Privacy Policy

Last updated: 12 November 2025
Publisher / Data Controller: Jean-Baptiste Duret — Flowing Realities
Contact: contact@flowingrealities.com
Registered address: 15 esp. Raoul Follereau 92130 Issy-les-Moulineaux (France)
Supervisory authority (France): CNIL — https://www.cnil.fr

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the EU GDPR.

1) Who we are

Flowing Realities provides private and group sessions (channeling), transcripts, and related events. We operate from France and host this website on an EU server. For privacy questions, email contact@flowingrealities.com.

2) What data we collect

We collect only what is necessary for the services we offer.

  • Website visitors
    • Technical: IP address, device/browser info, pages visited, timestamps, referrer (via server logs).
    • Preferences: cookie consent choices, language/theme preferences.
    • Forms: name, email, message content when you contact us.
  • Clients (private 1:1 or small private groups)
    • Contact details: name, email, timezone, preferred platform (Zoom/Telegram/Signal).
    • Session logistics: essence requested, duration, scheduling info.
    • Recordings/transcripts: audio and transcripts only if made/kept; publication is opt-in (see §7).
  • Event participants (public or larger group sessions)
    • Registration details (name, email) and attendance.
    • Depending on the event: audio recordings/transcripts (see event page consent).
  • Payments
    • We do not store full payment card details on our servers. Payment processors (e.g., PayPal) process your payment data.

3) Legal bases for processing (GDPR Art. 6)

We process personal data on these bases:

  • Contract — to provide sessions, event access, support, and booking communications.
  • Consent — for cookie categories beyond strictly necessary; for publication of private session materials; for mailing (if/when enabled).
  • Legitimate interests — to secure our site, prevent abuse, improve services, and keep minimal records of interactions.
  • Legal obligation — accounting/transaction records, consumer law.

4) How we use the data

  • To respond to inquiries and schedule sessions.
  • To run private sessions or events (online or in-person).
  • To deliver session recordings/transcripts to the client.
  • To publish only the materials you consented to share (see §7).
  • To secure and maintain the website (logs, backups).

5) Retention periods

  • Contact inquiries: up to 12 months after last interaction.
  • Client records (administrative/accounting): up to 6 years (FR accounting rules).
  • Private session recordings/transcripts: until you request deletion or for [X years] max (set your policy).
  • Event/public session materials: as long as they are published or until removal is requested/required.
  • Server logs: up to 12 months.
  • Cookies: see Cookie Policy.

6) Sharing with third parties (processors)

We share data with service providers strictly to deliver our services, under data-processing terms:

  • Hosting: Ovhcloud, EU-based.
  • Email: Microsoft outlook (for direct email communications).
  • Video/Comms: Zoom, Telegram, Signal (as chosen for sessions).
  • Payments: PayPal, Stripes, Kofi (for payment processing).

We do not sell personal data.

7) Recordings, transcripts & publication

  • Private sessions: Your session is private by default. We may share a transcript and/or audio only with your explicit written consent. You can choose anonymous or credited publication and may withdraw consent later, and we will remove the content from our site/channels (note: prior lawful uses, caches, or printed copies may persist).
  • Public / big group sessions: These may be recorded and shared by default as stated on the event page. Joining implies consent to publication; use a display name and avoid sharing sensitive personal details if you prefer not to be identifiable.

Copyright: Unless stated otherwise, materials are © Jean-Baptiste Duret / Flowing Realities. For private sessions, you receive a personal, non-transferable license to keep and listen to your copy; please do not publish or redistribute without written permission.

8) International transfers

Some processors (e.g., Zoom, PayPal) may be located outside the EEA. When transfers occur, we rely on appropriate safeguards (e.g., Standard Contractual Clauses). Contact us for details.

9) Security

We use reasonable technical and organizational measures to protect data (TLS encryption, access controls, least-privilege accounts, updated systems). No method is 100% secure.

10) Your rights (GDPR)

You can:

  • Access, rectify, or erase your data.
  • Restrict or object to processing in certain cases.
  • Withdraw consent at any time (where consent is the legal basis).
  • Request data portability.
  • Lodge a complaint with CNIL (https://www.cnil.fr) or your local authority.

To exercise rights, email contact@flowingrealities.com. We may need to verify your identity.

11) Children

Our services are not directed to children under 16. If you believe we hold data about a minor, contact us to remove it.

12) AI training & automated scraping

By default, our public content may be readable by search engines. Unless stated otherwise in our Terms or on specific pages, session materials published on the site are not licensed for dataset creation or AI model training without prior written permission. Automated scraping is prohibited except for standard search indexing that honors our robots rules and headers. (See also Cookie Policy and Terms.)

13) Changes

We may update this Policy. The latest version applies from the “Last updated” date above.

Contact: contact@flowingrealities.com