Privacy Policy
A Legal Disclaimer
Aura Sound Healing (operated by Prima Tourist S.R.L.) respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit or make a purchase on our website.
1. Data Controller & Contact Information
The data controller for personal data collected on the website is:
-
Prima Tourist S.R.L.
-
Headquarters / Operational address: Str. Kovacs Miklos 51, Băile Tușnad, Harghita County, Romania
-
Email: soundhealing.aura@gmail.com
-
Phone: +40 (768) 888 882
2. What Personal Data We Collect
We collect two kinds of data:
a) Data you provide directly
-
Name
-
Email address
-
Postal address (billing / shipping)
-
Phone number
-
Payment information (card info handled through Stripe, we do not store card details on our servers)
-
Any other information you choose to provide (e.g. in messages, comments, feedback)
b) Automatically collected data
-
IP address
-
Browser type and version
-
Operating system
-
Pages viewed, time spent, and navigation paths
-
Referral website
-
Date and time of access
-
Device identifiers
-
These data are collected via cookies and similar tracking technologies, and via server logs.
3. Purposes & Legal Basis for Processing
We use your personal data for the following purposes:
-
Order processing and fulfillment — to take, deliver, and manage your purchases
-
Legal basis: contract performance
-
Payment handling and fraud prevention
-
Legal basis: legitimate interest & contract performance
-
Customer communication — to send order confirmations, updates, support, and responses to inquiries
-
Legal basis: contract performance & your consent (where applicable)
-
Marketing, promotions & newsletters (only if you consent)
-
Legal basis: your explicit consent
-
Website improvement & analytics — to analyze usage, optimize performance, detect errors
-
Legal basis: legitimate interest
-
Legal compliance and accounting — to comply with legal obligations (e.g. tax, bookkeeping)
-
Legal basis: legal obligation
-
We will retain your personal data only as long as needed to fulfill these purposes, or as required by law.
4. Sharing & Disclosure of Personal Data
We may share your personal data with:
-
Payment processors (e.g. Stripe) — to process payments
-
Delivery / courier partners — to fulfill orders
-
Service providers, IT and infrastructure partners — for website hosting, email, analytics
-
Authorities, regulators, or courts — where legally required
-
We do not sell your personal data to third parties.
-
Third-party tools (e.g. Google Analytics, social media plugins) may place cookies or collect information; these are governed by their own privacy policies.
5. Data Security
We take reasonable measures to protect your personal data from unauthorized access, use, or disclosure, including:
-
Use of encrypted connections (HTTPS / SSL)
-
Secure server infrastructure
-
Access controls and internal policies
-
Pseudonymization or anonymization where appropriate
-
Although we strive to protect your data, we cannot guarantee absolute security. In case of a data breach, we will notify the relevant data protection authority and any affected individuals, as required by law.
6. Your Rights
Under applicable data protection laws, you have the right to:
-
Access your personal data
-
Rectify inaccurate or incomplete data
-
Delete your data (right to erasure), under conditions
-
Restrict processing
-
Object to processing (e.g. for direct marketing)
-
Data portability — receive your data in a structured, machine-readable format
-
Withdraw consent at any time (for data processed based on your consent)
-
Lodge a complaint with a supervisory authority (e.g. DPA)
-
To exercise these rights, please contact us at soundhealing.aura@gmail.com.
7. Minors
We do not knowingly collect personal data from children (under 18 years). If you believe we have collected such data, please contact us to request deletion.
8. Retention Period
We retain your personal data only as long as necessary for the purposes for which they were collected, or as required by law (e.g. accounting retention, warranty periods). After that, data are either deleted or anonymized.
9. Updates to this Privacy Policy
We may update this policy from time to time. Updated versions take effect once published on this page. We encourage you to check this policy periodically.
10. Cookies & Related Technologies
For details on cookies and tracking technologies, please see our separate Cookies Policy.
11. Contact Information
If you have any questions or requests regarding your personal data or this policy, please reach out:
Email: soundhealing.aura@gmail.com
Phone: +40 (768) 888 882
Address: Str. Kovacs Miklos 51, Băile Tușnad, Harghita County, Romania