Last update: 11 August 2026
Metamorphosis Wellness respects your privacy and is committed to handling personal information lawfully, fairly and transparently.
This Privacy Policy explains how personal data may be collected, used, stored and shared when you visit this website, make an enquiry, subscribe to communications, download a resource, book an orientation conversation or engage with Metamorphosis Wellness services.
Data Controller
Metamorphosis Wellness is operated by Madalina Nicolescu, based in Romania, who acts as the data controller for personal information processed through this website and in connection with Metamorphosis Wellness services.
For privacy enquiries, please contact:
contact@metamorphosiswellness.org
Personal Data That May Be Collected
Depending on how you interact with Metamorphosis Wellness, the following information may be collected:
- your name and contact details;
- information provided through contact or enquiry forms;
- booking and appointment information;
- billing and transaction information;
- correspondence and administrative communications;
- information voluntarily provided in connection with 1:1 Applied Practice;
- session-related notes, where reasonably necessary for service delivery, continuity or administration;
- mailing-list preferences and subscription information;
- information provided when downloading resources or registering for educational material;
- technical information generated through use of the website, including information necessary for website security, essential cookies or related functionality.
Only personal data reasonably necessary for a defined purpose should be collected and processed, in accordance with the GDPR principles of purpose limitation and data minimisation.
Sensitive and Special-Category Personal Data
Because 1:1 Applied Practice may involve discussion of health, emotional wellbeing, trauma, relationships, abuse or other personal circumstances, some information voluntarily shared may constitute special-category personal data under the General Data Protection Regulation (GDPR).
Special-category data can include information concerning health and certain other sensitive characteristics and receives additional protection under GDPR.
Where such information is processed, Metamorphosis Wellness will identify an appropriate lawful basis under Article 6 GDPR and, where required, an additional condition under Article 9 GDPR.
Where explicit consent is relied upon, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
How Personal Data May Be Used
Personal data may be processed for purposes including:
- responding to enquiries;
- arranging orientation conversations and appointments;
- providing and administering 1:1 Applied Practice;
- processing payments and maintaining appropriate transaction records;
- communicating with current or prospective clients;
- providing requested educational resources;
- managing newsletter or mailing-list subscriptions;
- maintaining appropriate service and administrative records;
- complying with legal, accounting, tax or regulatory requirements;
- protecting the security and integrity of the website and business systems;
- establishing, exercising or defending legal claims where necessary.
Personal data will not be used for purposes that are incompatible with those for which it was collected unless there is an appropriate lawful basis for doing so.
Legal Bases for Processing
The legal basis used will depend on the purpose for which information is being processed.
These may include:
Performance of a Contract
Where processing is necessary to take steps at your request before entering into an agreement or to provide services you have requested.
This may include booking administration, client communication and information necessary to deliver paid services.
Legal Obligation
Where information must be processed or retained in order to comply with applicable legal, accounting, tax or regulatory requirements.
Consent
Where you have freely provided consent for a particular form of processing, for example certain optional communications or other processing where consent is the appropriate legal basis.
Consent may be withdrawn at any time.
Legitimate Interests
Where processing is reasonably necessary for legitimate business purposes such as administration, security, service communication or protecting legal rights, provided those interests do not override your rights and freedoms.
Special-Category Data
Where special-category personal data are processed, an appropriate condition under Article 9 GDPR will also apply.
Payments
Payments may be processed through third-party payment providers such as Stripe.
Metamorphosis Wellness does not directly store full payment-card details.
Payment providers process payment information according to their own privacy and security arrangements and may act as independent controllers or processors depending on the nature of the transaction.
Appointment Scheduling
Appointment scheduling may be managed through third-party services such as Calendly.
When you use an external booking service, personal information such as your name, email address, appointment preferences and other information you choose to provide may be processed by that provider in accordance with its own privacy terms and applicable data-protection arrangements.
Email and Communications
Email communications may be managed through professional services such as Google Workspace.
Information contained within emails or correspondence may therefore be processed using those systems.
Clients and prospective clients are encouraged not to send highly sensitive information by ordinary email unless reasonably necessary.
Service Providers and Data Recipients
Metamorphosis Wellness may use trusted third-party service providers for activities including:
- website hosting and administration;
- email;
- appointment scheduling;
- payment processing;
- secure file or record storage;
- newsletter or mailing-list management;
- accounting or professional administration.
Personal data will only be shared where reasonably necessary for the relevant purpose or where disclosure is required or permitted by law.
Privacy information must identify recipients or categories of recipients and whether information may be transferred outside the EU.
International Data Transfers
Some service providers used by Metamorphosis Wellness may process or store personal data outside Romania or the European Economic Area.
Where personal data are transferred outside the European Economic Area, appropriate safeguards will be relied upon where required by applicable data-protection law.
These may include recognised adequacy arrangements, contractual safeguards or other lawful mechanisms available under GDPR.
Where Data Is Stored
Personal information may be stored using password-protected and access-controlled digital systems and reputable third-party service providers.
Reasonable technical and organisational measures are used to protect personal information against unauthorised access, alteration, loss or disclosure.
No method of electronic storage or transmission can be guaranteed to be completely secure.
Metamorphosis Wellness does not ordinarily maintain paper client notes unless there is a specific operational or legal reason to do so.
Session Notes
Where notes are maintained in connection with 1:1 Applied Practice, they will be limited to information reasonably necessary for continuity, administration, professional boundaries or safety.
Notes are not intended to constitute medical, psychological or psychiatric records.
They will be stored securely and retained only for as long as there is a legitimate and lawful reason to retain them.
How Long Personal Data Is Kept
Personal information will be retained only for as long as reasonably necessary for the purpose for which it was collected, including where retention is required for legal, accounting, tax, insurance, dispute-resolution or record-keeping purposes.
Different types of information may therefore be kept for different periods.
Where it is not possible or appropriate to state a fixed period, retention will be determined according to factors including:
- the reason the information was collected;
- whether an active client or contractual relationship remains;
- applicable legal and accounting requirements;
- professional or insurance-related record requirements;
- potential legal claims;
- the sensitivity of the information;
- whether continued retention remains necessary and proportionate.
When personal information is no longer required, it will be securely deleted or anonymised where appropriate.
GDPR requires organisations to tell individuals either how long their data will be stored or the criteria used to determine that period.
Your Data-Protection Rights
Depending on the circumstances and the legal basis for processing, you may have rights including:
- the right to be informed about how your personal data are processed;
- the right to request access to personal data held about you;
- the right to request correction of inaccurate or incomplete data;
- the right to request erasure of personal data in certain circumstances;
- the right to request restriction of processing;
- the right to receive certain personal data in a portable format where applicable;
- the right to object to certain forms of processing;
- the right to withdraw consent where processing is based on consent;
- rights relating to certain forms of automated decision-making or profiling.
These rights are not absolute and may depend on the circumstances and legal basis for processing.
To exercise a data-protection right, contact:
contact@metamorphosiswellness.org
Reasonable steps may be taken to verify your identity before responding to a request.
Right to Complain
If you are concerned about how your personal information has been handled, you are encouraged to contact Metamorphosis Wellness first so that the matter can be reviewed.
You also have the right to lodge a complaint with a competent data-protection supervisory authority.
Because Metamorphosis Wellness is based in Romania, this may include the Romanian data-protection authority, Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), where appropriate.
GDPR privacy information should inform individuals of their right to complain to a data-protection authority.
Confidentiality and Disclosure
Information shared in connection with private services is treated as confidential and handled in accordance with this Privacy Policy and applicable law.
Personal information may be disclosed where:
- you have authorised disclosure;
- disclosure is required by applicable law;
- it is necessary to establish, exercise or defend legal claims;
- there is another lawful basis for disclosure;
- information indicates a serious and immediate risk to life or safety and disclosure is lawful and proportionate in the circumstances.
Because Metamorphosis Wellness works internationally, applicable legal requirements may depend on the jurisdiction involved and the specific circumstances.
Mailing Lists and Marketing Communications
If you subscribe to email updates or other optional communications, your contact information may be used to send those communications.
You may unsubscribe at any time using the unsubscribe option provided in the communication or by contacting Metamorphosis Wellness.
Withdrawing from marketing communications does not affect administrative or service-related communications that are reasonably necessary in connection with an existing enquiry, booking or client relationship.
Cookies and Website Technologies
This website may use essential cookies or similar technologies necessary for security, functionality and basic operation.
If analytics, marketing or other non-essential cookies are used, consent will be requested where required by applicable law.
Where a separate Cookie Policy or cookie-consent tool is provided, further information will be available there.
Third-Party Links
The website may contain links to external websites or services.
Metamorphosis Wellness is not responsible for the privacy practices or content of third-party websites. Visitors should review the privacy information provided by those services before providing personal information.
Children
Metamorphosis Wellness services are intended for adults unless explicitly stated otherwise.
Personal information should not knowingly be submitted on behalf of a child for 1:1 Applied Practice without prior discussion and an appropriate lawful basis.
If Metamorphosis Wellness becomes aware that personal data have been collected inappropriately from a child, reasonable steps will be taken to address the situation.
Automated Decision-Making
Metamorphosis Wellness does not currently use personal data to make solely automated decisions that produce legal or similarly significant effects on individuals.
If that changes, this Privacy Policy will be updated as required.
Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in services, technology, legal requirements or data-processing practices.
The current version will be published on this website with the date of the most recent update.
Contact
For questions about this Privacy Policy or the handling of personal information, please contact:
Madalina Nicolescu
Metamorphosis Wellness
Romania
contact@metamorphosiswellness.org
Metamorphosis Wellness 