Effective Date: February 2019
Last Updated: April 2025

​

The Sufi Psychology Association ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This policy outlines how we collect, use, and store your data in compliance with the General Data Protection Regulation (GDPR).

​

1. Platform and Hosting

Our website is hosted on Wix.com. Wix provides the tools we use to run memberships, process orders, and maintain our site. Your data may be stored through Wix’s secure infrastructure.

For more information, see the Wix Privacy Policy.

​

2. What Information We Collect

We may collect:

• Account & Contact Info: name, email, address, phone number, and account preferences

• Membership Data: membership tier, login credentials, and engagement history

• Order Data: billing/shipping information, purchase history

• Payment Info: securely handled by third-party processors (we do not store credit card details)

• Usage Data: IP address, device/browser type, referral source, and cookie data

​​

3. How We Use Your Data

We use data to:

• Provide and manage membership services

• Process product purchases and send receipts

• Communicate with you (e.g., updates, support)

• Send newsletters and promotions (with your consent)

• Analyze website usage to improve our services

• Comply with legal and tax obligations

​​

4. Lawful Bases for Processing

We process data based on:

• Contract: to deliver memberships or purchases

• Consent: for newsletters and optional features

• Legal obligation: for financial/tax purposes

• Legitimate interest: for website performance and basic analytics

​​

5. Third-Party Services We Use

We share data only as needed with secure, GDPR-compliant providers:

Provider                         Purpose                                                         Privacy Link

Wix.com                        Hosting, content management              Wix Privacy

PayPal                           Payment processing                                PayPal Privacy Statement

Google Analytics         Site usage analytics                                 Google Privacy

Mailchimp                     Email marketing                                        Mailchimp

​

6. Data Retention

We retain personal data only as long as necessary:

• Membership data: while your account is active, and up to 2 years after cancellation unless you request deletion sooner.

• Purchase records: kept for 6 years (legal/tax requirements)

• Marketing data: retained until you unsubscribe or request deletion

• Inactive contact forms: deleted after 12 months unless part of ongoing support

​​

7. Cookies and Tracking

We use cookies for:

• Login and session functionality

• Shopping cart operations

• Traffic analytics (e.g., Google Analytics)

See our full Cookie Policy for details and opt-out info.

​

8. Your GDPR Rights

You may:

• Access your data

• Request correction or deletion

• Withdraw consent at any time

• Object to certain processing

• File a complaint with a data protection authority

Contact us to exercise your rights.

​

9. Data Transfers

Your data may be processed outside the EU (e.g., U.S., Israel). Wix and partners use lawful mechanisms such as Standard Contractual Clauses to ensure your data is protected.