Privacy Policy
Last updated: 10.10.2026 | Synergy Healing
1. Introduction
I, Ina Gkitsa, as well as Synergy Healing, respect your privacy. This Policy explains how I collect, use, share and protect your information when you visit synergyhealing.info, book or take part in my sessions, circles and workshops, download my materials, or contact me through WhatsApp, email or Instagram (together, the "Site" and "Services").
I follow the privacy laws that apply to me, including the EU General Data Protection Regulation (GDPR) and the Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information. Where you live somewhere with different rules, I apply the standard that protects you the most. I am the data controller, which means I'm responsible for your information.
Controller: Ina Gkitsa • synergy3healing@gmail.com
2. Information I Collect
I collect the following, from you directly, automatically as you use the Site, and from the tools that help me run my business:
Information you give me. Your name, email address and phone number, the service you book, your country and time zone, your age (to confirm you're 16 or older), and the messages you send me. For clients aged 16 or 17, I also collect the written consent and contact details of a parent or guardian. For pet sessions, I collect your animal's name and any details you choose to share.
Sensitive information. The nature of my work means you may choose to tell me about your health or wellbeing, for example medication, the care you're receiving, or how you're feeling. This is special-category data under the GDPR. I collect and use it only with your explicit consent, and only to decide whether the work is suitable and safe for you and to look after you during and after sessions. You don't have to share it, but I may not be able to offer a particular service safely without some basic information. I keep session notes brief and factual.
Information collected automatically. Your IP address, browser and device information, the pages you view, and the date and time of your visit, using cookies and similar technologies (see Section 5).
Information from third parties. Booking and payment providers send me confirmation that a booking was made and paid. If you message me on Instagram or WhatsApp, those platforms pass me your message and your profile name. I never see or store your full card number, because payments are handled by my payment provider(s).
Testimonials, photos and recordings. I only collect or share these with your clear permission.
3. How and Why I Use Your Information
I use your information to:
take and manage your bookings, deliver your sessions, circles and workshops, and send you the materials you've bought
look after your safety and wellbeing, including contacting an emergency contact or emergency services if I believe someone's safety is at risk
take payments, issue receipts and invoices, and keep the records the law requires
reply to your messages, send reminders and confirmations, and follow up after sessions
send you news, new dates and offers, only if you've asked me to
share your testimonial, only with your permission
keep the Site working, understand how it's used, and improve my services
deal with complaints, protect against misuse, and defend or bring legal claims.
My legal grounds are: contract (to deliver what you've booked), legal obligation (accounting and tax law), your consent (health information, session notes, testimonials, marketing), vital interests (an emergency), and legitimate interests (running and securing my business, and handling claims). Where I rely on consent, you can withdraw it at any time.
4. How I Share Your Information
I do not sell your personal information, and I don't share it for third-party marketing. I may share it with:
service providers acting on my behalf: my booking and payment providers, my website and link-in-bio platform (Beacons), email, WhatsApp (Meta), my video-call platform, and, where needed, my accountant or bookkeeper
emergency services or, if you're 16 or 17, your parent or guardian, where I believe someone's life or safety is at serious risk, sharing only what's necessary
courts, regulators or law enforcement where the law requires it
someone else, with your consent or at your request
I don't share your health or session information with anyone beyond what's unavoidable when we communicate through the platforms above.
5. Cookies and Tracking
My website is hosted on Beacons, which may use cookies and similar technologies to make the Site work, remember settings, and understand how it's used. Where the law requires it, non-essential cookies are only set with your consent. You can control or delete cookies in your browser settings, and blocking them may affect how the Site works.
6. International Data Transfers
Some of the providers I use, such as Meta, Google, Zoom or my website platform, may process data outside the European Economic Area, including in the United States. When that happens, I rely on the safeguards the law recognises, such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask me for details using the contact information in Section 11.
7. Data Security and Retention
I protect your information with reasonable technical and organisational measures: devices locked with passcodes and kept up to date, access limited to me, records stored securely and not left in loose screenshots or open chat threads, and as little health information as possible. No system is completely secure. If a breach is likely to put you at risk, I'll tell you and the data protection authority as the law requires, including reporting to NAIH within 72 hours where applicable.
I keep information only as long as I need it. Invoices and accounting records are kept for the period Hungarian law requires (currently 8 years). Client records, session notes, health declarations and consent forms are kept for 2 years after our last session, then deleted or anonymised. Messages are kept for 12 months after our last contact, unless they're needed for the records above. Emergency contact details are deleted with your records. Marketing details are kept until you unsubscribe. Testimonials and photos are kept until you withdraw your permission. I may keep information longer to handle a complaint or legal claim, or where the law requires.
8. Your Privacy Rights
You have the right to: access the information I hold about you and receive a copy; correct anything that's wrong; delete your information, unless I must keep it by law; restrict how I use it; object to uses based on my legitimate interests; receive your data in a portable format; and withdraw your consent at any time, for example for health information, testimonials or photos. Withdrawing consent doesn't affect what I did before you withdrew.
To use any of these rights, contact me using the details in Section 11. I'll confirm your identity first, and I'll reply within one month, free of charge unless a request is clearly excessive or repeated. I don't sell your information, and I don't make decisions that significantly affect you based only on automated processing.
Marketing. You can stop marketing messages at any time with the unsubscribe link or by telling me. I'll still message you about things you've booked, such as confirmations and reminders. I never buy contact lists.
Complaints. If you're unhappy with how I handle your information, please tell me first and I'll try to put it right. You also have the right to complain to the data protection authority. In Hungary, that's the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), naih.hu. You can also contact the authority in the country where you live.
9. Children's Privacy
I offer my services to people aged 16 and over. If you're 16 or 17, a parent or legal guardian must give written consent before you book, and for group circles and entity clearings they must also be present for the whole session. I keep their contact details so I can reach them if I have a concern for your wellbeing or safety. I don't knowingly collect information from anyone under 16. If I find that I have, I'll delete it.
10. Third-Party Links and Changes to This Policy
The Site may link to other websites and services I don't control, such as booking tools, payment providers and social media. This Policy doesn't cover them, so please read their privacy policies.
I may update this Policy from time to time. When I make an important change, I'll update the "Last updated" date and, where the law requires, tell you or ask for your consent again.
11. Contact and Complaints
Questions, requests or concerns about your information? Contact me and I'll reply: Email: synergy3healing@gmail.com