Privacy Policy

Last updated: August 24, 2025

This Privacy Policy explains how we at Charlotta Ingeborg Finland collects, uses, and protects your personal data when you visit our website https://charlottaingeborg.com, purchase music or services, or interact with us.

We are committed to protecting your privacy and ensuring that your personal data is handled securely and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Data We Collect

When you use our website or services, we may collect the following types of personal data:

Contact information: name, email address, phone number, billing/shipping address.
Account details: if you create an account on our website.
Order details: products or services purchased, payment method, delivery details.
Payment information: processed securely by Apple Pay, Google Pay, and WooCommerce Payments. We do not store your full credit card or banking details.
Newsletter subscription data: if you subscribe, we store your email address in Mailchimp. You can unsubscribe at any time.
Usage data: IP address, browser type, pages visited, and other technical information (collected automatically by WordPress, cookies, and spam/security filters).
Healing & wellbeing services: any personal or health-related details you voluntarily share with us during healing sessions are kept strictly confidential and not recorded, stored, or shared without your explicit consent.

2. How We Use Your Data

We use your personal data for the following purposes:

To process and deliver your orders (music, healing sessions, events, or other services).
To manage your account on our website.
To communicate with you regarding your purchases, bookings, or inquiries.
To send you newsletters and marketing communications (only if you have subscribed).
To maintain website security, prevent fraud, and filter spam.
To comply with legal obligations (e.g., tax and accounting requirements).
To improve our services, website, and user experience.

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

Contractual necessity: when you purchase products or services from us.
Consent: when you subscribe to our newsletter or accept cookies.
Legal obligation: to comply with accounting, tax, and consumer protection laws.
Legitimate interests: to protect our website, prevent fraud, and improve services.

4. Sharing of Personal Data

We may share your personal data with trusted third parties:

Payment providers: Apple Pay, Google Pay, WooCommerce Payments (to process secure payments).
Email marketing provider: Mailchimp (for newsletters; you can unsubscribe anytime).
Service providers: website hosting, security, spam filters, and technical support.
Legal authorities: if required by law or in response to valid legal requests.

We do not sell or rent your personal data to third parties.

5. Data Retention

Order and payment-related information: kept for the period required by Finnish tax and accounting laws (typically 6–7 years).
Newsletter subscription data: kept until you unsubscribe.
Healing session information: not stored unless you specifically request it.
Usage data (logs, analytics, security data): generally kept for a shorter time, unless needed for security or legal reasons.

6. Cookies and Tracking

Our website uses cookies and similar technologies (through WordPress and WooCommerce) to:

Enable core site functions (shopping cart, login, account settings).
Prevent spam and ensure website security.
Analyze site traffic and improve performance.

You can control or disable cookies in your browser settings, but some features may not work properly without them.

7. Data Security

We take appropriate security measures (technical and organizational) to protect your personal data. However, no method of online transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights (GDPR)

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate information.
Request deletion of your personal data (unless we must keep it for legal reasons).
Restrict or object to certain processing.
Withdraw your consent (for newsletter or cookies).
Request data portability.

To exercise these rights, please contact us at in**@***************rg.com.

9. Children’s Privacy

Our services are not directed to children under 13, and we do not knowingly collect their data. If you believe we have collected personal information from a child, please contact us, and we will delete it.

10. Third-Party Links

Our website may contain links to external sites (e.g., YouTube, Spotify, Twitch, social media). We are not responsible for the privacy practices of those websites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

12. Contact Us

If you have questions or requests regarding this Privacy Policy, you can reach us at:

📧 in**@***************rg.com