Privacy Policy

Soraya Luna (the “Company”) by this Privacy Policy (the “Privacy Policy”) details how it will protect the security and privacy of personal information or data collected from you. The Privacy Policy aims to enable you to understand what information we gather, how we use it and what we do to protect it. Our business complies with applicable laws on data privacy protection and security, with this policy applying to our own website, www.sorayaesoterics.com, and any data the Company may collect across our associated sites and channels.

It addresses information provided to us when:
 visiting our website (IP address, location)
 consulting in connection with our services or services provided by our subsidiaries, partners, associates and affiliates
 subscribing to our newsletter, memberships, email updates or other marketing activities

Regarding information we receive from other sources; we work closely with third parties (sub-contractors in technical & payment services, accountancy and legal companies, credit reference agencies) and may receive information about you from them. We may also receive information about you from out social media channels we operate or other services we provide.

Given the nature of the services we offer, it is extremely unlikely that we will be required to collect any sensitive data about you. We also have no intention to collect any sensitive data about you via our website, including racial or ethnic origin, political opinions, religious/philosophical beliefs, genetic or biometric data, health/mental wellbeing or sexual orientation. If we do require to process such sensitive data to provide services to you, we will notify you in advance and will request your express consent in writing to process such sensitive data.

USE OF PERSONAL INFORMATION
We will only process your data in line with data protection legislation. For residents of the UK & EU, our bases for lawful processing under the GDPR are:

 we have your consent
In specific situations, we will collect and process your information with your consent. We will always make it clear to you what you are consenting to and what information is necessary for which services; for example:

 when you tick a box to subscribe to email newsletters or memberships

 it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such contract
In certain circumstances, we need your information to carry out our contractual obligations. If you commission or request a quote for products or services, we will use your personal data to compile the quote and fulfil or commence the contract.

 it is necessary for our compliance with a legal obligation or it is in the public interest
If we are required to by law, we may need to collect and process your information. By law we are required to keep accounting records for six years after end of the year in which the last transaction occurred. This means that we will be required to keep some basic client details for that purpose even although our relationship with you may be at an end. Also, we will pass on the details of people involved in fraud or other criminal activity affecting the Company to the relevant authorities

 it is necessary to protect your vital interests;

We will only retain your personal information for as long as is necessary in line with the purposes for which it was originally requested or collected or where we are required to do so for some legal or reporting purpose.

SHARING PERSONAL INFORMATION WITH THIRD PARTIES
We do not share your personal information with our partners, affiliates, suppliers and other third-party providers, whether or not they perform services for the Company. We do not sell, trade or rent your personal information to third parties. All third parties whose services we use, like companies processing payments, are required to protect your personal data, treat it confidentially and process it in accordance with the law.

We fully cooperate with government and law enforcement officials and comply with the law. We will disclose any information about you to government or law enforcement officials as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal processes, to protect our property and rights or to protect you, the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical. If we are required to provide your personal information to third parties as part of a legal process, we will take reasonable steps to notify you.

USE OF NON-PERSONAL INFORMATION
We use non-personal information to help us improve our services and to customise the experience of our users. In specific situations, we require your information to enable us to undertake our legitimate interests which you might reasonably expect as part of our operations. This will not materially impact your rights, freedoms or interests. We may also utilise non-personal information in order to analyse trends and patterns of use of our website. This Privacy Policy does not limit in any way our use or disclosure of non-personal information. We reserve the right to use and disclose such non-personal information to our partners, associates, affiliates, suppliers, advertisers and other third parties at our sole discretion.

YOUR CONSENT
By using our websites/services, you indicate that you are 18 years of age and, by accessing or making use of our services, you accept our Privacy Policy, and agree to our terms & conditions, collections, use of your information to deliver our services and process payments, as described in this Privacy Policy. Additionally, by using our services across our website and affiliated social media channels, you accept the policies and practices described in this Privacy Policy. On every instance of access to our company website, or use of our services, and any time you provide us with information voluntarily, you agree to our collection, use and disclosure of the information that you provide, and you are consenting to receive emails regarding our services, as described in this Privacy Policy. Whether or not you register an account with us, this Privacy Policy applies to all users of the company website, company services & company social media channels.

TRANSFER OF PERSONAL DATA ABROAD
If you use our services from a country other than the country where our servers are located (UK/EU), your communications with us may result in transferring your personal data across international borders. Also, when you call us, we provide you with support from our UK location, outside your country of origin. In these cases, your personal data is handled according to this Privacy Policy and Scots law.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your information, we cannot guarantee the security of your information transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features in line with the standards set out by GDPR to try to prevent unauthorised access.

Where possible the information you provide us with will be held within the European Economic Area (“EEA”) or within the UK.

STORAGE & PROTECTION
We do not store personal information for longer than the services provided. After that, any information in relation to you is deleted. If we must store any data, we follow generally accepted standards to store and protect the personal data we collect, both during transmission and once received and stored, including utilisation of encryption where appropriate. We have robust procedures for dealing with breaches including incident reporting and notifying the national supervisory or data protection authorities, and where appropriate, of any breaches, the consequences of the same and the remedial action is taken. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such precautions. By using our services, you acknowledge that you understand and agree to assume these risks.

MARKETING & MAINTENANCE COMMUNICATION
We don’t provide any marketing or maintenance communication. Do not subscribe you to any mailing lists.

USE OF COOKIES

We don’t use cookies and/or similar technologies to analyse customer behaviour, administer the website, track users’ movements, and to collect information about users.

What are cookies?
A cookie is a tiny text file stored on your computer. Cookies store information that is used to help make sites work. Only we can access the cookies created by our website. You can control your cookies at the browser level. Choosing to disable cookies may hinder your use of certain functions.

We Use Cookies for The Following Purposes:

• Necessary cookies – these cookies are required for you to be able to use some important features on our website, such as logging in. These cookies don’t collect any personal information.
• Functionality cookies – these cookies provide functionality that makes using our service more convenient and makes providing more personalised features possible. For example, they might remember your name and e-mail in comment forms, so you don’t have to re-enter this information next time when commenting.
• Analytics cookies – these cookies are used to track the use and performance of our website and services

CONTACT
Questions, comments and requests regarding this Privacy Policy are welcome and should be addressed to the Compliance Officer at sorayaesoterics@gmail.com , email subject: Privacy Policy

Changes will be incorporated on this page. The last update was in September 2026. Please review it periodically.