SACRA Privacy policy
Last updated: 17 October 2026
1. The data controller
SACRA SOUL LIGHT STUDIO S.R.L., with its registered office at Str. Dacilor nr. 4, bl. B, et. 5, ap. 28, Sat Giroc, Comuna Giroc, Județul Timiș, Romania, Trade Register No. J2026025050006, CUI 54494124, is the controller of your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
For any question about your data, you can write to us at sacraspiritualguide@yahoo.com or call us on +40 734 375 071.
2. What data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You contact us about a session | name, phone number, email address, the messages you send | to reply to you and arrange the session | steps taken at your request before a contract (art. 6(1)(b) GDPR) |
| Data sent for a personal session | your current full name and your name before marriage, whether you are divorced, your date and place of birth, any other details you choose to add | delivering the booked session | performance of the contract (art. 6(1)(b) GDPR) |
| Carrying out the sessions | your questions, the information you choose to share, the messages and interpretations delivered | delivering the booked session | performance of the contract (art. 6(1)(b) GDPR) |
| Recall Healing sessions or questions about health | information about your physical or emotional health, only if you choose to share it | delivering the session | your explicit consent (art. 9(2)(a) GDPR), which you can withdraw at any time |
| Name interpretation | your first name and surname or those of the person for whom you request the interpretation | delivering the session | performance of the contract; for other people, you confirm that you have their consent, and for a child, that you are the parent or legal guardian |
| Energy cleansing of a space | your current full name and your name before marriage, whether you are divorced, your date and place of birth, the exact address of the space, whether you are the owner or a tenant, any other details you choose to add, your phone number | delivering the cleansing | performance of the contract (art. 6(1)(b) GDPR) |
| Payment and invoicing | name, address, payment order details, the invoice | issuing the invoice and keeping accounting records | legal obligation (art. 6(1)(c) GDPR) |
| Visiting the website | IP address, country estimated from it, browser type, page accessed, time of the visit | website security, traffic statistics and smooth page loading | our legitimate interest (art. 6(1)(f) GDPR) |
The Book a session form on the website does not store anything and sends nothing to the server. The details you fill in are placed into a message that opens in WhatsApp, and they only reach us if you send that message.
We do not use your data for automated decision-making or profiling, and we do not send you advertising messages without your consent.
3. The IP address and server logs
On every visit, the hosting server (Cloudflare) automatically records the IP address, the country estimated from it, the browser type, the page accessed and the time of the visit. We use them to protect the website against abuse, to see how many visits it receives and to make it load as smoothly as possible. Only we look at the logs; we do not publish them, pass them on to others or use them to find out who you are. They are kept for 3 months at most and then deleted. Cloudflare, Inc. delivers the website and protects it from attacks as our processor and may process this technical data outside the European Economic Area, including in the United States, under the EU-US Data Privacy Framework and standard contractual clauses.
Without the IP address, the server cannot send the page to your browser, which is why this notice has no button to refuse. You can object to the processing at any time by writing to us at the address above. You will also find details in the Cookie policy.
4. Who we share data with
We do not sell or rent your data. It may be received, strictly as far as necessary, by:
- the platforms you choose to communicate through: WhatsApp (Meta), Zoom and the Yahoo email service, which have their own privacy policies;
- Cloudflare, Inc., the company that hosts the website and protects it from attacks;
- the bank through which we receive payments and the accountant who keeps the financial records;
- public authorities, only when the law requires us to.
Some of these platforms may transfer data outside the European Economic Area, with the safeguards provided by the GDPR, such as standard contractual clauses or the EU US Data Privacy Framework.
5. How long we keep data
- Messages and information from sessions: for as long as we work together and at most 2 years after the last session, so that we can continue the process if you come back. At your request, we delete them sooner.
- Data for the energy cleansing (name, date and place of birth, address of the space, whether you are the owner or a tenant): until the cleansing and the interpretation are completed, after which we delete them.
- Invoices and accounting documents: for the period required by financial and accounting legislation.
- Server logs: 3 months at most.
6. Your rights
Under the GDPR, you have the right:
- to find out what data we hold about you and to receive a copy (right of access);
- to ask for incorrect data to be corrected;
- to ask for your data to be erased, when there is no longer a legal reason to keep it;
- to ask for the processing to be restricted;
- to receive your data in a format that is easy to transfer (portability);
- to object to processing based on our legitimate interest;
- to withdraw your consent at any time, without affecting the processing carried out before;
- to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București, dataprotection.ro.
To exercise your rights, write to us at sacraspiritualguide@yahoo.com. We will reply within one month at most.
7. Security
The website uses an encrypted connection (HTTPS). We keep session data only on password-protected devices, and only we have access to it.
8. Minors
The services are intended for people aged 18 or over. We receive a child’s data, for example the name for an interpretation, only from a parent or legal guardian.
9. Changes
We may update this policy. The version in force is the one published on this page, with the date of the last update.