1. Data Controller
The controller of personal data collected via this website is: Elena Muratova E-mail: [email protected] Elena determines the purposes and means of processing personal data you submit through this website.
ThetaHealing
Privacy Policy
How we protect your data — minimal data, no tracking.
Last updated: 27 April 2026
This policy explains what personal data we process when you use this website, and how we protect it. We keep things simple: we collect almost nothing, we do not operate a visitor database, and we do not use tracking cookies.
2. What Data We Collect
We collect only the data you voluntarily provide through the forms on this website (contact form and course registration): - First and last name (as you enter them) - E-mail address - Phone number (if you provide one) - Content of your message - For course registrations — the title of the course you are registering for We do not operate any visitor database, user accounts, or analytics profiles. We do not track your behaviour.
3. Purpose of Processing
Your data is processed solely to respond to your inquiry — to answer a question, schedule a session, or send information you requested.
4. Legal Basis (GDPR Art. 6)
- Art. 6(1)(b) GDPR: performance of a contract or pre-contractual measures at your request - Art. 6(1)(f) GDPR: legitimate interest in responding to inquiries addressed to us
5. Who Has Access to Your Data
When you submit the contact form, your message is forwarded directly to Elena's e-mail inbox. It is NOT stored in any database on our servers. Technical parties involved: - Cloudflare, Inc. — website hosting (Cloudflare Pages) and message-forwarding service (Cloudflare Workers) - Brevo SAS (France, EU) — transactional e-mail delivery (DKIM/SPF, anti-spam); personal data is processed under the provider's DPA and is not transferred outside the EU - Ing. Andrii Plyskach (Czech Republic) — technical operator / processor who maintains the website on behalf of Elena Muratova under a Data Processing Agreement (GDPR Art. 28)
6. Data Retention
- Contact-form messages: forwarded instantly to Elena's inbox; not retained on our servers - Server access logs (IP address, user-agent, timestamp): kept by Cloudflare for max. 90 days for security monitoring - Elena retains forwarded e-mails in her own inbox according to her own retention practices
7. International Transfers
Cloudflare may route traffic and store logs on servers outside the EU (including the United States). These transfers are protected by: - EU-US Data Privacy Framework (DPF) - Standard Contractual Clauses (SCC, Decision 2021/914/EU)
8. Cookies and Tracking
This website does NOT use: - Analytics cookies (Google Analytics etc.) - Marketing or advertising cookies - Tracking pixels - User-preference cookies The only potential use of cookies is for essential security and infrastructure operation by Cloudflare, none of which identifies you personally.
9. Your Rights (GDPR Art. 15–22)
You have the right to: - access your data (Art. 15) - rectify inaccurate data (Art. 16) - erase your data (Art. 17) — the "right to be forgotten" - restrict processing (Art. 18) - receive your data in a portable format (Art. 20) - object to processing (Art. 21) To exercise any right, e-mail [email protected]. We respond within 30 days.
10. Complaints
If you believe we handle your data incorrectly, you may file a complaint with: - Netherlands: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl - Czech Republic: Úřad pro ochranu osobních údajů — uoou.gov.cz - Any other EU country: your national data protection authority
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "Last updated" date above indicates the current version. Significant changes will be communicated via the website.