Privacy Policy – Pure Soul Frequencies

Last updated: November 2, 2026

1. Controller

The controller responsible for data processing on puresoulfrequencies.com is:

Great Products and Ideas LLC
5830 E 2nd St, Ste 7000 #17723, Casper, WY 82609, USA
represented by Nepta eG, which is represented by Michael Rentmeister
Email: support@puresoulfrequencies.com

Representative in the EU (Art. 27 GDPR):
Nepta eG
Staufener Strasse 9a
79238 Ehrenkirchen
Germany
Email: support@puresoulfrequencies.com
You can also contact our EU representative with any data protection question.

We have not appointed a data protection officer, as there is no legal obligation to do so.

2. Overview

We process personal data only where this is necessary to run this website, to answer your enquiries, on the basis of your consent, or to comply with legal obligations. The legal bases are in particular Art. 6(1)(a) (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests) GDPR.

All fonts and images are served from our own server. We use no advertising tools and no social media plugins. We use Google Analytics only if you consent (see section 9). To protect the newsletter form we use Cloudflare Turnstile (see section 7).

3. Hosting and server log files

This website runs on our own server, operated for us as a processor by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. The server is located in a data centre in the United Kingdom, for which the European Commission has issued an adequacy decision.

When you visit the website, technically necessary data is recorded automatically (server log files): IP address, date and time, requested page, referrer URL, browser type and operating system. This data is required to deliver the website securely and reliably and to detect attacks. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted as soon as they are no longer needed for these purposes, at the latest after 30 days, unless a security incident requires longer storage.

To protect the admin area, the security plugin FluentAuth logs login attempts (IP address, username, time, result) on our server. The legal basis is Art. 6(1)(f) GDPR; entries are deleted automatically after 30 days.

4. Controller based in the USA

As our company is based in the USA, data you send us, such as an email, may also be processed in the USA. We protect your data with appropriate technical and organisational measures and handle it according to GDPR standards.

5. Contact by email

If you email us, we process your details (name, email address, message) to answer your enquiry. Our mail server is operated by IONOS SE. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once your enquiry has been fully dealt with and no retention obligations apply.

6. Newsletter

If you subscribe to our newsletter, we process your first name, your email address, the language of the form, the time of subscription and confirmation, and your IP address. We use this data to send you new frequency music, the matching frequency certificates and news from Pure Soul Frequencies by email, and to address you by your first name.

Subscription uses the double opt-in procedure: you first receive an email in which you confirm your address. Only then are you added to the list. We store the time of subscription and confirmation and your IP address as proof. The form (Fluent Forms) and the contact list (FluentCRM) run on our own server; the form also stores your input as an entry. We send the emails via our mail server at IONOS SE. To improve our emails, we may record whether an email was opened and which links were clicked.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every email or by writing to support@puresoulfrequencies.com. We then delete your data from the list, unless we are legally required to keep proof of your consent.

7. Spam protection with Cloudflare Turnstile

To protect our newsletter form against automated sign-ups (bots), we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile is only loaded on pages that contain the newsletter form. Technical data such as your IP address, browser and device information and characteristics of your interaction with the page are sent to Cloudflare to check whether the sign-up comes from a human. The data is not used for advertising.

The legal basis is our legitimate interest in protecting our website and our list against abuse and spam (Art. 6(1)(f) GDPR); access to your device is strictly necessary for this (§ 25(2) no. 2 TDDDG). Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). You can find more in Cloudflare’s privacy policy.

8. Necessary cookies

Without your consent, we only set cookies that are required for the website to work:

Language: wp-wpml_current_language remembers the selected language (1 day).
Light or dark mode: blocksy_current_theme stores your display choice (about 3 months).
Your cookie choice: psf_consent stores whether you have consented to Google Analytics (6 months).
Login: Only if you log in to the admin area does WordPress set login cookies.

The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

9. Google Analytics (only with your consent)

If you choose “Allow statistics” in the cookie notice, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The service is integrated via the WordPress plugin Site Kit by Google. Google Analytics helps us understand which content is popular so that we can improve the website.

Google sets the cookies _ga and _ga_FERNNJXK58 (lifetime up to 13 months) and processes usage data such as pages viewed, time on page, where the visit came from, approximate location (country, region), device type, browser and operating system. Google Analytics 4 does not store full IP addresses of users in the EU. Google retains the analytics data for at most 14 months.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). You can find more in Google’s privacy policy.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, Google Analytics is not loaded. You can withdraw your consent at any time via the Cookie settings – the link is also at the bottom of every page.

10. Links to YouTube

We publish our music on our YouTube channel. Videos are not embedded on this website but linked. Only when you click a link are you taken to YouTube, a service of Google Ireland Limited, where Google’s privacy policy applies.

11. Recipients

Your data is only received by the service providers named above within the scope of their tasks and, where required by law, by authorities. We do not pass your data on to third parties for advertising purposes and we do not sell it.

12. Retention

We store personal data only for as long as is necessary for the respective purpose or required by statutory retention periods. The data is then deleted.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation.

To exercise your rights, simply email support@puresoulfrequencies.com.

Right to lodge a complaint: You can complain to any data protection supervisory authority, in particular in the EU member state of your habitual residence. A list of authorities is available at edpb.europa.eu.

14. Information for users outside the EU

Residents of certain US states (e.g. California) have additional rights, including access, deletion, correction and opting out of the “sale” or “sharing” of personal information. We do not sell personal information. Please send requests to the email address above; exercising your rights will not lead to any disadvantage.

15. Changes

We update this privacy policy when our processing or the legal situation changes, for example if we introduce embedded videos. The version published here applies.