoods Inc., which runs the checkout, is an independent controller of the data it collects to process your payment. Its own privacy policy, shown at checkout, applies to that data.
2. What we collect, and why
When you buy
BuyGoods shares with us your name, email address, country, order number and the products you bought. We use them to give you access to your files, answer your questions, handle refunds and keep the accounting records the law requires. The legal basis is the performance of our contract with you and our legal obligations.
We never see your card number. Payments are processed by BuyGoods.
When you order the Personalized Frequency
After payment you fill in a short form. We collect:
- your photograph — Xenia works from it to compose your frequency;
- your date and place of birth;
- what you tell us about what you are going through and what you would like to change;
- your email address and phone number, for delivery and for questions about your order;
- your BuyGoods order number, so we can match the form to your payment.
The form is hosted on our shop platform, Shopify. The legal basis is the performance of the contract: without these details the product cannot be made. If you choose to tell us about your health or other sensitive matters, we hold it in confidence, use it only for your frequency, and delete it with the rest of your order file.
We do not use your photograph for facial recognition, identification or any biometric analysis, and we do not run it through any automated system. It is never published, never sold and never used in marketing.
When you visit these pages
- Meta Pixel (Meta Platforms) records that you viewed a page, saw the offer or clicked through to checkout, so we can measure our advertising and show our ads to people likely to be interested. This counts as "sharing" personal information for cross-context behavioural advertising under some US state laws. If your browser sends a Global Privacy Control signal, the Meta Pixel is not loaded at all. You can also manage ads in your Meta account settings.
- Microsoft Clarity records how pages are used — scrolling, clicks, which sections are read — so we can improve them. It masks anything typed into fields.
- Cloudflare hosts these pages and keeps standard technical logs (IP address, browser, time of request) for security.
- Google Fonts delivers the typefaces; your browser connects to Google to load them.
The legal basis is our legitimate interest in running, measuring and improving our pages, and, where the law requires it, your consent. We do not sell your personal information for money.
The Private Circle
The Private Circle runs on Telegram. When you join, Telegram processes your account information under its own privacy policy. Other members can see your Telegram name and what you post in the group.
3. Emails, and how to unsubscribe
We may email you about your order and, if you agreed, about our work and new frequencies. You can stop our marketing emails at any time:
- click the unsubscribe link at the foot of any email we send; or
- email us with the subject "Unsubscribe" from the address you want removed.
We remove you within 10 days, usually the same day, and we will not email you marketing again. Emails sent by BuyGoods about your order are managed by BuyGoods; you can contact them through lookup.buygoods.com.
4. Who else touches your data
| Provider | What for |
|---|---|
| BuyGoods Inc. (USA) | checkout, payment, refunds, order emails |
| Shopify Inc. (Canada) | the Personalized Frequency form and your order file; delivery of your personalized page |
| Cloudflare Inc. (USA) | hosting of these pages and of your library |
| Meta Platforms (Ireland / USA) | advertising measurement (Meta Pixel) |
| Microsoft (USA) | page analytics (Clarity) |
| Google (USA) | web fonts; our support inbox (Google Workspace) |
| Telegram (UAE / UK) | The Private Circle, if you join |
| Our accountant (Romania) | invoices and tax records, as the law requires |
We may also disclose information where we are legally obliged to, for example to a tax authority or in response to a lawful order.
5. Data leaving the European Union
Several of these providers process data in the United States and other countries outside the EU. Those transfers rely on the European Commission's Standard Contractual Clauses, and on the EU–US Data Privacy Framework where the provider is certified under it.
6. How long we keep things
- Order and invoice records — 10 years, as Romanian accounting law requires.
- Your photograph and the details you sent for a Personalized Frequency — 12 months after delivery, then deleted. Sooner if you ask.
- Your finished Personalized Frequency — kept so we can send it to you again if you lose it, until you ask us to delete it.
- Support emails — 3 years.
- Marketing list — until you unsubscribe.
7. Your rights
Wherever you live, you can ask us to tell you what we hold about you and give you a copy; correct it; delete it (except records we must keep by law); send it to you in a portable format; stop using it for marketing; or restrict or object to a particular use. Write to contact@xeniavocalhealer.com. We answer within 30 days, usually within one business day, free of charge, and we will not treat you differently for asking.
If you live in California or another US state with a comprehensive privacy law, you also have the right to know what categories of personal information we collect and disclose (listed above) and to opt out of "sharing" for cross-context behavioural advertising. To opt out, enable Global Privacy Control in your browser or write to us. You may use an authorised agent.
If you live in the EU or the EEA, you may complain to your national data protection authority or to the Romanian one (ANSPDCP, dataprotection.ro). In the United Kingdom, to the ICO (ico.org.uk).
8. Cookies
These pages set cookies only through the Meta Pixel and Microsoft Clarity described above. You can refuse or clear cookies in your browser at any time; the pages work without them. The checkout, run by BuyGoods, uses its own cookies.
9. Security, children and changes
Everything runs over HTTPS, and access to customer files is limited to Xenia and the person who helps her run the business. If a breach ever affects your data, we will notify you and the relevant authority as the law requires.
Our products are not for children. We do not knowingly collect information from anyone under 18.
If we change this policy in a way that matters, we will say so at the top of this page. The date above is when it was last changed.