Privacy policy

This policy covers the public Waves website operated by SCALITY LIMITED, Cyprus company HE 459172, trading as Healing Waves. The current site provides information about Waves and an email-based launch waitlist. Account entry, analytics, advertising trackers, and audio playback tracking remain outside the current public release.

1. What we collect

• Website request data. Vercel receives ordinary technical details needed to deliver and protect the site, such as IP address, request time, requested page, browser information, and security events.
• Waitlist and contact messages. Email links open your own email service. If you ask to join the waitlist or contact us, Google Workspace processes your name, email address, message, and ordinary delivery metadata.

2. What we use it for

• Delivering the website and keeping it secure and available.
• Managing the Waves launch list and sending the messages you requested.
• Answering messages you choose to send.
• Establishing, exercising, or defending legal claims where necessary.

Our lawful basis for essential hosting and security is our legitimate interest in operating a secure public website. We use the basis that fits your message when you contact us, such as steps you request before a contract, performance of a contract, legal obligations, or our legitimate interest in answering genuine enquiries.

We rely on your consent for Waves launch and early-access messages. You can withdraw that consent at any time by replying or writing to the privacy contact below.

3. Who processes it

These services process the limited data described above:

• Vercel hosts and protects this public website.
• Google Workspace provides email when you choose to contact us.

These providers may process data outside the European Economic Area using their applicable contractual safeguards. The broader Healing Waves privacy information is available at healingwaves.co/privacy.

4. How long we keep it

Vercel runtime logs in our current account are available for one day. Security records may follow the provider's applicable retention. Waitlist messages are retained until the launch communication is complete or you withdraw, followed by suppression evidence needed to honor the withdrawal. General Healing Waves contact and support email is retained for 24 months after the last activity, with longer periods where contract, tax, security, legal, or rights-request records require them.

5. Your rights

• Access, correct, or delete your personal data.
• Receive a copy of the data we hold about you.
• Object to or restrict how we process it.

Write to sefy@healingwaves.co and a person will answer. You may also complain to the Cyprus Commissioner for Personal Data Protection or your local supervisory authority.

6. Security

HTTPS encrypts traffic in transit. This site uses restrictive browser security headers. The current runtime excludes account, payment, analytics, advertising, and playback systems.

7. Changes

Material changes to the site or its data use will update this notice before the changed processing goes live.