Privacy Policy
At Radiant Heart Healing, your privacy matters to us. I am committed to protecting your personal information and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and other applicable UK data protection legislation.
Last Updated: September 2026
1. Contact
If you have any questions about how your personal information is handled, please get in touch with me using the details below.
You can email Radiant Heart Healing here or via the web contact form.
2. What Personal Information I Collect
Depending on how you interact with Radiant Heart Healing, I may collect some or all of the following:
-
Your name
-
Email address
-
Telephone number
-
Address, where required
-
Emergency contact details, where relevant
-
Booking and appointment information
-
Payment and transaction information
-
Information provided through booking, intake or consent forms
-
Information you voluntarily share before, during or after a session
-
Information relating to your physical or emotional wellbeing where relevant to the services you receive
-
Relevant medical or health information that you choose to disclose
-
Information about previous experiences, injuries, medications or other circumstances where you consider this relevant to your session
-
Your communication and correspondence with me
-
Marketing preferences
-
Information about how you use my website, including information collected through cookies and similar technologies
I only ask for information that is relevant and reasonably necessary for the services I provide.
3. Health and Wellbeing Information
Because Radiant Heart Healing provides wellness and holistic services, you may choose to share information about your physical or emotional wellbeing when completing a booking, intake or consent form or when communicating with me about a session.
This may include information about health conditions, injuries, medications, pregnancy, mental or emotional wellbeing or other circumstances that may be relevant to your participation in a session.
Some health information is considered special category data under the UK GDPR and requires additional protection.
Where I collect and process this type of information, I will only do so where there is an appropriate lawful basis and an applicable condition under UK data protection law.
This information is treated as confidential and will only be used for purposes connected with providing services safely and appropriately, unless I am required or permitted by law to use or disclose it for another reason.
4. How I Collect Your Information
I may collect your personal information when you:
-
Book a private session or group session
-
Complete an online booking form
-
Complete an intake or consent form
-
Contact me by email, telephone or social media
-
Attend a session, workshop or event
-
Sign up to receive emails or other marketing communications
-
Communicate with me before or after a session
-
Make a payment
-
Visit or use my website
Some information may also be collected automatically when you visit my website, such as technical information and website usage information through cookies and similar technologies.
5. How I Use Your Information
I may use your personal information to:
-
Process and manage bookings
-
Provide wellness and holistic services
-
Communicate with you about your booking or enquiry
-
Understand relevant information you choose to provide so that sessions can be delivered safely and appropriately
-
Send booking confirmations, reminders and other service-related communications
-
Process payments and maintain financial records
-
Respond to questions or requests
-
Manage and improve my services
-
Maintain appropriate business records
-
Send marketing communications where you have given consent or where otherwise permitted by law
-
Comply with legal, regulatory, insurance or accounting requirements
-
Protect the health, safety and wellbeing of clients and others where necessary
I will not use your personal information for purposes that are incompatible with the reason it was originally collected unless I have a lawful basis to do so.
6. Lawful Basis for Processing
The UK GDPR requires me to have a lawful basis for processing your personal information.
Depending on the circumstances, I may rely on one or more of the following:
Contract
Where processing your information is necessary to provide a service you have booked, manage your booking or take steps at your request before providing a service.
Legal Obligation
Where I am legally required to collect, retain or disclose information, for example for accounting, tax, regulatory or legal purposes.
Legitimate Interests
Where processing is necessary for the reasonable operation and management of Radiant Heart Healing, provided that my legitimate interests do not override your rights and freedoms.
Consent
Where you have actively given permission for your information to be used for a specific purpose, such as receiving marketing emails.
You can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Where I process health or other special category information, I will also ensure that an appropriate additional condition under the UK GDPR applies.
7. Booking and Consent Forms
When you book a session, you may be asked to complete a booking, intake, health or consent form.
The information you provide helps me to:
-
Understand relevant circumstances before your session
-
Identify any information that may affect your participation
-
Provide services in an appropriate and responsible way
-
Understand any relevant physical or emotional considerations you choose to disclose
-
Keep appropriate records of your attendance and consent
You are not required to disclose information that is not relevant to the service. However, withholding information that is relevant to your safety may mean that I am unable to provide a particular service.
8. Third-Party Services
I use trusted third-party providers to help operate Radiant Heart Healing and provide my services.
Wix
My website is hosted and managed using Wix.
Wix may process information submitted through my website, including contact information, enquiry information, website usage information and other information you provide through website forms.
Acuity Scheduling
I use Acuity Scheduling, a Squarespace service, to manage bookings and appointments.
When you make a booking, Acuity may process information such as your name, contact details, appointment details and information you choose to provide through booking or intake forms.
Stripe
I use Stripe to process payments securely. Where you make a payment through Stripe, your payment information is processed by Stripe. I do not store your full payment card details myself.
These providers may process or store information outside the UK. Where personal information is transferred outside the UK, appropriate safeguards will be used in accordance with applicable UK data protection law.
I take reasonable steps to ensure that third-party providers handling personal information on my behalf provide appropriate security and privacy protections.
9. Other Circumstances Where Information May Be Shared
I will only share your personal information where there is a legitimate reason to do so.
This may include sharing information with:
-
Payment providers
-
Booking and scheduling providers
-
Website and IT providers
-
Email and marketing providers
-
Accountants or professional advisers
-
Insurance providers where necessary
-
Government authorities, regulators or law enforcement agencies where legally required
-
Emergency services or appropriate professionals where necessary to protect someone's vital interests or safety
I will not sell your personal information to third parties.
10. Marketing Communications
I may send you information about Radiant Heart Healing, including upcoming sessions, workshops, events, services and other relevant news.
Where required, I will only send electronic marketing communications where you have provided appropriate consent or where another permitted basis under applicable law applies.
Where consent is required, it will be obtained through a clear and positive action and will not be hidden within this Privacy Policy.
You can withdraw your consent or unsubscribe from marketing communications at any time.
Every marketing email will include an easy way to unsubscribe.
Withdrawing consent or unsubscribing from marketing will not affect any service you have booked or any other processing that is necessary for me to provide that service.
11. Website Cookies
My website may use cookies and similar technologies to:
-
Make the website function correctly
-
Remember preferences
-
Understand how visitors use the website
-
Improve website performance and user experience
-
Support website analytics or other functionality
Some cookies may require your consent.
You can manage or disable cookies through your browser settings and, where applicable, through the cookie controls provided on my website.
For more information, please see our Cookie Policy.
12. How I Protect Your Information
I take appropriate technical and organisational measures to protect your personal information from:
-
Unauthorised access
-
Loss or destruction
-
Misuse
-
Unauthorised disclosure
-
Accidental alteration
Digital information is stored using appropriate secure, password-protected systems and reputable service providers.
Any physical records are kept securely, and access is limited to information that is necessary for the operation of Radiant Heart Healing.
While I take reasonable steps to protect your information, no method of storing or transmitting information electronically can be guaranteed to be completely secure.
13. How Long I Keep Your Information
I only keep personal information for as long as it is reasonably necessary for the purposes for which it was collected.
I may also need to retain certain information for longer where necessary to:
-
Meet legal, tax or accounting requirements
-
Maintain appropriate business records
-
Meet insurance requirements
-
Resolve complaints or disputes
-
Establish, exercise or defend legal claims
-
Comply with other legal or regulatory obligations
When information is no longer required, I will take reasonable steps to securely delete it or anonymise it.
14. Your Data Protection Rights
Under UK data protection law, you may have the right to:
-
Request access to the personal information I hold about you
-
Ask me to correct inaccurate or incomplete information
-
Ask me to delete your personal information in certain circumstances
-
Ask me to restrict how your information is processed in certain circumstances
-
Object to certain types of processing
-
Request the transfer of certain information to another organisation
-
Withdraw your consent where I rely on consent to process your information
-
Object to direct marketing
You can exercise your rights by contacting me using the details in this Privacy Policy.
I may need to verify your identity before responding to certain requests.
I will respond to valid requests within the timeframe required by applicable data protection law.
15. Confidentiality
I respect the personal and sensitive nature of information shared with me during wellness sessions.
Information you provide in connection with your sessions will be treated as confidential and will not ordinarily be shared with other people without your permission.
There may, however, be circumstances where I am legally required or permitted to disclose information, or where disclosure is necessary to protect someone's vital interests or safety.
16. Privacy Concerns or Complaints
If you have any concerns about the way I have collected, used or stored your personal information, please contact me first so that I have the opportunity to understand and resolve your concern.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.
You can find information about making a complaint on the ICO website.
17. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my services, business practices, technology or legal requirements.
The most recent version will always be available on my website, with the date of the latest update shown at the top of this page.