Privacy Policy
This Privacy Policy explains how [LEGAL BUSINESS NAME], trading as ELHASSEN.C / Business Healing (“we”, “us”, “our”), collects, uses, stores and shares personal information through www.elhassenchelghoum.org. Effective date: 4 August 2026.
Last updated:
1. Who is responsible for your information
For information collected directly through our website and services, the data controller is:
- Legal name: [LEGAL BUSINESS NAME]
- Business address: [FULL BUSINESS ADDRESS]
- Email: contact@elhassenchelghoum.org
When a third-party provider acts as an independent controller or Merchant of Record, that provider is responsible for the personal information it processes under its own privacy policy.
2. Information we may collect
Identity and contact information: full name, email address, telephone or WhatsApp number, country or general location, business name and professional role.
Booking and service information: appointment date and time, programme or service selected, communications concerning your booking, attendance and rescheduling records, and information you choose to provide in assessments, questionnaires or intake forms.
Purchase information: product or service purchased, transaction date and amount, currency, order or transaction number, payment status and payment-provider identifiers. We do not intentionally store full payment-card numbers or card security codes; payment information is collected and processed by providers such as Stripe, PayPal or Lemon Squeezy.
Technical and usage information: IP address, browser and device information, operating system, referring page, pages viewed and time spent, cookie and analytics identifiers, approximate location derived from an IP address, and website errors and performance information.
Communications: messages sent through contact forms, email, WhatsApp, social media and customer support.
3. Sensitive personal information
Business Healing sessions and assessments may involve personal, emotional, spiritual, behavioural or wellbeing-related information. Please do not submit medical records or information that is unnecessary for the requested service.
Where sensitive information is voluntarily provided, we use it only as reasonably necessary to provide the requested service, protect participants or comply with law. Where required, we will rely on your explicit consent. Sessions are not recorded unless you have given clear prior consent.
4. How we use personal information
- Process registrations, purchases and bookings.
- Deliver digital products and services.
- Send appointment confirmations and access instructions.
- Provide customer support and respond to enquiries.
- Personalise educational assessment results.
- Maintain records of purchases and participation.
- Prevent fraud and protect website security.
- Improve website performance and user experience.
- Send marketing communications where permitted and measure their performance.
- Meet accounting, tax, regulatory and legal obligations.
- Establish, exercise or defend legal claims.
We do not sell or rent personal information.
5. Legal bases for processing
- It is necessary to perform a contract with you.
- You have provided consent.
- We have a legitimate interest in operating and improving our business.
- We must comply with a legal obligation.
- Processing is necessary to protect legal rights or prevent fraud.
You may withdraw consent at any time. Withdrawal does not make earlier lawful processing invalid.
6. Assessments and automated results
Some online assessments automatically calculate a score or generate an educational pattern description based on your answers. These results:
- Are intended for awareness, reflection and personal development.
- Are not medical or psychological diagnoses.
- Are not used to make legal, employment, credit, insurance or similarly significant decisions about you.
- Should not replace professional advice.
7. Payment providers
Payments may be processed by Stripe, PayPal, Lemon Squeezy, or another provider displayed at checkout.
These providers may collect payment, billing, fraud-prevention, tax and identity-verification information. Where Lemon Squeezy is identified as the Merchant of Record, it may independently process customer information to manage payments, subscriptions, refunds, taxes, fraud prevention and transaction compliance. Each provider processes information according to its own privacy notice and legal obligations.
8. Other third-party services
- Calendly or another booking platform.
- Zoom or another video-conferencing platform.
- Google Analytics.
- Meta/Facebook or Instagram advertising tools.
- Email-delivery and marketing platforms.
- Website hosting and security providers.
- Cloud-storage and course-delivery platforms.
- WhatsApp for communications.
- Professional advisers where necessary.
These parties receive only the information reasonably necessary for their role. Some act on our instructions, while others may operate as independent controllers.
9. Cookies and tracking technologies
Our website may use:
- Essential cookies required for security and functionality.
- Preference cookies.
- Analytics cookies.
- Advertising and retargeting technologies, including Meta Pixel where enabled.
Where required, non-essential cookies will not be activated until you provide consent through the website’s cookie banner. You may change your cookie choices through the available preference settings or browser controls. Disabling certain cookies may affect website functionality.
10. Marketing communications
We may send marketing emails when you have expressly subscribed, or where marketing is otherwise permitted by applicable law. You can unsubscribe at any time using the unsubscribe link in an email or by contacting contact@elhassenchelghoum.org.
Service messages concerning an active order, booking, security issue or programme are not marketing messages and may still be sent when necessary.
11. Disclosure of information
- To providers supporting our website and services.
- To payment and booking providers.
- To professional advisers.
- When required by law, court order or lawful authority.
- To protect the rights, safety and security of users or others.
- In connection with a legitimate sale or restructuring of the business, subject to appropriate safeguards.
We do not share personal information with unrelated third parties for their independent direct marketing.
12. International data transfers
Our providers may process information in countries other than your own. Those countries may have different data-protection laws. Where required, we use appropriate safeguards, contractual protections or legally recognised transfer mechanisms.
13. Data retention
We retain information only for as long as reasonably necessary to:
- Deliver the requested services.
- Maintain transaction and accounting records.
- Resolve complaints or disputes.
- Meet tax and legal obligations.
- Protect our legitimate legal interests.
Different categories of information may have different retention periods. Information that is no longer required will be deleted, anonymised or securely archived where appropriate.
14. Data security
We use reasonable technical and organisational measures to protect information from unauthorised access, loss, alteration, disclosure or misuse. However, no internet transmission or storage system can be guaranteed to be completely secure. You are responsible for keeping any account password or access link confidential.
15. Confidentiality of sessions
We treat information shared during private sessions as confidential, subject to limited exceptions such as:
- Your express consent.
- A legal or court requirement.
- A serious and imminent safety concern.
- The need to consult a professional adviser who is subject to confidentiality.
Confidentiality commitments may also be described in a separate service agreement.
16. Your privacy rights
Depending on your location, you may have the right to:
- Request access to your information.
- Correct inaccurate or incomplete information.
- Request deletion.
- Restrict certain processing.
- Object to certain processing.
- Withdraw consent.
- Request data portability.
- Opt out of direct marketing.
- Complain to an appropriate data-protection authority.
These rights may be subject to legal exceptions. We may need to verify your identity before completing a request.
17. Children
The website and paid services are intended for people aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has submitted information without appropriate authorisation, contact us so we can investigate and delete it where required.
18. External links
Our website may link to third-party websites. We are not responsible for their privacy practices, security or content. Review the privacy policy of each third-party service before providing information.
19. Changes to this Policy
We may update this Privacy Policy to reflect changes in our services, providers or legal obligations. The revised version will be published on this page with a new “Last updated” date. Where a change materially affects your rights, we will provide additional notice where required.
20. Contact
For privacy questions or requests:
- Email: contact@elhassenchelghoum.org
- WhatsApp: +213 541 143 798
- Website: https://www.elhassenchelghoum.org/