Privacy Policy

Your privacy matters to us. This Privacy Policy explains how personal data is collected, used and protected when you visit the Magic Frequency website, subscribe to our newsletter, book a session or otherwise interact with us online.

The controller responsible for the processing of personal data is the operator of Magic Frequency. Full business and contact details can be found in the Imprint at the bottom of this page.

1. Personal Data We Collect

Depending on how you interact with Magic Frequency, we may process the following categories of personal data:

• contact information, such as your name and email address

• information you voluntarily provide when contacting us

• newsletter subscription information

• booking and appointment information

• payment and transaction information

• technical information generated when you visit the website, such as device, browser and website usage information

• cookie and consent preferences

We only collect and process personal data where this is necessary for a specific purpose.

2. Purposes and Legal Bases for Processing

We may process personal data for the following purposes:

Providing and managing our services
When you book a session, programme or other service, we process the information necessary to arrange and provide that service and communicate with you about it. The legal basis is generally the performance of a contract or steps taken at your request before entering into a contract.

Responding to enquiries
If you contact us, we process the information you provide in order to respond to your enquiry. Depending on the context, this is based on steps taken at your request before entering into a contract or our legitimate interest in communicating with people who contact us.

Newsletter and email communication
If you subscribe to our newsletter, we process your name and/or email address to send you the communications you requested. Newsletter communications are sent on the basis of your consent. You may unsubscribe at any time using the unsubscribe link contained in our emails.

Processing payments
Information necessary to process payments may be processed in connection with purchases and bookings. Payment information is handled through the relevant payment provider and we do not receive or store your complete payment card details.

Operating and improving the website
Certain technical data is processed where necessary to operate, secure and maintain the website. Where non-essential analytics or similar technologies are used, these are activated only in accordance with your cookie preferences and, where required, your consent.

Compliance with legal obligations
Certain information, particularly transaction, invoice and accounting information, may be retained where required by applicable tax, accounting or other legal obligations.

3. Website Hosting and Squarespace

This website is hosted and operated using Squarespace.

When you visit the website, Squarespace may process technical information necessary to provide and secure the website, including information such as your IP address, browser type, device information and access data.

Squarespace may also provide website analytics. Where such analytics involve non-essential cookies or similar technologies, they are subject to your cookie preferences.

For more information about Squarespace's processing practices, please refer to Squarespace's own privacy information.

4. Cookies and Website Analytics

This website uses cookies and similar technologies.

Some cookies are strictly necessary for the website to function and cannot reasonably be disabled. Other cookies, including analytics or performance cookies, may be used only with your consent where required by applicable law.

When you first visit the website, you can choose whether to accept or decline non-essential cookies and manage your preferences through the cookie consent banner.

You may change or withdraw your consent at any time through the available cookie settings. Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.

5. Newsletter – Kit

We use Kit (formerly ConvertKit) to manage newsletter subscriptions and send email communications.

When you subscribe to our newsletter, information such as your email address and, where provided, your name is processed through Kit for this purpose.

You may withdraw your consent and unsubscribe from the newsletter at any time by using the unsubscribe link included in each newsletter.

Kit may process data on servers outside the European Economic Area. Where personal data is transferred internationally, such transfers are subject to the safeguards required under applicable data protection law.

6. Appointment Booking – Calendly

We use Calendly to facilitate appointment scheduling.

When you use Calendly to book a session or appointment, the information you enter is processed by Calendly in order to arrange and manage your booking. This may include your name, email address, appointment details and any information you voluntarily provide through the booking process.

Calendly operates as an external service and its own privacy information applies to its processing activities.

Please avoid providing sensitive personal or health information in booking fields unless it is specifically requested and necessary for the service.

7. Payments – Stripe

We use Stripe to process certain payments.

When you make a payment through Stripe, Stripe processes the information necessary to complete the transaction. Depending on the payment method, this may include your name, contact details, payment information and transaction details.

Magic Frequency does not receive or store your complete payment card details.

Stripe processes personal data in accordance with its own privacy policy and applicable data protection requirements.

8. Session Recordings and Transcription – Fathom

Online sessions may be recorded and transcribed using Fathom so that clients can revisit insights, reflections and information from their sessions afterwards.

Depending on the session, Fathom may process audio and/or video recordings, transcripts, summaries, participant information and information shared during the session. Because of the personal nature of our work, this information may include sensitive personal information voluntarily shared by the client.

Clients who do not wish their session to be recorded should inform Magic Frequency before the session begins.

Recordings and transcripts are intended for the client’s personal use and for the provision and continuity of Magic Frequency services. They are not used publicly or for marketing purposes without separate permission.

Fathom processes this information as a service provider on behalf of Magic Frequency. Further information about Fathom’s processing and security practices is available through Fathom’s privacy and security information.

9. YouTube and External Links

Our website may contain links to content hosted on external platforms, including YouTube and social media platforms.

When you follow an external link, you leave the Magic Frequency website. The external provider may then collect or process information about you according to its own privacy policy and cookie practices.

Magic Frequency is not responsible for the privacy practices or content of external websites.

If third-party content such as YouTube videos is embedded directly into the website in the future, additional data processing may occur when such content is loaded. Where required, such content will be subject to appropriate consent mechanisms.

10. Social Media

Our website may contain links to Magic Frequency profiles on social media platforms.

These are ordinary external links and do not, by themselves, transmit information to the respective platform simply because you visit the Magic Frequency website.

If you click a social media link, the privacy practices of the respective platform apply.

11. Testimonials, Names and Images

Magic Frequency may publish testimonials or experiences shared by clients.

Where a testimonial identifies a person through their name, photograph or other identifiable information, we obtain appropriate permission before publication.

Where appropriate, testimonials may instead be published anonymously or using an altered name or image to protect the person's identity.

Consent to the publication of identifiable testimonial material may be withdrawn for future use by contacting us.

12. Sensitive Personal Data

The nature of some Magic Frequency services may involve clients voluntarily discussing personal matters, including information concerning their physical or emotional wellbeing.

Such information is not collected through the general website unless specifically necessary.

Where information falling within a special category of personal data under the GDPR is processed, it will only be processed where an appropriate legal basis and, where required, an additional condition under Article 9 GDPR applies.

Please do not send sensitive health or other highly personal information through general website or newsletter forms.

13. Sharing Personal Data

We do not sell your personal data.

Personal data may be shared with service providers where this is necessary to operate the website or provide our services. Depending on your interaction with Magic Frequency, these may include providers such as:

• Squarespace for website hosting and operation

• Kit for newsletter and email communication

• Calendly for appointment scheduling

• Stripe for payment processing

• professional accounting, legal or technical service providers where necessary

Personal data may also be disclosed where required by law or by a competent authority.

Service providers receive only the information necessary for their respective functions and process data subject to applicable contractual and legal requirements.

14. International Data Transfers

Some of the service providers used by Magic Frequency are based outside the European Economic Area or may process information internationally.

Where personal data is transferred outside the EEA, we rely on an appropriate transfer mechanism recognised under applicable data protection law, such as an adequacy decision or appropriate contractual safeguards, where required.

15. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected or as required by law.

The applicable retention period depends on the nature of the information.

For example:

• newsletter information is generally retained until you unsubscribe or withdraw your consent

• enquiry and correspondence information is retained for as long as reasonably necessary to deal with the communication and any resulting relationship

• booking and client information is retained for as long as necessary to provide and administer the relevant service and manage the client relationship

• invoices, transaction records and accounting information are retained for the periods required by applicable tax and accounting laws

• consent records may be retained where necessary to demonstrate compliance with legal obligations

When personal data is no longer required, it will be deleted or anonymised where reasonably possible.

16. Your Data Protection Rights

Under the GDPR, depending on the circumstances, you may have the right to:

• request access to your personal data

• request correction of inaccurate or incomplete personal data

• request deletion of your personal data

• request restriction of processing

• object to certain processing

• receive certain personal data in a portable format

• withdraw consent at any time where processing is based on consent

• lodge a complaint with a competent data protection supervisory authority

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights or ask a question about the processing of your personal data, please contact us using the contact details provided in the Imprint below.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka – AZOP) or, where applicable, another competent supervisory authority within the European Union.

17. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can guarantee absolute security.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, technology or legal obligations change.

The current version will always be available on this page. The date of the most recent update is shown at the top.