Privacy Policy

Who We Are

• The Soul Healing Hands is a sole trader business providing holistic and energy healing services, releasing of trapped and inherited emotions, including in-person and distance sessions.

For the purposes of the UK GDPR, The Soul Healing Hands is the Data Controller responsible for your personal data.

If you have any questions about this Privacy Policy, please use the contact form.

What Personal Data We Collect

We may collect and process the following types of personal data:

1.Identity & Contact Data

• Full name

• Email address

• Telephone number

• City, Country

2.Health & Wellbeing Information (Special Category Data)

• Information about your physical, emotional or energetic wellbeing

• Relevant medical conditions (if voluntarily disclosed)

• Session notes

• Intake form responses

3.Booking & Payment Information

• Appointment details

• Payment confirmation records
  (Note: We do not store full card details.)

4.Technical Data

• IP address

• Browser type

• Device information

• Website usage data via cookies

Special Category Data (Health Information)

As a holistic practitioner, I may process limited health and wellbeing information to provide safe and appropriate services.

This data is classified as “special category data” under the UK General Data Protection Regulation.

I process this data only:

• With your explicit consent

• For the purpose of providing holistic services

• Where necessary to establish, exercise or defend legal claims

You may withdraw consent at any time. However, this may affect my ability to provide services safely.

Lawful Bases for Processing

I rely on the following lawful bases:

Purpose Lawful Basis

Providing booked sessions Performance of a contract

Processing health information Explicit consent

Responding to enquiries Legitimate interests

Maintaining records for insurance/tax Legal obligation

Sending marketing emails Consent

How Your Data Is Collected

Your data may be collected when you:

• Complete a contact or intake form

• Book a session

• Attend an in-person session

• Participate in a distance healing session

• Contact me via email, phone or social media

• Subscribe to a newsletter

• Browse the website (via cookies)

Distance Healing & Online Sessions

For remote sessions (e.g. via Zoom or telephone):

• Basic contact details are used to arrange the session

• Online platforms may process your data according to their own privacy policies

• I do not record sessions unless explicitly agreed in advance

Please ensure you attend remote sessions in a private and secure environment if confidentiality is important to you.

How Your Data Is Used

Your personal data is used to:

• Provide holistic and energy healing services, including releasing of trapped and inherited emotions

• Manage appointments and payments

• Maintain professional records

• Communicate with you regarding sessions

• Improve website functionality

• Send newsletters or updates (if you opt in)

• Comply with legal and insurance obligations

I do not sell or rent your personal data.

Data Sharing

Your data may be shared only where necessary with:

• Payment processors

• Booking systems

• Accountants or insurers

• Legal or regulatory authorities (if required by law)

All third parties are required to process data securely and lawfully.

International Transfers

If third-party service providers are located outside the UK, appropriate safeguards will be in place, such as UK-approved contractual clauses or adequacy regulations.

Data Retention

Client records are retained for:

• Up to 7 years after your last session (for insurance and legal purposes)

• Financial records as required by HMRC

• Marketing data until you unsubscribe or withdraw consent

After this period, data is securely deleted or anonymised.

Your Rights

Under the UK General Data Protection Regulation, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request erasure

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

• Lodge a complaint with the Information Commissioner's Office

Data Security

I take appropriate security measures to protect your data, including:

• Password-protected devices

• Secure cloud storage

• Limited access to client records

• Secure disposal of paper records

Cookies

This website may use cookies to:

• Improve user experience

• Analyse website traffic

• Store user preferences

You can manage cookies through your browser settings. A separate Cookie Policy may provide further details.

Marketing Communications

You will only receive marketing emails if:

• You have opted in; or

• You are an existing client and marketing relates to similar services (where permitted by law).

You may unsubscribe at any time by clicking the unsubscribe link or contacting me directly.

Children’s Data

Services are provided only to individuals aged 18 or over unless parental consent has been obtained.

Changes to This Privacy Policy

This policy may be updated from time to time. The latest version will always be published on this website.