Privacy Policy

Sphaera Lucis Reiki & Crystal Healing (“Sphaera Lucis”, “we”, “us”) respects your privacy. This policy explains what personal information we collect when you visit sphaeralucis.com, book a session or class, buy a product or contact us; why we collect it; who we share it with; and the rights you have.

We handle personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). If you live outside the Philippines, we also respect the rights you have under your local data protection laws.

Who we are

Sphaera Lucis is the personal information controller for the information described in this policy.

• Business: Sphaera Lucis Reiki & Crystal Healing
• SEC Registration No.: 2021030008293-08
• Address: GF, The Grid Co-Living, Yakal Street, Barangay San Antonio, Makati City, Philippines
• Email: hello@sphaeralucis.com
• Data Protection Officer: Aileen Javier, reachable at hello@sphaeralucis.com (please write “Attn: Data Protection Officer” in the subject line)

Information we collect

Information you give us

• Contact details: your name, email address, phone number and address, when you send a message, book, check out or create an account.
• Booking details: the session or class you choose, the date, time and format, and any notes you add when booking.
• Order and billing details: what you buy, your billing details and order history. Card and e-wallet details are entered directly with our payment provider; we never see or store your full card details.
• Details for personalized guides: for products such as Your Energetic Blueprint, Zodiac Alignment Guide and Your Pattern Signature, we ask for your birth date, birth time, birth place and sex, and, for Your Pattern Signature, your answers to a short assessment.
• Information about your wellbeing: anything you choose to share with us before, during or after a session or class, which may include information about your physical or emotional health. We treat this as sensitive personal information. We collect it only with your consent and use it only to provide and personalize your session.
• Feedback and testimonials you send us.
• Account details if you create an account, such as your username and password. Passwords are stored in encrypted form.
• Newsletter preferences if you subscribe.

Information collected automatically

• When you use our website, we and our service providers collect technical information such as your IP address, device and browser type, the pages you view, the site that referred you, and the date and time of your visit. This comes from server logs, security tools, and cookies and similar technologies (see “Cookies and tracking” below).

Information from others

• If you book us through a third-party platform such as ClassPass, that platform shares the booking details we need to provide your session.
• Our payment provider confirms whether a payment was successful.

How we use your information

We use personal information only for clear purposes and on a lawful basis:

• To provide what you booked or bought: scheduling and running sessions and classes, preparing and delivering guides and products, and sending confirmations and reminders. This is necessary to fulfil our contract with you.
• To process payments and prevent fraud. This is necessary for our contract with you, for our legal obligations and for our legitimate interest in keeping transactions secure.
• To prepare personalized guides from your birth details. We do this on the basis of your consent, which you give when you submit the order form.
• To respond to your questions and requests.
• To send our newsletter and updates. We only do this with your consent, and you can unsubscribe at any time using the link in every email.
• To understand how our website is used, using analytics cookies, only with your consent.
• To measure our advertising, using the Meta Pixel and WooCommerce order attribution, which show us which ads and links lead to bookings and purchases. This is based on our legitimate interest in knowing which of our ads work.
• To keep records required by Philippine tax, accounting and other laws.
• To keep our website and your information secure.

We do not sell your personal information. We never use information about your wellbeing for marketing. We only publish a testimonial with your permission, and then only with your first name and last initial unless you agree otherwise.

Who we share it with

We share personal information only with people and service providers who help us run our services, and only what they need. Our service providers act on our instructions and are bound by their own privacy and security commitments.

• Calendly: appointment scheduling and booking confirmations.
• Maya: payment processing.
• Google: website analytics (Google Analytics), spam protection on our forms (reCAPTCHA) and online sessions (Google Meet).
• Zoom: some online classes.
• Mailchimp: our newsletter and email updates.
• Mailgun: delivery of emails sent by our website, such as order confirmations.
• Meta (Facebook and Instagram): the Meta Pixel, which tells us when a visit, booking or purchase came from our Facebook or Instagram ads, so we can measure and improve our advertising.
• Our website hosting and security providers.
• Independent practitioners: some services, such as sessions with Rev. Lilian J. Hewlett, are provided by independent practitioners. When you book one of these, we share your booking details with that practitioner so they can provide your session.
• Professional advisers and authorities: our accountants or lawyers when needed, and government authorities when the law requires it.

International transfers

Some of our service providers store or process information outside the Philippines, for example in the United States. When this happens, we use reputable providers that protect personal information, and we remain responsible for your information under the Data Privacy Act.

How long we keep it

We keep personal information only as long as we need it for the purposes above:

• Booking and session records: while you are an active client and for up to three years after your last session, unless you ask us to delete them sooner.
• Birth details and assessment answers for personalized guides: up to 12 months after we deliver your guide, so we can answer questions or resend it, unless you ask us to delete them sooner.
• Order and payment records: for as long as Philippine tax and accounting laws require.
• Messages sent through our contact forms: up to two years.
• Newsletter subscriptions: until you unsubscribe.

When we no longer need information, we delete it or anonymize it securely.

Cookies and tracking

Cookies are small files stored on your device. We use:

• Essential cookies to run the cart, checkout, your account, spam protection on our forms (Google reCAPTCHA) and website security, and to remember your cookie choices. These are always on because the website can’t work properly without them.
• Analytics cookies (Google Analytics) to understand how visitors use our website so we can improve it.
• Advertising and order attribution (Meta Pixel and WooCommerce order attribution) to see which ads and links lead to purchases, and to measure and improve our advertising on Facebook and Instagram. These are on for all visitors.
• Marketing cookies (Mailchimp) to measure our email campaigns.

When you first visit, we ask for your choice. Analytics and marketing cookies are only set after you agree, and you can accept or reject each category. You can change your choice at any time with the “Cookie settings” link at the bottom of every page. If you withdraw consent, we remove the cookies we set for that category.

The Meta Pixel and order attribution are not part of this choice. To stop them, block or delete cookies in your browser, or adjust your ad settings in your Facebook or Instagram account.

You can also block or delete cookies in your browser settings. If you block essential cookies, parts of the website, such as the checkout, may not work.

How we protect your information

We use reasonable organizational, physical and technical measures to protect personal information. These include encrypted (HTTPS) connections, limited access to client information, security monitoring of our website, and payment processing by a provider that meets card industry security standards. No method of transmission or storage is completely secure, but we work to protect your information. If a personal data breach occurs that puts you at risk, we will notify you and the National Privacy Commission as the law requires.

Your rights

Under the Data Privacy Act, you have the right to:

• be informed about how your personal information is processed;
• access the personal information we hold about you;
• object to processing, including direct marketing;
• have inaccurate information corrected;
• have your information erased or blocked when it is no longer needed or was processed unlawfully;
• receive your information in a commonly used electronic format (data portability);
• withdraw your consent at any time, without affecting processing that already took place;
• claim damages if you are harmed by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your personal information; and
• file a complaint with the National Privacy Commission.

To exercise any of these rights, email us at hello@sphaeralucis.com. We may need to confirm your identity first. We will respond promptly and within the period the law requires.

Children

Our services are for adults aged 18 and over. We provide sessions or classes to anyone under 18 only with the consent of a parent or guardian. We do not knowingly collect personal information from children without that consent.

Links to other websites

Our website links to other sites and services, such as Calendly, ClassPass and Google Maps. Their privacy practices are governed by their own policies.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above. If the changes are significant, we will also let you know by email or with a notice on our website.

Contact us

If you have questions about this policy or how we handle your information, contact our Data Protection Officer, Aileen Javier, at hello@sphaeralucis.com or write to us at the address above. If you are not satisfied with our response, you may contact the National Privacy Commission.