Privacy Policy

This Privacy Policy explains how we process the personal data of persons using the website at shinewithcaroline333.com, signing up for free materials or the newsletter, purchasing courses, products, or services, contacting us, and using the content and offerings of the Shine with Caroline brand.We care about our users’ privacy and process personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the GDPR).

Data Controller

The controller of your personal data is:
Full legal name: EPI2
Brand: Shine with Caroline
Registered address: Stalowa 17/19/apt. 3, 03-425, Warsaw, Poland
Tax ID (NIP): 5221360099
Email: hello.shinewithcaroline@gmail.com

For matters relating to personal data, please contact us at: hello.shinewithcaroline@gmail.com
The supervisory authority with jurisdiction over the Controller is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Controller — the entity operating the Shine with Caroline brand, registered and operating in Poland, which determines the purposes and means of processing users’ personal data.
Shine with Caroline — the brand operated by the Controller, encompassing the website, educational content, newsletter, free materials, digital courses, individual sessions, workshops, products, and all other services offered by the Controller.
Website — the site available at [insert website address] together with its sub-pages, forms, landing pages, sign-up pages, sales pages, and all other technical elements supporting the Shine with Caroline business.
User — any natural person visiting the Website, signing up for the newsletter, downloading free materials, contacting the Controller, making a purchase, or using the content, products, or services of Shine with Caroline.
Customer — a User who has purchased a course, product, service, session, workshop, or any other paid offering from Shine with Caroline.
Personal Data — any information relating to an identified or identifiable natural person.
Processing — any operation or set of operations performed on personal data, including in particular collecting, recording, storing, organizing, using, transferring, disclosing, restricting, erasing, or destroying it.
GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
Consent — a freely given, specific, informed, and unambiguous indication of the User’s wishes by which the User signifies agreement to the processing of their personal data for a specific purpose. Where processing is based on consent, the User may withdraw it at any time.
Processor — an external service provider processing data on behalf of and on the instructions of the Controller.
Cookies — small text files saved on the User’s device when they use the Website.
Special Categories of Data — personal data afforded special protection under Article 9 of the GDPR, including health data.
Supervisory Authority — in Poland: the President of the Personal Data Protection Office (UODO).
Spiritual / Wellness / Body-Work Content — content, materials, exercises, guided meditations, breathing exercises, gentle body-work practices, presence practices, tension-release practices, postural and somatic awareness work, visualizations, belief and subconscious techniques, law-of-attraction materials, manifestation content, spiritual development materials, and other wellness and self-development content made available by Shine with Caroline, which is exclusively educational and inspirational in nature and does not constitute therapy, psychotherapy, physiotherapy, medical treatment, or any form of medical, psychological, or psychiatric intervention.

What Data May We Process?

Data you provide voluntarily:

first name,
email address,
phone number, if provided,
the content of messages sent via the contact form or by email,
data required for order fulfillment, e.g., billing address or delivery address,
data relating to purchased courses, products, or services,
data required for invoicing (including VAT number in the case of business customers),
information submitted when booking a 1:1 session, consultation, workshop, or event,
information provided in preparatory forms for 1:1 sessions or individual services, including the Customer’s goals, preferences, description of tensions, information about practice, well-being, contraindications, and information relating to lifestyle, posture, breathing, body work, wellness, or spiritual content, where the Customer provides this voluntarily,
photographs, recordings, visual materials, or other materials voluntarily submitted by the Customer for the purpose of preparing an analysis, recommendations, or delivering the 1:1 Face Analysis service,
reviews, testimonials, photographs, or before-and-after materials, where you provide them voluntarily and give separate consent to their use.

Technical and analytical data:

IP address,
device and browser data,
information about how the site is used,
cookie identifiers,
information about the source of entry to the site,
data on clicks, page views, conversions, and interactions with content.

Providing data is voluntary, but may be necessary in order to use certain features or services, such as sending a message, downloading a free material, receiving the newsletter, making a purchase, or requesting an invoice.

Purposes and legal bases processing?

We process personal data only where there is a specific, documented legal basis under the GDPR. The table below sets out all processing purposes, the scope of data, the legal bases, and the retention periods.