Privacy Policy

Privacy Policy (GDPR)

Effective Date: December 11, 2025

This Privacy Policy describes how Beo Store SRL, hereinafter referred to as “We” or the “Data Controller”, as a personal data controller, collects, uses, stores and protects the personal data of users, hereinafter referred to as the “Client” or “You” of the www.oliviahealinghub.com, hereinafter referred to as the “Website”.

We are committed to processing your personal data in accordance with the provisions of Regulation (EU) 2016/679 (GDPR).

1. Data Controller Details

• Entity name: Beo Store SRL
• Registered office address: Sportiv Catalin Bercu 17, Voluntari, Ilfov
• GDPR contact email: oliviahealinghub@gmail.com
• Data Protection Officer (DPO): No DPO has been appointed, but the responsibilities are fulfilled by the Data Controller."

2. Categories of Personal Data Collected

We collect the following categories of personal data, depending on how you interact with the Website and Services:

Data Category

Purpose of Processing

Legal Basis (GDPR)

Identification and Contact Data (Name, First Name, Email Address, Phone Number, Billing Address)

Invoicing, delivery of purchased services, order-related communications.

Performance of a contract (Art. 6(1) lit. b)

Payment Data (Card details, transaction information - WE DO NOT store full card details)

Processing payments for services and products.

Performance of a contract (Art. 6(1) lit. b)

Online Interaction Data (IP Address, Location, Website Behavior, Cookies)

Improving the Website experience, statistical analysis, marketing (if applicable).

Legitimate interest (Art. 6(1) lit. f) or Consent (Art. 6(1) lit. a)

Special Data (Health) (Information about emotional and physical state, personal and health objectives disclosed during coaching/healing sessions)

Provision of coaching or healing services.

Explicit consent (Art. 9(2) lit. a)

3. Legal Bases and Purposes of Processing

We process your data for the following purposes and on the following legal bases:

Purpose of Processing

Details

Performance of the Contract

To process and deliver the purchased services (courses, sessions, e-books), to issue invoices and to manage appointments.

Legitimate Interest

Improving the Website and Services, fraud prevention, network and information security.

Your Consent

For marketing communications (newsletter), placing non-essential cookies and processing Special Data (Health) disclosed during sessions. You can withdraw your consent at any time.

Legal Obligations

Compliance with legal obligations (e.g., accounting records, responding to legal requests from authorities).

4. Processing of Special Categories of Data (Health)

Due to its nature, coaching/healing activity may involve the disclosure of sensitive information related to your health, emotional well-being or personal history.

• This data is processed exclusively on the basis of your explicit consent and is used solely for the purpose of providing the requested services.
• This information is kept under enhanced confidentiality and security conditions and is not shared with third parties, except as provided by law.

5. Disclosure of Personal Data

We may disclose your personal data to:

• Contractual Partners: Payment service providers (for processing transactions), email marketing service providers (for newsletters, based on consent), hosting services.
• Authorities: Public institutions and authorities (e.g., ANAF, judicial authorities), on the basis of and within the limits of legal provisions.

All third parties with whom we collaborate are obliged to respect the confidentiality and security of your data.

6. Data Transfer Outside the EEA

Some data may be transferred to servers or IT systems located outside the European Economic Area (EEA) (e.g., through the use of American email or cloud services). We ensure that these transfers are carried out on the basis of adequate safeguards (e.g., Adequacy Decisions by the European Commission or Standard Contractual Clauses).

7. Data Retention Period

We will store your data only for the period necessary to fulfill the purposes for which it was collected:

• Billing data: 10 years, in accordance with tax legislation.
• Marketing contact data (Newsletter): Until you withdraw your consent.
• Data collected during sessions: Until the end of the contractual relationship and, subsequently, for a period of 3 years for the purpose of defending our rights and interests in court, if applicable.

8. Your Rights as a Data Subject

In accordance with the GDPR, you have the following rights:

• Right to be informed: To receive clear information about data processing.
• Right of access: To obtain confirmation that your data is being processed and to receive a copy of it.
• Right to rectification: To correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): To request the erasure of data, under certain conditions.
• Right to restriction of processing: To obtain restriction of processing, under certain conditions.
• Right to data portability: To receive your data in a structured format and to transmit it to another controller.
• Right to object: To object to the processing of your data (including processing for direct marketing purposes).
• Right not to be subject to a decision based solely on automated processing.
• To exercise any of these rights, please contact us at the email address: oliviahealinghub@gmail.com

9. Right to Lodge a Complaint

If you are dissatisfied with how we process your personal data, you have the right to lodge a complaint with the supervisory authority:

• National Supervisory Authority for Personal Data Processing (ANSPDCP)
• Address: B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania
• Email: anspdcp@dataprotection.ro

10. Amendments to the Privacy Policy

We reserve the right to periodically update and amend this Privacy Policy. Any changes will be published on the Website, and the revised version will take effect immediately upon publication. We encourage you to check this page periodically.