Privacy Policy

Last updated: 25 September 2026

Your privacy matters deeply to us. In the work we do, you may share some of the most personal parts of your story. This Privacy Policy explains, in clear language, what personal data we collect, why, how we protect it and what rights you have. It applies to the website www.emmylouseaman.com, our member area, our programs, 1:1 sessions, digital products, free resources and newsletter.

1. Who is responsible for your data (the controller)

EMPOWERED HEALING SRL

Tax ID (CUI): 52687030

Trade Register No.: J2025078235008

Registered office: Str. Nucului 6, Bl. V-101, Sc. 2, Et. 3, Ap. 41, Sector 3, 031502 Bucharest, Romania

Email for privacy requests: [email protected]

Phone: +40 732 859 896

(referred to as "Empowered Healing", "we", "us" or "our").

We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation – "GDPR"), Romanian Law no. 190/2018 implementing the GDPR, and Law no. 506/2004 on electronic communications privacy.

2. Key terms

Personal data – any information about an identified or identifiable person (for example your name, email, voice or image).
Special categories of data / health data – sensitive data that receives extra protection under Article 9 GDPR, including information about your physical or mental health.
Processing – anything done with personal data, such as collecting, storing, using, sharing or deleting it.
Processor – a company that processes personal data on our behalf and according to our instructions (for example our website platform or payment processor).

3. What personal data we collect

a) When you visit the Website: technical data such as IP address, browser type, device, pages visited and cookie identifiers. See our Cookie Policy for details.

b) When you download a free guide or subscribe to our newsletter: your first name and email address, and information about how you interact with our emails (e.g. opens and clicks).

c) When you buy a product or program: name, email, billing address, country, phone number (optional), purchase history and payment status. Card payments are handled directly by our payment processors (such as Stripe or PayPal); we never see or store your full card number or CVV/CVC code.

d) When you apply to the Mentorship or 1:1 work, book a discovery call or fill in an intake form: contact details, age range, country and time zone, and the answers you choose to give about your current challenges, your healing journey, your goals and, where relevant, your wellbeing and emotional or physical health.

e) During our work together: information you share in sessions, messages and group spaces, our session notes, your attendance and progress in the member area. This may include health data and other sensitive information (for example about trauma, abuse, relationships, emotional or physical health).

f) Live sessions and recordings: your name, image, voice and anything you say or write in the chat during live group calls that are recorded.

g) Testimonials: your name (or initials), photo, video and the words of your testimonial – only if you agree to give one.

h) When you contact us: the content of your emails or messages and your contact details.

We collect data mainly directly from you. We do not buy personal data, and we do not collect data from public sources for marketing.

4. How we protect sensitive (health) information

Because of the nature of trauma-informed work, we treat everything related to your health, emotional wellbeing and personal story as strictly confidential.

We process health data only on the basis of your explicit consent (Article 9(2)(a) GDPR), which we ask for in the application/intake form and in your service agreement. You can withdraw this consent at any time; however, without it we may not be able to provide certain services safely.
Access to this data is limited to Emmylou Seaman and, for the group program, the trained support coach working inside the program, who are bound by confidentiality.
We never use your health data for advertising, and we never sell it.
We may use fully anonymised examples from our work for teaching, articles or presentations, only in a way that makes it impossible to identify you.
Please only share in group spaces what you feel comfortable sharing with other participants.

5. Why we use your data and on what legal basis

Purpose	Legal basis (GDPR)
Delivering the programs, sessions and digital products you bought; creating and managing your account; customer support	Performance of a contract – Art. 6(1)(b)
Reviewing applications, discovery calls and pre-contract communication	Steps taken at your request before entering into a contract – Art. 6(1)(b)
Processing health and other sensitive information shared in applications, intake forms, sessions and messages	Your explicit consent – Art. 9(2)(a) together with Art. 6(1)(a)/(b)
Issuing invoices, keeping accounting records, answering authorities	Legal obligation – Art. 6(1)(c) (Romanian tax and accounting law)
Sending the free guide you requested and our newsletter, offers and program announcements	Your consent – Art. 6(1)(a); you can unsubscribe at any time
Recording live group calls so participants can watch replays	Performance of a contract – Art. 6(1)(b) (you can keep your camera off and change your display name)
Publishing testimonials	Your consent – Art. 6(1)(a)
Analytics and advertising cookies (e.g. understanding website traffic, measuring ads)	Your consent – Art. 6(1)(a) and Law 506/2004
Keeping the Website and Platform secure, preventing fraud, handling complaints and defending legal claims	Our legitimate interests – Art. 6(1)(f)

We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

6. Who we share your data with

We share personal data only when necessary and only with trusted providers who are bound by contract to protect it (data processing agreements):

Kajabi – website, member area, checkout, email marketing and community (Kajabi, LLC, USA);
Payment processors – such as Stripe and PayPal, to process payments securely;
Zoom – for live sessions and calls (Zoom Video Communications, Inc., USA);
Scheduling, form and messaging tools we use to book calls, collect applications and provide messaging support;
Our accountant and invoicing software provider, for tax and accounting purposes;
Analytics and advertising providers (for example Google or Meta), only if you accept the related cookies;
Our support coach and collaborators working inside the programs, under confidentiality obligations;
Public authorities, when we are legally required to do so.

If the company undergoes a reorganisation, merger or transfer of business, your data may be transferred to the successor, who will be bound by this Policy.

We never sell or rent your personal data.

7. Transfers outside the European Economic Area

Some of our providers (for example Kajabi, Zoom, Stripe, Google or Meta) are based in, or can access data from, the United States or other countries outside the EEA. In these cases we rely on safeguards recognised by the GDPR, such as the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (for certified companies) and/or the Standard Contractual Clauses approved by the European Commission. You can contact us to receive more information about these safeguards.

8. How long we keep your data

Invoices and accounting documents: for the period required by Romanian accounting law (currently up to 10 years).
Contracts and client files (including session notes and intake forms): for the duration of our work together and up to 3 years after it ends (the general limitation period for legal claims), unless you ask us to delete sensitive notes earlier and we have no legal obligation to keep them.
Applications that did not result in enrolment: up to 12 months, so we can contact you about the next cohort if you wish, then deleted.
Newsletter data: until you unsubscribe or withdraw your consent.
Recordings of live group calls: for as long as the program remains available to participants.
Testimonials: until you withdraw your consent.
Cookies: for the periods described in our Cookie Policy.

When these periods end, we delete or fully anonymise your data.

9. Your rights

Under the GDPR you have the right to:

Access – find out whether we process your data and receive a copy;
Rectification – correct inaccurate or incomplete data;
Erasure ("right to be forgotten") – ask us to delete your data, unless we are legally required to keep it;
Restriction – ask us to limit the processing of your data in certain cases;
Data portability – receive your data in a structured, commonly used format or have it sent to another controller;
Object – object to processing based on our legitimate interests, and to direct marketing at any time;
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
Not be subject to a decision based solely on automated processing;
Lodge a complaint with the supervisory authority (see section 13) or go to court.

10. How to exercise your rights

Send your request by email to [email protected]. We may ask you for information to confirm your identity. We will reply within one month of receiving your request. This period may be extended by two further months where necessary, taking into account the complexity and number of requests; in that case we will inform you within the first month and explain why. Exercising your rights is free of charge, except in cases of manifestly unfounded or excessive requests.

To unsubscribe from emails, you can simply click the "unsubscribe" link at the bottom of any email.

11. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, alteration or disclosure, including encrypted (SSL/HTTPS) connections, secure platforms, restricted access and confidentiality obligations. No transmission over the internet is 100% secure, so please keep your passwords safe and do not share your login with anyone. If a personal data breach occurs that is likely to put your rights at risk, we will notify the supervisory authority and, where required, you, as provided by the GDPR.

12. Group spaces, community and social media

Information you share in group calls, group chats, community areas or comment sections can be seen by other participants. Please share only what you feel comfortable sharing. All participants agree to keep what is shared in the group confidential (see our Terms and Conditions).
If you want something you posted to be removed, contact us and we will do our best to remove it.
When you interact with our social media pages (for example Instagram, Facebook, YouTube or LinkedIn), the social network also processes your data under its own privacy policy. For some activities (such as page statistics) we may be joint controllers with the platform.

13. Supervisory authority

If you believe your data has been processed unlawfully, you can complain to the Romanian data protection authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest, Romania

Website: www.dataprotection.ro

If you live in another EU country, you may also contact the data protection authority in your country. We would appreciate the chance to address your concern first, so please feel free to contact us beforehand.

14. Children

Our Website and services are intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

15. Cookies

We use cookies and similar technologies. Non-essential cookies are used only with your consent. Details are in our Cookie Policy.

16. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always published on this page, with the date of the last update. If we make significant changes, we will notify you on the Website or by email.

17. Contact

For any question about this Policy or your personal data:

EMPOWERED HEALING SRL – Str. Nucului 6, Bl. V-101, Sc. 2, Et. 3, Ap. 41, Sector 3, 031502 Bucharest, Romania

Email: [email protected]