Privacy Notice

Last updated: 19 October 2026

1. Who is responsible for your data

The data controller is Jasna Škiljan, sole trader, trading as Celtic Crystal Ogham & Reiki Healing, 63 The Green, Clonattin Village, Gorey, Co. Wexford, Y25 R650, Ireland. For any privacy question or request, email info@jasnaskiljan.com or call 083 082 8368.

2. What data we collect

• Booking a session: your name, email, phone number, the time you choose and anything you write in the booking form. Online bookings are handled by Koalendar.
• Health information: before and during sessions we may note relevant information about your health or well-being that you choose to share, so that the session is safe and suitable for you. This is sensitive (“special category”) data.
• Gift vouchers: the buyer’s name and contact details, the name of the person receiving the voucher, the voucher number, value, purchase date and expiry date.
• Payments: the amount, date and method of payment. Card payments are processed by the card payment provider; we do not see or store full card details.
• Emails, calls, messages and the withdrawal form: what you send us. For a withdrawal we also record the date, time and IP address of receipt as proof.
• Technical data: your IP address and browser details, which our hosting provider records in server logs for security. The fonts and icons on this website are loaded from Google Fonts and cdnjs, so these providers also receive your IP address when a page loads.

This website does not use tracking or advertising cookies, and it does not use analytics. The map is a link to Google Maps: Google receives your data only if you click it.

3. Why we use it and the legal basis

• Managing bookings, providing sessions and gift vouchers: performance of our contract with you (GDPR Art. 6(1)(b)).
• Health information: your explicit consent (Art. 9(2)(a)), which you give when you share it with us and can withdraw at any time. If you withdraw it, we may not be able to give a session safely.
• Accounting and tax records: legal obligation (Art. 6(1)(c)).
• Processing a withdrawal and any refund: legal obligation under consumer law (Art. 6(1)(c)); recording the time and IP address as proof: our legitimate interest (Art. 6(1)(f)).
• Website security, complaints and legal claims: our legitimate interest (Art. 6(1)(f)).

We do not sell your data, we do not use it for marketing without your consent, and we do not make decisions about you by automated means.

4. Who we share it with

• cyber_Folks (Poland): website hosting and our email.
• Koalendar: online booking calendar.
• Our card payment provider and our bank, when you pay.
• Revenue and other authorities, where the law requires.
• Our insurer or professional advisers, if needed for a claim.

Health information is never shared, except where the law requires it or you ask us to.

5. Transfers outside the EU

Some providers (Koalendar’s cloud hosting, Google Fonts and cdnjs) may process data in the United States. We use them only where the transfer is covered by an adequacy decision (the EU-U.S. Data Privacy Framework, for certified providers) or by the European Commission’s Standard Contractual Clauses. You can ask us for details.

6. How long we keep it

• Bookings that do not go ahead and general enquiries: 12 months after our last contact.
• Client records, including health notes: 6 years after your last session, in case of a complaint or claim, then securely deleted.
• Invoices, payment and gift voucher records: 6 years, as Irish tax law requires.
• Withdrawals and our confirmation: 6 years after the withdrawal.
• Server logs: as set by our hosting provider, normally a few weeks.

7. Your rights

You have the right to access your data, to have it corrected, to have it erased where we no longer need it and the law does not require us to keep it, to restrict or object to its use, to receive it in a portable format, and to withdraw your consent at any time. Write to info@jasnaskiljan.com. We reply within one month and may ask you to confirm your identity.

8. Complaints

If you think we have not handled your data properly, please tell us first so we can put it right. You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, dataprotection.ie, or to the data protection authority in the EU country where you live.

9. Security

The website uses an encrypted connection (HTTPS). Client records are kept securely, and only Jasna Škiljan has access to them. If a data breach is likely to put your rights at risk, we will tell you and the Data Protection Commission as the GDPR requires.

10. Changes

We update this notice when the way we handle data changes. The date at the top shows the current version.