Privacy Policy:
Shekina Healing — Privacy Policy

Last updated: 11-11-2025

Shekina Healing (“Shekina Healing”, “we”, “us”, or “our”) operates the Shekina Healing website and associated online services (the “Service”).

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service in or from Hong Kong. We process personal data in accordance with Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”).

By using the Service, you agree to the collection and use of information in accordance with this Policy. Unless otherwise defined, terms used here have the same meanings as in our Terms and Conditions.

1) Personal Data We Collect

We may collect the following categories of personal data:

- Identity and contact data: first and last name, email address, telephone number, postal address.

- Account data: username, hashed password, preferences, login history.

- Booking and transaction data: session/workshop registrations, payment confirmations, invoicing details. (Note: payment processors collect card/bank details directly.)

- Client intake data: information you provide in forms for private sessions (health history, goals, emergency contact).

- Communications: messages you send via contact forms, email, WhatsApp, or other channels.

- Technical and usage data: IP address, device/browser type and version, pages visited, time and date of visits, time spent, referral URLs, and other diagnostic data.

- Cookies and similar technologies: as described in Section 4 (Cookies).

- Marketing preferences: newsletter opt-ins/opt-outs.

Contact forms

- When you submit a form, we collect your name, email, phone number, and message so we can respond. We will not add you to marketing lists unless you opt in.

Emergency contact

- If you provide an emergency contact, you confirm you have obtained that person’s consent for us to hold and use their details for emergency purposes.

2) Purposes and Legal Bases for Use

We use your personal data to:

- Provide and maintain the Service, including bookings, confirmations, reminders, and rescheduling.

- Deliver private sessions, workshops, and corporate services you request.

- Communicate with you, respond to enquiries, and provide customer support.

- Notify you of changes to our Service, Terms, or policies.

- Enable interactive features when you choose to use them (e.g., portals, accounts).

- Monitor and improve site performance, user experience, services, and security.

- Conduct analytics and service improvement (using aggregated or de-identified data where feasible).

- Send marketing communications where you have consented or as otherwise permitted by PDPO (you may opt out at any time).

- Comply with legal obligations, court orders, and regulatory requirements in Hong Kong.

3) Disclosures and Transfers

We may disclose personal data to:

- Practitioners and staff engaged by Shekina Healing on a need-to-know basis to deliver Services.

- Service providers and vendors (e.g., website hosting, booking systems, email/SMS/WhatsApp platforms, analytics providers, payment processors) under confidentiality obligations and solely for the purposes described.

- Healthcare professionals with your consent.

- Professional advisers (lawyers, accountants) under confidentiality.

- Government authorities, regulators, law enforcement, or courts where required by Hong Kong law or lawful process, or to protect rights, safety, or property.

Cross-border transfers

- Some service providers may process data outside Hong Kong. Where applicable, we take reasonable steps to ensure recipients provide a level of protection comparable to PDPO requirements (e.g., contractual safeguards).

We do not sell your personal data.

4) Cookies and Similar Technologies

Cookies are small files placed on your device. We use:

- Strictly necessary cookies: to operate core site functions (e.g., session management).

- Preference and functional cookies: to remember settings (e.g., display options).

- Analytics cookies: to help us understand usage and improve the Service.

If you log in, we may set temporary cookies to test browser support; login cookies can persist for up to two weeks if you choose “Remember Me,” and screen preference cookies may last up to one year.

You can set your browser to refuse cookies or alert you when cookies are set. If you disable cookies, some features of the Service may not function properly.

5) Analytics and Marketing Tools

Google Analytics

- We use Google Analytics to understand website traffic and usage trends. Google may use collected data to contextualize and personalize its own ads.

- You can opt out by installing the Google Analytics Opt-out Browser Add-on.

- For details, see Google’s Privacy & Terms.

Email newsletters and updates

- We may use an email service provider (e.g., Mailchimp or similar) to send newsletters or service-related messages. We will only send marketing emails with your consent or as permitted by PDPO. You can unsubscribe at any time via the link in the email or by contacting us.

Online booking and events systems

- If you register for an event or book a session, your registration/contact details will be processed by our booking/event platform provider to facilitate your booking.

Embedded content and links

- Our Service may include links to third-party sites and embedded content (e.g., videos, images). Third-party sites may collect data about you, use cookies, and track your interaction in accordance with their own privacy policies. We are not responsible for third-party privacy practices. Please review their policies.

6) Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7) Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, including:

- Account, booking, and service records: for the duration of the relationship and a reasonable period thereafter.

- Legal, regulatory, and tax requirements: as required by applicable Hong Kong law.

- Dispute resolution and enforcement: as needed to establish or defend legal claims.

Retention duration depends on data type, legal mandates, potential litigation, contractual requirements, operational needs, and archival value. When data is no longer needed, we will delete or anonymize it.

8) Your Rights (Hong Kong PDPO)

Subject to PDPO and applicable exemptions, you may:

- Request access to personal data we hold about you.

- Request correction of inaccurate personal data.

- Opt out of direct marketing at any time.

- Withdraw consent where processing is based on consent (this does not affect processing before withdrawal or where processing is otherwise permitted by law).

Requests may require reasonable identity verification. We will respond in accordance with PDPO requirements and may charge a reasonable fee for data access requests as permitted by law.

To exercise your rights, contact us at the email below.

9) Children’s Privacy

Our Service is intended for individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can take appropriate steps.

10) Changes to This Privacy Policy

We may update this Policy from time to time. We will post the updated Policy on this page with a new “Last updated” date. Material changes may also be notified by email or site notice. Your continued use of the Service after changes take effect constitutes acceptance.

11) Contact Us

For privacy enquiries, access/correction requests, or to opt out of direct marketing, please contact:

- Shekina Healing

- Email: sue.gaeta88@gmail.com

- Phone/WhatsApp: +85294403848

- Website: https://www.shekinahealing.com

Please include sufficient details for us to identify you and the personal data in question.

Notes to finalize:

- Replace placeholders with Shekina Healing’s contact details.

- Confirm your email platform (e.g., Mailchimp) and booking system name; we can add links to their privacy pages.

- If you use any additional third-party tools (e.g., Meta Pixel, Stripe), let me know to add them with opt-out and policy links.