This Privacy Policy outlines how your information is collected, used, and protected when you visit this website or participate in my retreats, workshops, or classes.

1. Who We Are

This website is operated by Shannon “Sati” Chmelar, a psychotherapist and educator based in Florida, USA. For GDPR purposes, the data controller is Shannon Chmelar.

2. What We Collect

We may collect:

• Your name, email address, phone number, location (for registration or event details)

• Payment details (processed securely via third-party services like Stripe or PayPal)

• Sensitive information you voluntarily provide (e.g., health concerns, dietary needs)

3. How We Use Your Data

Your personal data is used to:

• Register and manage participation in retreats, workshops, and classes

• Send event updates and educational materials

• Comply with legal obligations

• Improve the quality of services offered

We do not use your data for automated decision-making or share it with outside marketers.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data on the following bases:

• Consent (when you sign up for events or a mailing list)

• Contractual obligation (to fulfill services you've requested)

• Legal compliance

• Legitimate interest (e.g., maintaining a safe, functioning website)

5. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the right to:

• Access, correct, or delete your data

• Withdraw consent at any time

• Lodge a complaint with your data protection authority

6. Data Retention

Your information is kept only as long as necessary to fulfill the above purposes or to comply with applicable laws.

7. Data Security

All reasonable steps are taken to protect your data from loss, misuse, or unauthorized access. Transmission of data over the internet is never fully secure, and submission is at your own risk.

8. Third Parties

We use trusted third-party tools (e.g. payment processors, email platforms) who are GDPR-compliant. They process your data on our behalf under strict privacy obligations.