Legal
Privacy policy.
Last updated [DATE]
We collect as little as we can get away with. This page says exactly what that is. The controller is [LEGAL ENTITY NAME].
What we collect
- Your email address — required, because it is how your download is delivered.
- Your name and country — if you provide them, for the receipt and tax records.
- Order details — which sessions, when, and the amount.
- Basic technical data — IP address and browser, logged by our host for security and fraud prevention.
- A prayer request and birth details — only if you choose to send them. See below.
What we never collect
We do not see or store your card number, expiry or security code. Payment is handled entirely by Stripe on their own systems. We receive only a confirmation that payment succeeded and the last four digits for your receipt.
We do not collect health information, and we ask you not to send us any.
Prayer requests and birth details
If you choose to send an intention with your order, you may also send your name, date of birth, time of birth and place of birth. This is entirely optional — you can buy any session without providing any of it, and nothing about your order changes if you do not.
We treat this as sensitive information and handle it differently from ordinary order data:
- Who sees it. Only Kahu Kāhealani, so that she can perform the ceremony and prepare your TimeWaver frequency codes. It is not shared with any other person, company or platform, and it is never used for marketing.
- Why we may hold it. Your explicit consent, given by ticking the box at checkout. That is the only basis we rely on, and you may withdraw it at any moment.
- Special category data. An intention written in your own words may reveal things about your health, your beliefs or your family. We do not ask you to disclose any of that, we do not require it, and we ask you not to include clinical details. Whatever you write is treated as confidential.
- How long. Your intention and birth details are deleted once your ceremony and frequency codes are complete, unless you ask us to keep them so future sessions can build on the same work.
- Withdrawing. Email us and we will delete everything you sent, same day. You do not need to give a reason, and your purchase is unaffected.
Prayer requests are not a medical, psychological or diagnostic service, and nothing you send is reviewed by a clinician. If you are in crisis, please contact a qualified professional or your local emergency service.
Why we hold it
To deliver what you bought, to re-issue your download if you lose it, to handle refunds, and to meet tax and accounting obligations. That is all. We do not build profiles.
Buying a session does not subscribe you to anything. If you opt in to hear about new releases you can unsubscribe from any message, and we will not pass your address to anyone else.
Who else touches your data
- Stripe — payment processing.
- Cloudflare — hosting and content delivery.
- [EMAIL PROVIDER] — sending your download and receipt.
We do not sell, rent or trade personal data. Ever.
Cookies
This site uses no advertising or tracking cookies. Your cart is kept in your own browser’s local storage and never leaves your device until you check out.
How long we keep it
Order records are kept for as long as tax law requires, then deleted. Marketing contacts are deleted on unsubscribe.
Your rights
Wherever you live, you may ask us for a copy of your data, ask us to correct it, or ask us to delete it. If you are in the UK, EU or EEA this is your right under UK/EU GDPR; if you are in California, under the CCPA. Write to hi@quantumwaves.ai and we will action it within 30 days. We will not charge you or treat you differently for asking.
Children
This store is not directed at children under 16 and we do not knowingly collect their data.
Contact
hi@quantumwaves.ai · [LEGAL ENTITY NAME], [POSTAL ADDRESS]