Policies

Privacy Policy

Effective date: 17 October 2026

Receive Reiki is operated by me, Norbert Seres, a Florida sole proprietor. ReceiveReiki.com is the website where Reiki sessions, energy cleansing, spiritual clearing and home cleansing with me are explained, scheduled, and booked.

Questions about this policy, or about your own information, can be sent to privacy@receivereiki.com. Messages to hello@receivereiki.com reach me as well, and either address is fine.

1. What is collected, and why

Only what a booking actually needs. Each item below is collected for a stated reason, and nothing on this list is used for advertising.

• Your name. So I know who the session is for, and so your confirmation email can address you properly.
• Your email address. To send your booking confirmation, preparation instructions, the calendar file, and any message about a change to your session. It is also the address used to verify a request about your own data.
• Your country. To confirm that online booking is available to you, and to keep correct records for tax and payment purposes.
• Your timezone. So every time on the site is shown in your own local time. It is detected automatically and you can change it if your device detects the timezone incorrectly.
• An optional private note. A free-text field you may fill in or leave blank. It is never required, and Section 3 explains exactly how it is handled.
• My recommendation after a session. Which service I recommended next and roughly when, recorded on the booking so the completion email I send you can say so. It is guidance only, and nothing follows from it unless you book.
• Your policy acceptances, and when you gave them. A record of which policies you accepted and the date and time you accepted them, so both you and I have the same account of what was agreed.
• Your booking. The service you chose, its start and end time, and its status — booked, rescheduled, cancelled, or completed.
• Payment identifiers from Stripe. Reference identifiers, the amount, the currency, and whether payment succeeded or failed.

Card numbers never reach this site. Payment details are entered on Stripe's own secure payment page. I never see, receive, or store your card number, and neither does this website.

In plain terms, the grounds for holding this information are: performing the booking you asked for; meeting legal obligations such as keeping financial records; a legitimate interest in keeping the site secure and understanding aggregate traffic; and, for the optional private note, your own choice to provide it.

2. What is deliberately not collected

Some things are left out on purpose, because a booking does not need them:

• No date of birth.
• No postal address is collected for a Reiki session, an energy cleansing, a spiritual clearing or an in-person session. The address of a home or space is collected for a Home & Space Energy Cleansing, because it is where the clearing is directed, and for an animal booking the private location where the animal will be during the session is collected. For an in-person service in the Pensacola area, the service area, street address and ZIP code are collected, because that is where I am coming to. All of these are handled exactly as the optional private note in Section 3: stored with the booking, read only by me, and never placed in a calendar entry, an email, an export or any analytics.
• No phone number, except an optional number you may give for an in-person service so that I can reach you about that appointment.
• No diagnoses, medical records, medication lists, or detailed treatment information.

Detailed medical or veterinary information is not requested. The optional note may include a general intention concerning energy, health, emotions, rest, clarity, comfort, adjustment, or overall well-being. Please do not include diagnoses, medical or veterinary records, medication lists, or detailed treatment information.

The optional note is not a medical intake form. It may include a general health or well-being intention, but it does not request clinical details or a health assessment.

The animal intention field is not a veterinary intake form. It may include a general intention concerning the animal’s energy, calm, comfort, adjustment, emotions, or overall well-being, but it does not request veterinary records, diagnoses, medication lists, or detailed treatment information.

You are welcome to name a general intention for your well-being — your energy, your rest, your clarity, or a situation in your life — and that may include a general health or well-being intention. What is not requested, and should not be sent, is clinical detail: diagnoses, medical records, medication lists, or descriptions of treatment you are receiving.

If clinical detail is sent anyway — in the note, or by email — it is not needed for the service, and you may ask for it to be deleted at any time using the contact address above.

Receive Reiki is a spiritual-wellness service, not medical or psychological care, and no health assessment of any kind forms part of a booking.

3. How the optional private note is handled

The note is the most personal thing you might choose to write, so it is handled more carefully than anything else on this site.

Who can see it

Only me. It is visible to me inside an access-controlled admin area that requires authentication, and to no one else.

Where it never goes

The note is never placed in any of the following:

• Analytics of any kind.
• Calendar entries, including any calendar invitation or calendar file.
• URLs, links, or query strings.
• Browser storage on your device.
• Email subject lines.
• Payment metadata sent to Stripe.
• Exported reports of any kind.

How long it is kept

The optional note is deleted after 12 months. You may ask for it to be deleted sooner, and it will be, without affecting your booking record.

4. Animal booking information

Booking a session for an animal collects a little more than a session for yourself, because I have to know which animal the session is for and where it will be.

What is collected.

• The animal’s name.
• The type of animal — dog, cat, horse, or another type you describe.
• A breed or short identifying description.
• The animal’s age, if you choose to give it. This is optional.
• The location where the animal will be during the scheduled session.
• An optional general intention for the session.

Why it is collected. To prepare and administer the session you booked, and for no other purpose. It identifies which animal the session is for and where that animal is expected to be at the reserved time.

It is not veterinary intake. Detailed veterinary records are not requested and should not be sent. Please do not include diagnoses, medication lists, test results or treatment histories. I do not need them, and this is not a clinical service.

The animal’s location is private. It is a physical address where an animal can be found at a known time, so it is treated as private booking information. It is visible only to me, in the password-protected admin area. It is not published on any page, not sold, not used in advertising, not sent to Stripe, not written into any calendar file, and not included in exports.

What your confirmation email says. That the location you provided has been saved with the booking — not the address itself. Email is not a protected surface, and a confirmation gets forwarded, printed and left open on screens.

How long it is kept. As part of the booking record, under the same retention described in Section 8 below. There is no separate storage system and no special retention rule for animal information.

5. Service providers

A small number of established providers process information on my behalf so the site can run. Each one is listed here with what it actually does.

These providers act as processors: they handle information in order to deliver their part of the service, not for their own marketing. Each publishes its own privacy and data-processing documentation. No other company receives your information, and it is never sold or passed to a data broker. For referral partners, PayPal or Venmo also receives what is needed to send a referral reward, and a message a partner sends me is copied to my own Telegram account, as Section 13 explains.

6. Analytics

This site uses Umami, a privacy-first, cookieless analytics service, to count visits and understand which pages help people and which do not. It is self-hosted on this site's own domain, so Umami sends nothing about your visit to an advertising company.

What is recorded is deliberately small: the page you viewed, the website you arrived from — the site, not the address you came from, and never a search you typed — your approximate country, and the general kind of device and browser you are using. Anonymous counts of the steps of a booking are also recorded, such as opening the booking form, choosing a service, reaching the details form, and completing a booking, so that a booking that stops part-way through can be found and fixed. When a step fails, only the names of the form fields that failed are recorded, never what was typed into them.

• No cookies are set for analytics, and there is nothing to consent to because nothing is stored on your device.
• No cross-site tracking. You are not followed to or from other websites, and no profile of you is built.
• Umami is not advertising. Umami sends nothing to any advertising network, and nothing is sold.
• Analytics never receives what you type. Not your name, not your email address, not your postal address, not the optional private note, and nothing about an animal in your care.
• No payment or booking identifiers. Web addresses are recorded without their query strings, so the payment reference in the address of the confirmation page and the private link to manage your booking are both excluded.
• Do Not Track is respected. If your browser sends that signal, nothing about your visit is recorded at all.

Advertising measurement

Receive Reiki advertises on Google. To learn whether an advertisement led to a booking rather than only a visit, every page carries the Google Ads tag, and Google may set first-party advertising cookies such as _gcl_* to remember that you arrived from an ad. From the web address, only Google's own click identifiers are kept; every other part of the query is removed before Google sees it.

A booking is reported only after the booking system has verified the payment. At that point Google receives three things: the amount paid, the currency, and a booking transaction reference that does not contain your name or contact details. Your name, email address, phone number, the private note, who or which animal the session is for, the service, the appointment time and every Stripe identifier are not sent, and neither is any tip as a separate figure. Opening the confirmation page is not itself treated as a booking, and the payment reference in that page's web address is never sent to Google.

Enhanced conversions, which would match a booking to a Google account using your email address, are not enabled. In the European Economic Area, the United Kingdom and Switzerland, advertising and analytics storage and advertising personalization all default to denied, so advertising cookies are not set there, although Google may still receive limited cookieless signals. This service, and the advertising for it, are intended for the United States, and measurement operates normally for visitors there.

7. Cookies

No cookies are required for this site to work, and analytics sets none. The Google Ads cookies described above (_gcl_*) are first-party and measure only whether an advertisement led to a booking; they are not used to build a profile of you or to follow you around other websites.

Cloudflare, which provides hosting and security, may set a security cookie to distinguish genuine visitors from automated traffic. That cookie exists to protect the site, and it is not used to build a profile of you.

If you arrive through a referral partner’s link, your browser’s local storage, not a cookie, remembers that partner’s referral code for up to 30 days, depending on your browser’s privacy settings, as Section 13 explains.

8. How long information is kept

9. Your rights

This policy is written to a broadly GDPR-shaped standard even though the operator is based in the United States, because the same standard is a reasonable one to hold regardless of where you live. You may ask to:

• Access the information held about you, and receive a copy of it.
• Correct anything that is wrong or out of date.
• Delete your information. Booking and payment records must be retained for the financial-record period described in Section 8, so deletion applies to everything outside that — including the optional private note, which is deleted on request.
• Object to or restrict a particular use of your information.
• Receive your information in a portable form that you can take elsewhere.
• Withdraw the optional note at any time, for any reason or none.

To make a request, email privacy@receivereiki.com from the email address used for your booking, which is how a request is verified. Requests are answered as quickly as reasonably possible, and normally within 30 days. There is no charge.

If you live in a jurisdiction with a data-protection authority, you have the right to complain to it. You are welcome to raise the matter directly first, but you are not obliged to.

No automated decision-making or profiling is carried out about you.

10. Children

Sessions are for adults aged 18 and over. This site is not directed at children, and information is not knowingly collected from anyone under 18. If you believe a child has provided information here, please write to privacy@receivereiki.com and it will be deleted.

11. International transfers

I am based in the United States, and the providers listed in Section 5 process information in the United States. If you are outside the United States, your information will be transferred to and processed there, where data-protection law may differ from the law of your own country.

Online booking is currently available only to customers in the United States. Human sessions must be booked by an adult aged 18 or over, and animal sessions must be booked by an adult owner or authorized caretaker.

12. Security

• The site is served over an encrypted connection, and information sent between your browser and the site is encrypted in transit.
• Payment is handled entirely by Stripe on its own secure page. Card numbers are never entered on this site, never transmitted through it, and never stored by it.
• Administrative access is restricted to me, protected by authentication, and access to booking records is logged.
• Only the information described in Sections 1 and 13 is collected, which is the most effective protection of all: what is not collected cannot be exposed.

No online service can promise perfect security. If an incident affects your information, you will be told, along with what happened and what to do about it.

13. The referral partner program

Some people are introduced to my work by a referral partner: someone who knows it and may receive a referral reward from me when a client they introduced books. This section explains what that means for you as a visitor or client, and what I keep about the partners themselves. Sections 1 to 3 describe what a booking needs; partners share more, as described below.

If you arrive through a referral link

A partner’s link carries a short referral code, such as SMITH-7K2Q. When you open one, your browser keeps that code in its own local storage, on your device, for up to 30 days from your first visit, depending on your browser’s privacy settings, so that it can be filled in for you if you book. A later link does not replace it, and it is removed after 30 days at the latest. It is not a cookie, and it holds only the code, when it was first stored and whether the code turned out to be valid. To check that, the code alone is sent to the booking system. It is never sent to analytics or to Google, and you can remove it at any time by clearing this site’s data in your browser.

If you book with a referral code

The booking form has an optional “Referral code” box. If your first paid booking with me is made with a valid code, whether it was filled in for you or you typed it yourself, your email address is linked to that partner. The link is permanent: a later code does not change it. It is used only to work out the partner’s referral rewards for your completed sessions, and it is kept with your booking records (Section 8).

The partner never sees your name, email address, postal address, note or booking details. For each referral they see only the service, the date, its status and the amount of their referral reward. A code does not change your price, and you are free to book without one or to clear the box before you pay.

If you are a referral partner

Partners apply and sign in through the partner portal at book.receivereiki.com/partners. For each partner I keep:

• Your application. Your name, email address, optional phone number, profession or business, optional business name and website or social profile, how you expect to refer clients, your confirmation that you are 18 or older and a U.S. person, and your agreement to the Referral Partner Terms.
• Sign-in codes. You sign in with a one-time code sent to your email address. Each code is used only to confirm that it is you. To keep automated programs from asking for codes, the sign-in form may use Cloudflare Turnstile, which checks that a person is asking; Cloudflare processes technical information about your browser for that check.
• Your payout preference. Whether you are paid by PayPal or Venmo, and your handle there.
• Your referral rewards and payout records. Each referral reward and its status, any offset for a booking refunded after its referral reward was paid, and each payment made to you: the amount, the date, the method and its reference.
• Your Form W-9. Your legal name, federal tax classification, address and taxpayer identification number (TIN), your electronic signature and certification, the date and time you signed, and the IP address and device information of the submission. A W-9 you replace is kept alongside the new one.

How your TIN is protected. It is encrypted with strong encryption before it is stored, and the key is held separately from the database. It is shown masked, and it is revealed to me only when it is genuinely needed for tax reporting. Every reveal is recorded. It is never sent by email or messaging, and it never reaches analytics.

Why it is kept. To run the referral program, to pay referral rewards, to meet tax reporting obligations such as filing Form 1099, and to prevent fraud and abuse of the program.

Who else receives it. Only those with a genuine need: tax authorities, a tax preparer or accountant acting for Receive Reiki, or anyone the law requires me to give it to. PayPal or Venmo receives your handle and the amount of each payment, because that is how referral rewards are sent. Sign-in codes and partner emails are sent through Resend, and the records are stored with Cloudflare, as Section 5 describes. Nothing is sold or used for advertising.

How long it is kept. Your Form W-9 and your payout records are kept for as long as your partnership lasts and for at least four years after the last reportable payment to you, or longer where the law requires. They are never deleted automatically, and earlier versions of your W-9 are kept too. Your rights in Section 9 apply to partner information as well, except that these tax and payout records must be kept for that period.

Messages with me

Once you are a partner, you can write to me from your partner dashboard, and I answer you there. I keep each message, who wrote it and when, with your partner record, so that both of us have the same history. Messages are never edited, and they are not deleted automatically. Please never send tax, bank or card details in a message: one that looks like it contains a tax number is refused before it is stored.

So that I can answer quickly, each message you send me is also copied, with your name, to my own Telegram account through a Telegram bot that only I use, and when I reply there, my reply comes back to your dashboard. Telegram therefore processes the text of those messages, under its own privacy policy. I am emailed when you write, and you are emailed when I reply, at most once in fifteen minutes, through Resend.

If you are introduced by a Partner Ambassador

A Partner Ambassador is a referral partner I have invited, or whose application I have approved, to introduce people who may want to become referral partners themselves. If an Ambassador gives me your name and email address, I keep them with the introduction and review it myself before anything is sent. If I approve it, I send you one invitation email, and you will not receive another because of that introduction. If you do not reply, your name and email address are kept only as the record of that one email, so that you are never sent a second one.

If you join through an introduction, the Ambassador who introduced you sees your first name and last initial, whether your application was approved, the date you joined, how many sessions of clients you referred produced an Ambassador bonus, and the amounts of their own bonuses. They never see your clients, your referral rewards, your tax information or your payout details. You are told this before you apply.

Opting out of invitation emails

Every invitation email has an unsubscribe link. If you use it, or ask me by reply, your email address goes on a do-not-invite list, and no invitation email is ever sent to it again. That list keeps only your email address and how and when you opted out, so that the opt-out can be honored, and it is never used for anything else. It is kept for as long as invitation emails are sent, because deleting it would make it impossible to honor.

If you are a Partner Ambassador

Besides everything kept for every referral partner, I keep the invitation I sent you, or your application to become an Ambassador (with any note you added, and my reason if I declined it), your acceptance of the Partner Ambassador Agreement (the version, a fingerprint of the exact text you were shown, when you accepted, and the sign-in you used), the introductions you make (the name and email address you give me for each person, and whether I sent them an invitation), and your Ambassador bonuses, any offsets, and the payments made to you. Ambassador bonuses are reported for tax purposes together with referral rewards, using the Form W-9 you have already signed, and are kept for the same period as your other payout records.

14. Changes to this policy

If this policy changes, the effective date at the top of the page changes with it, and the current version always lives at this address. Material changes will be summarized on this page so you can see what is different rather than having to compare versions yourself.

If a change affects a session you have already booked, you will be told by email at the address used for that booking.

Most recent change. Section 13 now explains messages between a referral partner and me in the partner dashboard, including the copy of each partner message sent to my own Telegram account, and that a partner may apply to become a Partner Ambassador. Section 5 mentions the Telegram copy.