Privacy Policy

1. Data Controller

Aleksandra Grasso – Kwiatowe Esencje, Tax ID (NIP): 7361756295, address: ul. Podhalańska 395, 34-514 Dzianisz, Poland, email: kontakt@kwiatowesencje.pl.

2. What Data We Process

When booking and providing consultations, we process: contact details (first name, last name, phone, email), consultation and recipe history, and — with separate, explicit consent — notes about the reported emotional state. When signing up for a workshop or training, we process first name, last name, email address, and (optionally) phone number — solely to handle the sign-up, confirm participation, and follow up about payment.

3. Special Category Data (GDPR Art. 9)

Notes about a client's emotional state constitute health data within the meaning of Art. 9 GDPR. We process this data only on the basis of separate, explicit consent given before or during the first consultation. This data is encrypted in our system, and only the administrator has access to it. Consent can be withdrawn at any time by contacting the administrator.

4. Recipients of Data and Transfers Outside the EEA

We use trusted third parties to process data on our behalf:

• Supabase — database hosting (EU-based servers).
• Anthropic (USA) — the AI model provider powering the "essence assistant" chatbot; receives only the content of chat messages, not linked to the client's identity.
• Resend (USA) — sends confirmation emails for workshop/training sign-ups; receives the registrant's name and email address.

[TODO: transferring data to Anthropic and Resend (USA) requires confirming the appropriate mechanism for transfers outside the EEA — e.g. standard contractual clauses in each provider's data processing agreement — to be verified before processing real client data].

5. Retention Period

We retain contact details, consultation and recipe history, and notes about emotional state for 5 years from the last contact with the Client, after which they are deleted or anonymized. Workshop and training sign-ups are retained under the same rules.

6. Your Rights

You have the right to access your data, rectify it, erase it, restrict its processing, transfer it, and lodge a complaint with the President of the Personal Data Protection Office (UODO).

7. AI Chatbot

The essence assistant does not save conversations to a client's file — conversations are anonymous and not linked to identity, unless the user explicitly asks for the conversation to be shared with the therapist. Messages are sent to the AI model (Anthropic, see §4) solely to generate a response and are not stored in our database.