Privacy Policy

1. Who I Am

I am Zorislav Frančišković, trading as Inner Harmonics. I am responsible for the personal data described in this policy. You can reach me at privacy@innerharmonics.nl.

2. What Data I Collect

Depending on how you interact with me, I may collect:

• • Name, email address, phone number, and country of residance
• • Information you submit through the contact form
• • Wellbeing or personal background information you choose to share for your session

I only collect data that is necessary for the purposes described below.

3. Why I Collect It

I use your data to:

• • Respond to enquiries
• • Schedule, confirm, and manage appointments
• • Provide Pranic Healing session, and related wellbeing services
• • Prepare for your session and support safe, appropriate care
• • Communicate with you before and after a session
• • Process payments and keep administrative records
• • Comply with legal, accounting, and tax obligations
• • Improve the quality and organisation of my services

4. Legal Basis

I process data only when there is a valid legal basis:

• • Contract – for arranging and providing sessions
• • Legal obligation – for receipts, taxes, and records
• • Consent – for anything optional. You can withdraw consent at any time.
• • Legitimate interest – for administration, communication, client support, and website security

5. Sensitive Information

During a session, you may choose to share personal, emotional, spiritual, energetic, wellbeing, or health-related information.

You are never required to share anything you do not feel comfortable sharing. Anything you do share is treated with care and confidentiality.

6. Third-Party Providers

I rely on trusted third-party service providers. These providers process personal data on my behalf and under strict confidentiality agreements and Data Processing Agreements (DPAs) in compliance with the GDPR:

• • Hosting & Database: Fly.io Inc. (application hosting) and Neon Inc. (database infrastructure).
• • Scheduling & Meetings: Calendly LLC (for booking appointments).
• • Payment Processing: Mollie B.V. (for secure payment processing).
• • Communication: Google LLC (Gmail & Google Meet) (for managing email communication and video conferencing).

These providers process data under their own privacy policies and GDPR obligations.

7. International Transfers

Some providers (such as Calendly and Google) process or store data outside the European Economic Area (EEA), primarily in the United States. Where this occurs, data is protected using recognized legal transfer mechanisms, including the EU-U.S. Data Privacy Framework and European Commission Standard Contractual Clauses (SCCs).

8. Online Sessions

If you attend an online session, your data may be processed through the video conferencing platform used for the appointment.

Sessions are not recorded unless this has been clearly explained to you in advance and you have given consent.

You are responsible for choosing a private and secure environment for your session.

9. Confidentiality

Information shared during sessions is treated with respect and confidentiality. This includes anything you choose to share about your personal circumstances, emotions, health, spiritual practice, or any other matter you discuss during a session.

I do not share confidential information with third parties without your consent, and I never sell or rent your data.

Confidentiality may be limited where disclosure is required by law, where there is a serious risk of harm to you or another person, or where safeguarding concerns arise. In such cases, I will share only what is necessary and, where possible, inform you first.

10. How Long I Keep Data

I keep data only as long as necessary for the purposes above or as required by law.

• • Contact enquiries, booking and appointment records, and session notes: up to 1 year after the last session
• • Payment and invoicing records: as required by Dutch tax and accounting law

When data is no longer needed, I delete or anonymise it securely.

11. Data Security

I take reasonable technical and organisational measures to protect your data against unauthorised access, loss, misuse, alteration, or disclosure.

No online transmission or storage is completely secure, so absolute security cannot be guaranteed. If a reportable breach occurs, I will act within the legal time limits.

12. Your Rights

Under GDPR, you have the right to:

• • Request deletion where legally possible
• • Object to certain processing
• • Request restriction of processing
• • Request data portability where applicable
• • Withdraw consent at any time
• • Complain to the Dutch Data Protection Authority

To exercise your rights, contact me at privacy@innerharmonics.nl.

13. Changes to This Policy

I may update this policy to reflect changes in my services, data processing, providers, or the law. The latest version will always be on this website with the updated date.