Privacy Policy


Last updated: 31 May 2026
Controller: Tiago Garcia / Ground Presence
Contact: [email protected]
Location: Luxembourg



This privacy notice explains how I collect, use, and protect your personal data when you book and attend a sound healing session or related service.

1. What data I collect

When you book a session, I may collect:

  • Your name
  • Your email address


Optional: information you share in the booking form or by email about your health, preferences, or consent to specific practices

2. Why I process your data

I use your data for these purposes:

  • To manage your booking, send confirmations, reminders, and follow-up messages about the session
  • To prepare for the session (e.g., noting preferences or needs)
  • To send invoices, keep records, and handle payments where applicable
  • To comply with legal obligations (e.g., tax and accounting rules)


If you separately opt in (an optional, unchecked box), I may also use your email to send occasional updates about future sessions, events, or offers.

3. Legal basis for processing

For session bookings, I rely on:

  • Contractual necessity: processing is needed to provide the service you booked and to communicate about it
  • Legitimate interests: managing bookings, records, and customer communication
  • Consent: for optional marketing emails or special categories of data where I explicitly ask for your agreement


4. How long I keep your data


I keep your personal data:

  • For as long as needed to provide the service and manage your booking
  • For a reasonable period after the session for administrative purposes (e.g., invoicing, follow-up)
  • At least as long as required by Luxembourg tax and accounting laws
  • For marketing emails, only while you remain subscribed and do not unsubscribe

You can ask me to delete your data at any time, subject to legal obligations to retain certain records


5. Who I share your data with

I do not sell your data. I may share your information with:

  • Payment processors (Stripe) to handle transactions
  • Scheduling or booking tools (Calendly) and email service providers (MailerLite) that I use to operate my business
  • Professional advisors (e.g., accountant) if needed for legal or financial obligations
  • These services are used under data processing agreements and are required to protect your data under GDPR.


6. Where your data is processed

Some of the tools I use are based in the European Economic Area (EEA); others may process data outside the EEA. Where this happens, I ensure appropriate safeguards are in place in line with GDPR (e.g., Standard Contractual Clauses or adequacy decisions).

7. Your rights

Under GDPR, you have the right to:

  • Access the personal data I hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to certain processing
  • Request data portability where applicable
  • Withdraw consent at any time (e.g., for marketing emails)
  • Lodge a complaint with a data protection authority, such as the CNPD in Luxembourg

To exercise your rights, contact me at [email protected]. I will respond within one month.

8. Security

I take reasonable security measures to protect your data, including:

  • Using trusted, GDPR-compliant services (e.g., Calendly, MailerLite)
  • Limiting access to your data to only what is necessary
  • Avoiding unnecessary collection of sensitive data
  • However, no internet transmission is 100% secure; I cannot guarantee absolute security but will act promptly if a breach is suspected.


9. Cookies and tracking

This notice covers personal data I collect directly. If I use cookies or tracking on any website or landing page, I will inform you separately and obtain consent where required.

10. Changes to this notice

I may update this privacy notice from time to time. The “Last updated” date at the top will change when I do. I will post the updated version on my site and, where relevant, inform you by email.

    Created with MailerLite