Effective 2 September 2026
What is kept, why, and who can see it.
TONALIK handles personal information only as needed to review requests, run sessions, take payment, and stay in touch when you ask. Session content is treated as confidential within the practice.
Who is responsible
Alex, operating as TONALIK, is responsible for the information you submit through this site. Questions: use the contact page.
What is collected
From applications and bookings: name, email, phone, location or region, session format, what you want guidance on, and notes you choose to share. For a first Clarity Session, birth date, birth time (or that you do not know it), birth city, and birth country — used for natal chart, transits, and numerology so the session is not a blank slate.
From Member access and check-in: focus, intention, changes since last time, energy level, and extra notes. Photos for a photo reading are sent by you directly to Alex (email or text), not uploaded through this site.
From the mailing list: name, email, and optional session interest. From contact: name, email, and your message.
Payment cards are processed by Stripe. TONALIK does not store full card numbers. Transaction status, email, and plan details needed to confirm a booking or membership are kept with the practice records.
How it is used
To review applications, send access or payment links, confirm booking and calendar details, prepare for your session, deliver notes, administer Ongoing plans, and reply to you.
Mailing-list addresses are used for the monthly personal email and, when relevant, a note that a session opening exists. You can unsubscribe by replying.
Information is not sold. It is not used for advertising networks.
Who helps run the site
Stripe processes payments. Resend sends transactional email. A hosted database stores applications, bookings, and related records. The site is hosted on a cloud platform. Clerk is used only for the private admin sign-in, not for client accounts.
Those providers process data on instructions needed to operate the service, under their own terms and safeguards.
Legal bases (including GDPR and similar laws)
Where those laws apply, processing is based on: taking steps to enter a contract and performing it (booking, payment, session delivery); legitimate interests in running a small private practice and protecting the calendar; consent where you opt into the mailing list; and legal obligations such as tax or dispute records.
You may have rights to access, correct, delete, restrict, or port your information, and to object to certain processing. Mailing-list consent can be withdrawn by reply. Some records (for example a completed payment) may need to be kept for accounting or dispute purposes even if you ask for deletion of other notes.
How long it is kept
Application and session records are kept as long as needed to serve the work and any ongoing plan, then as long as reasonably required for accounting, legal, or dispute reasons. Mailing-list entries stay until you unsubscribe or ask to be removed.
Children
This work is for adults. Do not submit information about a child in order to book a session for them.
Care and limits
Access to client records is limited to running this practice. No internet transmission is perfectly secure. Share only what you are willing to send for this work.
