Privacy & Data Protection

Who is the data controller?

This site is operated by NONSTOP SERVICE LTD, a company registered in England and Wales (company no. 12271149). Registered office: Demsa Accounts, 565 Green Lanes, Haringey, London N8 0RL, United Kingdom.

The company is registered with the UK Information Commissioner's Office as a data controller. Registration number: C1989967.

For data protection matters, please write to yucdur@gmail.com

What do I collect?

What you give me when you complete the booking request form:

• Your name
• Your email address
• Your country and time zone (so the attunement can be scheduled correctly)
• Your full address (the attunement is directed to you personally; the address gives the intent an exact target. It is used only for this and never shared)
• Your phone number — so we can talk on WhatsApp for the free introductory conversation; it is optional for a course booking
• The course you are interested in and the time you chose
• Any additional message you choose to write

Depending on what you use, the following are also held:

• If you open an account: your email address, your name and an irreversible hash of your password. The password itself is never stored anywhere.
• If you pay: the amount, the currency and the reference numbers Stripe returns. Card details are never entered on this site and I never see them.
• If you leave a review: the text you wrote and the display name you agreed to publish.
• On sign-in and password-reset attempts: your IP address is held briefly (at most 15 minutes) to limit abuse, then expires by itself.
• The moment you gave your consent about the right to cancel — so it can be shown if there is ever a dispute.

Why do I collect it?

For one purpose only: to answer your booking request and to deliver the training you ask for. The lawful bases are your consent and the pre-contractual steps taken at your request.

I do not add you to a marketing list and I do not send bulk email. If I ever start a newsletter, I will ask for your permission separately and explicitly.

What brings you to Reiki, and your 21-day journal

On the booking form you can choose, if you wish, what brings you to Reiki and describe it in a sentence or two. For 21 days after your attunement you can also write in your journal about how you are. Details such as worry, sleep, grief or what you feel in your body count as health information and are specially protected.

The topic you choose (for example "stress, worry or sleep") is kept as a category. What you write in your own words is kept only with your explicit consent: the booking form has a separate consent box, and the journal says so clearly next to the send button. The lawful basis is your explicit consent.

I use this for one purpose only: to support you better. Only I read it; it is never published or shared, and my notification emails carry only a summary. I do not ask for diagnoses, medication or medical history.

If what you write mentions harming yourself or violence, I show you safe support lines straight away and write to you the same day.

You can withdraw your consent at any time; just write to me and I will delete your note.

Who do I share it with?

I do not sell, rent or pass your details to anyone for advertising.

Three providers are needed to run the site. Each acts only on my instructions and only to provide that service:

• Cloudflare, Inc. — hosts the site and provides the datastore where bookings are kept. Your name, email, phone, address and booking details are stored there.
• Stripe Payments Europe / Stripe, Inc. — takes card payments. The payment page is Stripe's own; your name and email address are passed to Stripe directly, and your card details exist only at Stripe.
• Resend (Plus Five Five, Inc.) — delivers confirmation, reminder and certificate emails. Your email address and the contents of those messages pass through this service.

These companies may hold data on servers in the United Kingdom, the European Union and the United States, so your data may be transferred outside your country. All three offer standard contractual clauses and equivalent safeguards for such transfers.

Apart from these, I share your information with no one unless the law requires it.

How long do I keep it?

Requests that do not lead to a booking — cancelled, declined, or never paid for — are deleted automatically after 12 months. A job that runs once a day does this; it does not depend on me remembering.

Questions you ask the site helper and choose to pass on to me are kept, together with your email address, so that I can reply; the same job deletes them after 12 months.

If you take a course, I must keep your records for 6 years so that your certificate can be verified and to meet UK accounting obligations.

What you wrote about what brings you to Reiki, and the text in your 21-day journal, are not kept for those 6 years: the same job deletes them 2 years after your session. Only the topic you chose and the 1–5 scores remain.

Your account, and any levels still waiting in your package, are kept until you ask me to delete them — the levels have no expiry, so the record cannot have one either.

You can ask for earlier deletion at any time, and I will delete everything I am not legally required to keep.

Cookies and visitor statistics

There are no advertising cookies on this site and I do not track anyone across sites. The cookies used are only those the site needs to work:

• A signed cookie that keeps you signed in to your account.
• A cookie remembering which currency you prefer to see prices in.
• A session cookie used when signing in to the admin panel — mine alone.

Cloudflare Web Analytics may be used for visitor statistics. It sets no cookies and does not identify visitors; it only counts how often each page is opened. When it is on, Cloudflare's measurement script (static.cloudflareinsights.com) is loaded on the site's pages.

Some pages carry a YouTube video. The video is not loaded until you press play: until then no connection to YouTube is made at all, not even for the cover image. When you press play the video opens through youtube-nocookie.com, and from that moment YouTube's (Google's) own privacy terms apply — the same as opening the video on YouTube. If you do not watch it, nothing reaches Google.

Your rights

Under the UK GDPR — and under KVKK if you are in Türkiye — you have the right to:

• Ask what data I hold about you and receive a copy
• Have inaccurate or incomplete information corrected
• Ask for your data to be deleted
• Object to processing and withdraw your consent
• Receive your data in a portable format

How to make a request

Simply write to yucdur@gmail.com. I will respond within one month at the latest, free of charge.

If you are not satisfied with my response, you may complain to the Information Commissioner's Office in the UK (ico.org.uk) or, in Türkiye, to the Personal Data Protection Authority (kvkk.gov.tr).