Last updated: 18 September 2026 Balynsed ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect through balynsed.com, why we collect it, how we use and protect it, and what rights you have under the EU General Data Protection Regulation (GDPR) and Malta's Data Protection Act (Chapter 586 of the Laws of Malta).
Balynsed is a wellness and therapy practice based in Malta, offering services including Reiki, EFT/TFT, breathwork, meditation, yoga, and talk therapy.
Contact for privacy matters: Email: info@balynsed.com
We collect personal data in the following ways:
When you use our contact or booking form, we collect:
Automatically, when you visit our website, we may collect:
This is typically gathered through cookies and similar technologies — see Section 6.
Important note on sensitive information: If, in your message to us, you share information about your mental or physical health (for example, mentioning anxiety, a diagnosis, or a health condition), this is treated under GDPR as a “special category” of data requiring extra protection. See Section 4 below for how we handle this.
We use your personal data for the following purposes:
Purpose
Legal basis (GDPR Article 6)
We do not sell your personal data to third parties, and we do not use it for any purpose beyond what’s described here.
Because Balynsed offers therapeutic and wellness services, enquiries sometimes include information about your health or wellbeing — for example, mentioning stress, anxiety, or a specific condition you’re hoping to address.
Under GDPR Article 9, this counts as “special category data” and requires a stronger legal basis than ordinary contact details. We rely on your explicit consent to process this information, which you give by voluntarily submitting it to us via our contact/booking form.
Action needed: the contact/booking form should include a clear, separate checkbox (not pre-ticked) along the lines of: “I consent to Balynsed processing any health-related information I’ve shared above, for the purpose of arranging and delivering my session.” This can’t be bundled into a general “I agree to the privacy policy” tick — GDPR requires it to be specific and unambiguous for this category of data.
We share personal data only with trusted third parties who help us run our business, and only to the extent necessary:
We do not share your data with any third party for their own marketing purposes.
Action needed: please confirm which tools from the list above are actually in use so I can finalise this section — the answer also affects Section 6 (international transfers).
Some of the third-party services listed in Section 5 (particularly US-based providers like Google) may store or process data outside the European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or the provider’s participation in an approved data protection framework.
Our website uses cookies and similar technologies in line with Malta’s Processing of Personal Data (Electronic Communications Sector) Regulations (Subsidiary Legislation 586.01), which implements the EU ePrivacy Directive.
We use the following types of cookies:
When you first visit our site, you’ll be shown a cookie banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time via [cookie settings link] or by adjusting your browser settings.
Action needed: confirm exactly which cookies/tracking tools the site currently sets (I’d suggest checking this directly in the browser, or via your hosting/theme’s cookie scanner) so this section lists them accurately rather than generically.
We retain personal data only for as long as necessary for the purposes it was collected:
Action needed: confirm actual retention periods you intend to follow.
Under GDPR, you have the right to:
To exercise any of these rights, contact us at [privacy email]. We will respond within one month, as required by law.
If you’re not satisfied with how we’ve handled your data, you have the right to lodge a complaint with Malta’s supervisory authority:
Office of the Information and Data Protection Commissioner (IDPC) Website: https://idpc.org.mt
Our services and website are not directed at children. We do not knowingly collect personal data from anyone under the age of 16 without parental consent. If you believe a child has provided us with personal data, please contact us so we can remove it.
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including [e.g. secure hosting, restricted access to enquiry data, regular software updates].
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “last updated” date. We encourage you to review this page periodically.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
info@balynsed.com or click here
