Privacy Policy

Account information includes your name, email, sign-in details, and any profile details you choose to add. We use it to provide the account and features you request, under Article 6(1)(b) GDPR. Google Firebase provides authentication, database and file storage services.

Application information includes contact details, practice descriptions, photographs, videos and optional credentials. We use it to review your request to join HAWA and communicate with you, including steps before entering an agreement. Only approved public profile materials are intended for publication; uploaded credentials are for private review.

Enquiries, booking requests and sanctuary requests contain the information you choose to provide. We use it to respond to or fulfil your request. Please do not include medical records or unnecessary sensitive information. We process security and operational records under our legitimate interests in protecting the service and preventing abuse; information required by law is processed to meet legal obligations.

The assessment is voluntary and for adults aged 18 and over. Before you begin, we ask for explicit consent to process information that may concern your physical or mental wellbeing, under Articles 6(1)(a) and 9(2)(a) GDPR. This is separate from account terms or marketing.

Individual statement answers are processed in memory in your browser. At completion, eight scores and a consent receipt are kept in session storage so you can sign in and see your results. When you request results while signed in, we save your scores and consent wording, version, age confirmation and server-recorded time to your account. We do not upload individual statement answers in this flow. The dashboard holds a copy of the current scores so you can revisit them.

We compare your scores with practitioners’ listed areas of practice to suggest options. This is not diagnosis, treatment advice or a decision with legal or similarly significant effects. We do not send your scores or raw answers to practitioners, advertising tools or analytics. Sharing the downloadable circle is your choice; the image reveals your scores to people you share it with.

You can withdraw consent and erase your saved reflection using Privacy controls, or contact us. You can still browse HAWA without completing the assessment. Withdrawal does not affect processing that was lawful beforehand.

Authorised HAWA staff and service providers process information as needed to run the service. These include hosting and anonymous visit statistics (Vercel), Google Firebase and communications providers. Information may also be disclosed where law requires it or where necessary to establish or defend legal claims. HAWA does not sell personal information.

Contact links open the independent provider’s website, email, booking service or WhatsApp. HAWA does not automatically attach assessment answers to them. Information you choose to send there is handled under that provider’s privacy practices. A booking or enquiry submitted within HAWA shares the details needed to fulfil that request.

External Spotify and YouTube players are optional. Loading a player connects your browser to that provider, which may receive your IP address and use cookies. The player explains this before loading. Other external links and media services have their own privacy practices.

Incomplete assessment answers last only while the assessment page remains open. Completed scores in session storage normally last until the tab closes; signing out or using Privacy controls also clears HAWA’s assessment storage in the current tab.

New saved reflections replace the current reflection for your account. We keep that reflection to provide your saved wheel until you replace it, withdraw consent or request account deletion. Privacy controls erase associated assessment consent records and all identifiable assessment responses linked to your account, including older responses. We retain a minimal withdrawal timestamp to prevent old tabs from saving withdrawn data again.

Account data is retained while needed to provide your account. Application information is retained while review or the listing relationship is active; enquiries and booking records while necessary to handle the request and related disputes. Where a legal obligation or specific claim requires longer retention, we limit retention to the information necessary for that purpose. Contact us to request deletion of these records.

HAWA operates from Bulgaria. Our technology providers may process information outside the European Economic Area. Such transfers require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact hello@hawabeing.com for details of the providers, locations and safeguards relevant to your information.

We use essential cookies and browser storage for authentication, site access and requested functionality. We do not run advertising trackers. We count visits, and a few anonymous moments such as a reflection being started or finished, with Vercel Web Analytics, which uses no cookies and does not identify you. See the Cookie Policy. External players load only when you choose to enable them.

Creating an account or taking the assessment does not subscribe you to marketing. Marketing requires a separate choice; you can ask us to stop marketing messages at any time at hello@hawabeing.com.

If you sign up for the HAWA Letter, our monthly email, we keep your email address, the page where you signed up and when you agreed, under your consent (Article 6(1)(a) GDPR), only to send the letter. Every letter carries a way to unsubscribe, or you can write to hello@hawabeing.com; we then stop sending it and delete your address.

You may request access, correction, erasure, restriction, eligible data portability, or object to processing based on legitimate interests. You may withdraw consent at any time. Download or erase your assessment in Privacy controls. For a complete account export or other records, email hello@hawabeing.com. We may need to verify your identity.

We respond without undue delay, normally within one month. If a complex request requires an extension permitted by law, we will explain the reason within that first month. You may complain to your local supervisory authority or the Commission for Personal Data Protection in Bulgaria.

HAWA’s account and assessment features are for adults aged 18 and over. Contact us if you believe a child has submitted information. We update this notice when practices change and request fresh consent where required; continuing to browse does not itself give consent to new processing.