At Zien Ngoc Diep, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, submit a form, make a booking or payment, or use our services.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Slovenian data-protection legislation, and other applicable laws.
1. Who We Are
The data controller responsible for your personal data is:
ZIEN NGOC DIEP
Legal / Business Name: Ngoc Diep Nguyen / Zien Ngoc Diep
Email: zienngocdiep@gmail.com
If you have any questions about this Privacy Policy or how your personal data is handled, please contact us using the email address above.
2. Personal Data We Collect
Depending on how you interact with our website and services, we may collect the following information:
- your name;
- email address;
- telephone number, where provided;
- appointment and booking information;
- payment and transaction information;
- information you provide when contacting us;
- information submitted through registration, contact or booking forms;
- correspondence between you and Zien Ngoc Diep;
- information you voluntarily choose to share in connection with a service;
- technical information relating to your use of our website, such as IP address, browser type, device information and website activity, where applicable;
- cookie and similar technology information, where applicable.
You are not required to provide personal information beyond what is reasonably necessary to enquire about, book or receive our services.
3. Information You Choose to Share
Our services may involve personal reflection, emotions, relationships, life experiences and spiritual matters.
You are always encouraged to share only information that you are comfortable providing.
Please do not submit unnecessary sensitive personal information through website forms or email.
Where you voluntarily provide personal information in connection with a session, we will handle it responsibly and in accordance with applicable data-protection law.
4. How We Use Your Personal Data
We may use your personal data to:
- respond to enquiries and requests;
- communicate with you about our services;
- arrange and manage appointments;
- provide the services you have requested;
- process payments and maintain transaction records;
- send appointment confirmations and service-related communications;
- manage cancellations, rescheduling and refunds;
- respond to questions, complaints or requests;
- maintain and improve the security and functionality of our website;
- comply with legal, tax and accounting obligations;
- establish, exercise or defend legal claims where necessary;
- send newsletters or promotional communications where you have provided the required consent or where otherwise permitted by applicable law.
We will only use your personal data for purposes that are compatible with the purposes for which it was collected or where otherwise permitted by law.
5. Legal Basis for Processing
Depending on the circumstances, we may process your personal data on the following legal bases:
✤ Performance of a Contract
Where processing is necessary to arrange or provide a service you have requested.
✤ Pre-Contractual Measures
Where you contact us or provide information in order to enquire about or arrange a service.
✤ Legal Obligations
Where processing is necessary to comply with legal, tax, accounting or other statutory obligations.
✤ Legitimate Interests
Where processing is necessary for the reasonable operation, administration, security and protection of our business, provided that these interests do not override your rights and freedoms.
✤ Consent
Where you have voluntarily provided consent for a specific purpose, such as certain marketing communications or non-essential cookies.
Where processing is based on consent, you may withdraw your consent at any time.
6. Payment Information
When you make a payment for our services, your payment may be processed by a third-party payment provider or financial institution.
Depending on the payment method used, we may receive information such as the transaction amount, payment status and relevant transaction details.
We do not intentionally store complete payment-card details on our own systems unless this is specifically required and lawfully permitted.
Payment providers may process your personal data in accordance with their own privacy policies and terms.
7. Service Providers
We may use trusted third-party service providers to help us operate our website and provide our services.
These may include providers of:
- website hosting;
- email and communication services;
- booking and scheduling systems;
- payment processing;
- accounting services;
- website security;
- analytics and website performance tools;
- email newsletters or marketing services.
Where a third party processes personal data on our behalf, we will take appropriate steps to ensure that applicable data-protection requirements are respected.
We do not sell, rent or trade your personal data.
8. International Transfers
Some of our service providers may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we will ensure that the transfer is carried out in accordance with applicable GDPR requirements and that an appropriate legal safeguard is in place where required.
This may include an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.
9. How Long We Keep Your Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.
For example:
- enquiry and communication information may be retained for as long as reasonably necessary to manage your request or relationship with us;
- booking and transaction records may be retained for the period required by applicable tax and accounting laws;
- marketing information may be retained until you withdraw your consent or otherwise object, where applicable;
- information necessary to establish or defend legal claims may be retained for the applicable limitation period.
When personal data is no longer required, it will be securely deleted or otherwise appropriately disposed of.
10. Your Rights
Under applicable data-protection law, including the GDPR, you may have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- request data portability, where applicable;
- withdraw consent where processing is based on consent;
- object to direct marketing at any time.
These rights may be subject to certain legal conditions and limitations.
To exercise your rights, please contact us at: zienngocdiep@gmail.com
We may need to verify your identity before responding to certain requests.
11. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data-protection supervisory authority.
In Slovenia, the competent supervisory authority is:
Information Commissioner of the Republic of Slovenia
(Informacijski pooblaščenec)
You may also contact us first if you have concerns about how your personal data is being handled, and we will make reasonable efforts to address your concerns.
12. Cookies
Our website may use cookies and similar technologies.
Some cookies may be necessary for the website to function correctly. Other cookies may be used for analytics, preferences, security or other purposes.
Where required by applicable law, we will request your consent before placing or using non-essential cookies.
You may manage your cookie preferences through the cookie settings available on our website.
Where applicable, further information about the cookies we use will be provided in our Cookie Policy.
13. Marketing Communications
We may occasionally send information about our services, events, updates or other communications where this is permitted by applicable law.
Where consent is required, we will only send marketing communications after receiving your consent.
You may unsubscribe from marketing communications at any time by following the unsubscribe instructions provided in the communication or by contacting us directly.
14. Data Security
We take reasonable technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
15. Children’s Privacy
Our website and services are not intended to knowingly collect personal information from children where parental or other lawful consent is required.
If you believe that a child has provided personal information to us without appropriate consent, please contact us so that we can take appropriate steps.
16. Links to Other Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content or security of third-party websites.
We encourage you to review the privacy policies of any external websites you visit.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website, business practices, technology or applicable legal requirements.
The latest version will always be published on this page together with the relevant “Last updated” date.
18. Contact
If you have any questions about this Privacy Policy, your personal data, or how we process your information, please contact email address: zienngocdiep@gmail.com
