Privacy Policy

Your data is yours. This document explains, in plain language, what information we collect when you visit our sites or use our services, why we collect it, who we share it with, how long we keep it, and what your rights are. No hidden fine print.

1. Who is responsible for your data

The sites vivendopelocoracao.com, livingbytheheart.com, frommyheart2yourheart.com and domeucoracaoparaoseucoracao.com are operated by:

We are the controller of your data under the GDPR. For any privacy question, or to exercise a right described in section 9, write to info@livingbytheheart.com.

2. Who this document applies to

To anyone who visits the sites, anyone who subscribes to the newsletter or to a free resource, and anyone who buys a service or product from us. Where a specific case has a different rule (such as recordings), the document says so explicitly.

3. What data we collect

Data you give us directly:

• Name
• Email
• Phone (when you join the Academy or book a session)
• Billing address, when needed to issue an invoice

Data generated when you use the site:

• Browsing and device data (IP address, browser type, pages visited), through cookies and analytics tools. See section 8.

Data tied to specific services:

• Quiz and free resources: your answers in a questionnaire (for example, the Manifestation Blocks quiz) are linked to your record in our email tool. The result PDF is generated in your own browser and is not kept by us.
• Individual sessions (Soul Reading, the Transformation Session, the Journey to the Superconscious / QHHT): when a session is recorded, the recording is temporarily in our keeping and is deleted as soon as you confirm receipt. We do not keep written notes about the content of the session.
• Academy and courses: your registration data and, if you choose to take part in the group, the number you use on WhatsApp. Live gatherings are recorded so that participants have access to the replay, including the gatherings you cannot attend live. If you prefer not to appear, simply keep your camera and microphone off. What you share live, with camera or microphone on, may be visible to other participants in the replay.

Payment data:

Payments are processed by Stripe, Hotmart, or PayPal. Your card or account details are handled directly by these platforms. We do not receive or store your card number.

Data of a sensitive nature:

By the very nature of our work, the recording of an individual session may reveal content of an intimate, spiritual, or wellbeing-related character. We treat this kind of data as a special category (GDPR art. 9), and it is only processed with your explicit consent, given before the session. The detailed rules are in the specific QHHT Consent Form, which you sign separately. The same care applies to any sensitive content you choose to share live in a group gathering: it is your decision to appear or speak, with camera or microphone on, that authorises that part of the recording.

4. Why we collect it, and on what legal basis

You can withdraw your consent at any time. Withdrawing consent does not affect what was already processed lawfully before the withdrawal.

5. Who we share your data with

We do not sell your data. We share it only with the providers that make the service possible, and only as far as necessary:

• FlexiFunnels: hosting and building of the sites.
• Namecheap: file storage for distribution (such as PDFs) and, where applicable, site hosting.
• Acumbamail: email sending and list management (both the Portuguese and the English markets, on separate lists).
• Formly: forms and quizzes.
• Stripe: payment processing in euros.
• Hotmart: payment processing and delivery in Brazilian reais.
• PayPal: payment processing.
• Zoom: video calls for individual sessions and for the live gatherings of the Academy and courses.
• Google (Analytics and YouTube): site usage analytics and replay hosting.
• GetShow and dadan.io: video and replay hosting.
• Meta (WhatsApp): the Academy group, when you choose to take part.

Each of these providers processes your data on our behalf and according to our instructions, under their own terms and privacy policies. We may also disclose data when required by law or by a competent authority.

6. International transfer

Some of these providers (among them Google and YouTube, Meta, Zoom, Stripe, PayPal, Namecheap, GetShow, and the video-hosting platform) may process data on servers outside the European Union, including in the United States. When that happens, we require adequate safeguards to be in place, such as the standard contractual clauses recognised by European law, so that your data stays protected wherever it is processed.

7. How long we keep it

• Payment, invoice, and accounting records: kept for 7 years, in line with the Dutch legal obligation for tax retention (bewaarplicht). This period prevails even if you request deletion earlier, and it ends at the close of the legal term.
• Newsletter and quiz data: kept while you are subscribed. If you unsubscribe, we remove this data within 30 days.
• Recordings of individual sessions: deleted as soon as you confirm receipt, or earlier at your request.
• Recordings of Academy and course gatherings: kept for an indefinite period, to maintain the replay library available to participants over time. You can request the removal of a recording in which you appear, and we remove it.
• Account and Academy participation data: kept while your participation is active.

Apart from these cases, we keep data only for as long as necessary for the purposes in section 4.

8. Cookies

We use cookies in three categories:

• Essential: they make the site work (session, security). Always active.
• Analytics: they help us understand how the site is used, through Google Analytics. Activated only with your consent.
• Marketing and advertising: we may use them to measure and target communications. Activated only with your consent.

When you arrive at the site, a banner lets you accept or decline the non-essential categories. You can change your choice at any time through the same banner or your browser settings.

9. Your rights

You have the right to:

• Know whether we process your data and access a copy of it
• Correct incomplete or out-of-date data
• Request the deletion of your data, subject to the legal retention in section 7
• Request the portability of your data to another provider
• Object to a processing activity or request its restriction
• Withdraw consent at any time
• Know who we share your data with

To exercise any of these rights, write to info@livingbytheheart.com. We respond within the period set by law.

If you believe we have not handled your request properly, you can lodge a complaint with the competent authority: in the Netherlands, the Autoriteit Persoonsgegevens (AP); if you reside in another country, the data protection authority of your country of residence.

10. Security

We take reasonable measures to protect your data against unauthorised access, loss, or misuse. No transmission over the internet is entirely free of risk, but we work to keep your data protected and treat any incident with the seriousness it requires.

11. Minimum age

Our services are intended for people aged 18 or over. We do not knowingly collect data from anyone under 18.

12. Changes to this policy

We may update this Privacy Policy when necessary. When that happens, we change the date at the top of the document. Significant changes will be communicated through appropriate means.

13. How to reach us