This policy explains what personal information we collect on this page and when you buy The State One, why, and what you can do about it. To stop receiving our emails, see How to unsubscribe.
1. Who is responsible for your data
Xenia Vocal Consultant SRL, registered in Romania under number 42209070, Str. 1 Mai nr. 10, Baia Mare, Maramureș 610126, Romania, trading as Xenia Vocal Healer, is the data controller. For anything in this policy, write to contact@xeniavocalhealer.com.
Because we are established in the European Union, we handle everyone's data to the GDPR standard — including yours if you live in the United States. Where your own state or country gives you additional rights, those apply too.
2. What we collect, and why
When you buy
Checkout runs on our own shop, frequencies.xeniavocalhealer.com, powered by Shopify. There we collect your name, email address, billing address, and order details, so we can take your order, give you access to your files, issue your invoice, and answer you if something goes wrong. The legal basis is the performance of our contract with you and our legal obligation to keep accounting records.
We never see your card number. Payments are processed by Shopify Payments, PayPal, or Shop Pay, which receive your card details directly.
When you click through to checkout, we also pass along where your visit came from (for example, the name of the ad or campaign that brought you here), so we can tell which of our ads actually work. It is stored with your order.
When you visit this page
- Meta Pixel (Meta Platforms) records that you viewed the page, saw the offer, or clicked through to checkout, so we can measure our advertising and show our ads to people likely to be interested. When you complete a purchase, our shop also reports it to Meta through Shopify's Facebook & Instagram integration. Under some US state laws, this counts as "sharing" personal information for cross-context behavioral advertising. If your browser sends a Global Privacy Control signal, the Meta Pixel is not loaded on this page at all. You can also manage the ads you see in your Meta account settings.
- Microsoft Clarity records how the page is used — scrolling, clicks, which sections are read — so we can improve it. It masks anything typed into fields.
- Cloudflare hosts this page and keeps standard technical logs (IP address, browser, time of request) for security.
- Google Fonts delivers the typefaces; your browser connects to Google to load them.
The legal basis is our legitimate interest in running, measuring, and improving our pages, and, where the law requires it, your consent. We do not sell your personal information for money.
The Private Circle
The Private Circle runs on Telegram. When you join, Telegram processes your account information under its own privacy policy. Other members can see your Telegram name and what you post in the group.
3. Emails, and how to unsubscribe
We email you about your order. If you agreed to it, we may also email you about our work and new frequencies. You can stop our marketing emails at any time:
- click the unsubscribe link at the bottom of any email we send; or
- email us with the subject "Unsubscribe" from the address you want removed.
We remove you within 10 days, usually the same day.
4. Who else touches your data
| Provider | What for |
|---|---|
| Shopify Inc. (Canada) | our shop and checkout, orders, order emails |
| Shopify Payments, PayPal | payment processing (independent controllers of the payment data) |
| Cloudflare Inc. (USA) | hosting of this page and of your library |
| Meta Platforms (Ireland / USA) | advertising measurement (Meta Pixel and the Shopify integration) |
| Microsoft (USA) | page analytics (Clarity) |
| Google (USA) | web fonts; our support inbox (Google Workspace) |
| Telegram (UAE / UK) | The Private Circle, if you join |
| Our accountant (Romania) | invoices and tax records, as the law requires |
We may also disclose information where we are legally obliged to, for example to a tax authority or in response to a lawful order.
5. Data leaving the European Union
Several of these providers process data in the United States, Canada, and other countries outside the EU. Those transfers rely on the European Commission's Standard Contractual Clauses, and on the EU–US Data Privacy Framework where the provider is certified under it.
6. How long we keep things
- Order and invoice records — 10 years, as Romanian accounting law requires.
- Support emails — 3 years.
- Marketing list — until you unsubscribe.
7. Your rights
Wherever you live, you can ask us to tell you what we hold about you and give you a copy; correct it; delete it (except records we must keep by law); send it to you in a portable format; stop using it for marketing; or restrict or object to a particular use. Write to contact@xeniavocalhealer.com. We answer within 30 days, usually within one business day, free of charge, and we will not treat you differently for asking.
If you live in California or another US state with a comprehensive privacy law, you also have the right to know what categories of personal information we collect and disclose (listed above) and to opt out of "sharing" for cross-context behavioral advertising. To opt out, turn on Global Privacy Control in your browser or write to us. You may use an authorized agent.
If you live in the EU or the EEA, you may complain to your national data protection authority or to the Romanian one (ANSPDCP, dataprotection.ro). In the United Kingdom, to the ICO (ico.org.uk).
8. Cookies
This page sets cookies only through the Meta Pixel and Microsoft Clarity described above. You can refuse or clear cookies in your browser at any time; the page works without them. Our shop's checkout uses its own cookies, described in the shop's privacy policy.
9. Security, children, and changes
Everything runs over HTTPS, and access to customer data is limited to Xenia and the person who helps her run the business. If a breach ever affects your data, we will notify you and the relevant authority as the law requires.
Our products are not for children. We do not knowingly collect information from anyone under 18.
If we change this policy in a way that matters, we will say so at the top of this page. The date above is when it was last changed.