Privacy policy
This policy explains what we do with your personal information. It is written to be read, not to be survived.
1. Who is responsible for your data
Xenia Vocal Consultant SRL, registered in Romania under number 42209070, with its registered office at Str. 1 Mai nr. 10, Baia Mare, Maramureș 610126, Romania, trading as The Frequencies by Xenia Vocal Healer.
We are the data controller. For anything in this policy, write to contact@xeniavocalhealer.com.
Because we are established in the European Union, we handle everyone's data to the GDPR standard — including yours if you live in the United States. Where your own state or country gives you additional rights, those apply too.
2. What we collect, and why
When you buy
Your name, email address, billing address and order details. We need them to take your order, deliver your files, issue your invoice and answer you if something goes wrong. The legal basis is performance of our contract with you, and our legal obligation to keep accounting records.
We never see your card number. Payments are processed by Shopify Payments and PayPal, who receive your card details directly. We only learn that a payment succeeded, the last four digits, and the card type.
When you order the Personalized Frequency
This is the most personal thing we handle, so we are specific about it.
- Your photograph. Xenia works from it to compose your frequency.
- Your date and place of birth.
- What you tell us about what you are going through and what you would like to change.
- Your email address and phone number, for delivery and for questions about your order.
The legal basis is performance of the contract: without these, the product cannot be made.
Some people write to us about health, grief or other difficult things. We did not ask for it, we do not need it, and we do not build anything on it — but when you send it, we hold it in confidence and delete it with the rest of your order file.
We do not use your photograph for facial recognition, identification, or any biometric analysis. We do not run it through any automated system. Xenia looks at it, and composes.
Your photograph and your details are never published, never sold, and never used in marketing — not with your name removed, not as an example, not anywhere.
When you join our list
Your email address, and your first name if you give it. We use it to send you the free guided meditation and, afterwards, occasional emails about our work. The legal basis is your consent, which you can withdraw at any time using the unsubscribe link at the foot of every email, or by writing to us.
When you simply visit
Our shop runs on Shopify, which records standard technical information: your IP address, browser and device, the pages you view, and how you arrived. We use it to keep the shop working and to understand which pages are read. The legal basis is our legitimate interest in running and improving the shop.
3. The audio we create for you
Your finished Personalized Frequency is kept in our archive so we can send it to you again if you lose it, and so Xenia can refer back to it if you ever order a follow-up.
It is not shared, not licensed to anyone, and not reused for another customer. It could not be — it was composed for one person.
If you want it deleted, say so and we delete it. You will then have no way to recover the file from us, so keep your own copy first.
4. Who else touches your data
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use these service providers, and only these:
- Shopify Inc. (Canada) — the shop platform: hosting, orders, customer accounts, email delivery of your files, and the shop's own analytics.
- Shopify Payments and PayPal — payment processing. They are independent controllers of the payment data they collect.
- Google Workspace (email) — our support inbox, which is where your messages to us live.
- Our accountant, in Romania, for invoices and tax records, as the law requires.
We may also disclose information where we are legally obliged to — for example to a tax authority or in response to a lawful order.
There are currently no advertising pixels on this shop — no Meta, no Google Ads, no TikTok. If that ever changes, this policy will be updated before the pixel goes live, and you will be given a way to opt out.
5. Data leaving the European Union
Shopify and Google process data outside the EU, including in the United States and Canada. Those transfers rely on the European Commission's Standard Contractual Clauses, and on the EU–US Data Privacy Framework where the provider is certified under it.
6. How long we keep things
- Order and invoice records — 10 years, as Romanian accounting law requires. We cannot shorten this.
- Your photograph and the details you sent for a Personalized Frequency — 12 months after delivery, then deleted. Sooner if you ask.
- The finished audio — kept in our archive so we can re-send it, until you ask us to delete it.
- Support emails — 3 years.
- Marketing list — until you unsubscribe, and for a short period afterwards to make sure we do not email you again by mistake.
7. Your rights
Wherever you live, you can ask us to:
- tell you what we hold about you, and give you a copy
- correct anything that is wrong
- delete it — except records we are legally required to keep
- send your data to you or to someone else in a portable format
- stop using it for marketing, immediately and without explanation
- restrict or object to a particular use
Write to contact@xeniavocalhealer.com. We answer within 30 days, and usually within one business day. We do not charge for this, and we will not treat you differently for asking.
If you live in the EU or the EEA, you may also complain to your national data protection authority, or to the Romanian one (ANSPDCP, dataprotection.ro).
If you live in California, or in another US state with a comprehensive privacy law, you have the rights listed above, plus the right to know what categories of personal information we collect and disclose. We have set out both above. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not process sensitive personal information for the purpose of inferring characteristics about you. You may use an authorised agent to make a request on your behalf.
If you live in the United Kingdom, you may complain to the Information Commissioner's Office (ico.org.uk).
8. Cookies
The shop uses cookies that are necessary for it to work — keeping your cart, keeping you signed in, security — and Shopify's own analytics cookies, which tell us how many people read a page.
You can refuse or clear cookies in your browser. The necessary ones cannot be turned off without breaking the checkout.
9. Security
The site runs over HTTPS. Access to orders and to customer files is limited to Xenia and to the person who helps her run the shop, each with their own account and two-factor authentication.
No system is perfectly secure. If a breach ever affects your data, we will notify you and the relevant authority as the law requires.
10. Children
This shop is not for children. We do not knowingly collect information from anyone under 18. If you believe a child has sent us data, write to us and we will delete it.
11. Automated decisions
We do not make any decision about you by automated means, and we do not profile you.
12. Changes
If we change this policy in a way that matters, we will say so at the top of this page and, where the change is significant, email the people on our list. The date below is when it was last changed.
Last updated: 7 September 2026.