Privacy Policy

Data Controller

The controller of your personal data is Sound and Healing Ltd. (registered in Bulgaria as „САУНД ЕНД ХИЛИНГ“ ООД), UIC 208469189, with registered seat and address of management гр. Пловдив 4000, р-н Централен, ул. „Христо Станчев“ № 1, represented by Петър Андреев Щерев. For questions regarding data protection you can contact us at: booking@soundandhealing.bg.

What data we collect and why

When you make a booking, we process the following data:

• Name — to identify the booking;
• Email address — for confirmation and communication about the booking;
• Phone — to contact you if needed regarding the session;
• Booking details (date, time, number of seats, session type);
• Consent date and time for the processing of your personal data;
• Language preference (Bulgarian or English) — so we can serve you in your chosen language.

We do not collect payment card data. Payment is made on the secure myPOS page and your card details never reach this website.

Legal basis

• Performance of a contract (Art. 6(1)(b) GDPR) — to process and confirm your booking;
• Legal obligation (Art. 6(1)(c) GDPR) — to issue documents and comply with accounting and tax legislation;
• Consent (Art. 6(1)(a) GDPR) — which you give via the checkbox at checkout and can withdraw at any time.

Recipients and processors

We share data only as necessary with the following providers:

• myPOS — payment processing. Card data is entered directly on the secure myPOS page and is not stored by us;
• SuperHosting.BG — website hosting and email services;
• NRA (National Revenue Agency) — where required by law (electronic receipts / tax purposes — forthcoming).

We do not sell or provide your data to third parties for marketing purposes.

Retention period

Data related to orders and payments is retained for the period required by Bulgarian accounting and tax law (generally up to 10 years for accounting records). Messages sent via the contact form are kept only as long as necessary to respond to your enquiry.

Cookies and local storage

This site uses only technically necessary cookies and preference cookies. We do not use cookies for analytics, advertising, or profiling.

• aurea_lang (preference) — remembers your chosen language;
• woocommerce_items_in_cart, woocommerce_cart_hash, wp_woocommerce_session_* (strictly necessary) — maintain the cart and checkout process;
• aurea-theme (preference, local storage) — remembers light or dark theme;
• aurea_cookie_notice (preference, local storage) — remembers that you dismissed the cookie notice.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw your consent at any time. To exercise these rights, write to us at booking@soundandhealing.bg.

You also have the right to lodge a complaint with the supervisory authority — the Commission for Personal Data Protection (CPDP), Sofia, 2 Prof. Tsvetan Lazarov Blvd., cpdp.bg.

No profiling

We do not carry out automated decision-making or profiling. We do not use analytics or marketing tools on this website.