Privacy Policy

This Privacy Policy describes how personal data of users of mysticvia.com is processed in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data Controller

The controller of personal data is TERLAVIO Sp. z o.o. (a Polish limited liability company), ul. Juliusza Słowackiego 16, 97-300 Piotrków Trybunalski, Poland, registered in the National Court Register (KRS) under number 0001266677, Tax ID (NIP) 7712946705, REGON 545741467, share capital PLN 5,000.00. Contact: kontakt@mysticvia.com.

2. Data we collect

We process data you voluntarily provide in the order or contact form: name, contact details (e-mail, phone) and message content. We also automatically collect technical data (IP address, browser type) and cookies.

3. Purpose and legal basis

We process data to deliver the requested service (Art. 6(1)(b) GDPR), to answer enquiries (f) and — with consent — for analytics and marketing (a).

4. Retention

We keep data for as long as necessary to provide the service and for periods required by law (e.g. tax).

5. Your rights

You have the right to access, rectify, erase, restrict, port your data, and to object and lodge a complaint with a supervisory authority.

6. Cookies

The site uses cookies necessary for operation and — with consent — analytics. You can manage consent in your browser settings.

7. Payments

Online payments are handled by an external provider (Stripe), which processes payment data under its own policy.

8. Contact

For data matters write to: kontakt@mysticvia.com.

9. Meta marketing tools (Facebook / Instagram)

With your consent (the “Accept” button in the cookie bar) the site loads the Meta Pixel, and after a payment we send a purchase event to Meta Platforms Ireland Ltd. via the Conversions API (e-mail only as a SHA-256 hash). Purpose: measuring and tailoring advertising (art. 6(1)(a) GDPR). Without consent the Pixel is not loaded. You can withdraw consent at any time by clearing the site data in your browser (key eso_cookie) — the cookie bar will appear again. Meta may transfer data to the USA under the Data Privacy Framework and standard contractual clauses.

10. WhatsApp and on-site chat

If you message us via WhatsApp, your data (phone number, content) is also processed by WhatsApp Ireland Ltd. (Meta group) under its own privacy policy. In the on-site chat and in WhatsApp, first replies may be prepared with the help of artificial-intelligence tools under the team's supervision; conversation content is stored to deliver the service and handle enquiries (art. 6(1)(b) and (f) GDPR).

11. Recipients

Data needed to perform the service (name, contact, enquiry text) is passed to the selected Advisor cooperating with the Provider. Other recipients: the payment operator Stripe Payments Europe Ltd., the hosting provider, Meta Platforms Ireland Ltd. (only with consent, sections 9–10) and AI tool providers (chat content, no payment data).

12. Retention periods

Orders and billing data — 5 years from the end of the tax year; correspondence and chats — 12 months from the last contact; user account data — until the account is deleted; marketing data — until consent is withdrawn; technical logs — up to 90 days.