Privacy Policy

Inner You Holistic

Meditation and Reiki Wellness Services

1. Introduction
This Privacy Policy explains how Andrea Cunningham collects, uses, stores, and protects personal information.
I am committed to respecting your privacy and complying with the UK GDPR / EU GDPR / local data protection law.

By booking or using my services, you agree to the terms of this policy.

2. Information I Collect
I may collect and process the following personal information:
2.1. Contact Information
* Name
* Email address

* Phone number
* Company name
2.2. Booking & Payment Information
* Session history
* Appointment details
* Payment confirmations (via third-party processors such as Stripe/PayPal)
2.3. Wellbeing Information (Sensitive Data)
Only if voluntarily provided by you:
* Information relating to stress levels, wellbeing, or relevant health considerations
* Any information required to deliver safe Reiki or meditation sessions
I do NOT collect medical records or diagnose any conditions.
2.4. Website & Technical Data
If you use my website:
* IP address
* Cookies (analytics, functional or necessary cookies)
* Browser type and usage data

3. How I Use Your Information
I use your personal data to:
* Process and confirm bookings
* Provide meditation, Reiki, and wellbeing services
* Communicate about appointments, changes, or cancellations
* Respond to enquiries
* Maintain accurate records for insurance, legal, and tax purposes
* Improve website functionality and user experience (where applicable)
I only collect information that is necessary and relevant.

4. Legal Basis for Processing
Under the GDPR, I rely on the following legal bases:
* Contract: To deliver the services you book
* Consent: For processing wellbeing-related information or sending marketing emails
* Legitimate Interests: For business administration and service improvement
* Legal Obligation: Record-keeping for tax, insurance, and regulatory purposes
You may withdraw consent at any time.

5. How Your Data Is Stored
* Personal data is stored securely in encrypted digital systems, password-protected devices, or locked storage.
* Only I (the practitioner) have access unless required by law.
* I do not store more information than necessary.

6. Data Retention
I keep personal data only as long as needed:
* Client records: typically 6 years (to comply with insurance and legal obligations)
* Booking and communication records: up to 2 years unless required longer
* Email marketing data: until you unsubscribe
When no longer needed, data is securely deleted or anonymised.

7. Sharing Your Information
I do not sell or share your data with third parties for marketing.
Information may be shared only with:
* Payment processors (e.g., Stripe, PayPal)
* Booking platforms (if you use one)
* Legal authorities where required by law (e.g., safeguarding concerns or court orders)
Each third party processes your data in line with GDPR-compliant agreements.

8. Your Rights
Under the GDPR, you have rights over your personal information, including to:
* Access your data
* Correct inaccurate information
* Request deletion (“right to be forgotten”)
* Restrict or object to processing
* Request data portability
* Withdraw consent
* Lodge a complaint with your local data protection authority
To exercise these rights, contact: andrea@inneryouholistic.com

9. Marketing Communications
I only send marketing emails (news, events, offers) if you explicitly opt in.
 You may unsubscribe at any time using the link or by contacting me directly.

10. Cookies 
My website uses cookies for:
* Essential website functionality
* Analytics to improve user experience
* Remembering preferences
Users can manage or disable cookies via their browser settings.
Add a link here if you have a Cookie Policy:
[Link to Cookie Policy]l

11. Children’s Privacy
Services for individuals under 18 require parental or guardian consent.
I do not knowingly collect data from children without permission.

12. Data Transfers Outside the UK/EU
If using services (e.g., cloud storage) that store data outside the UK/EU, I ensure appropriate safeguards are in place, such as:
* Standard Contractual Clauses
* GDPR-compliant data processing agreements

13. Updates to This Policy
I may update this Privacy Policy from time to time.
The most current version will always be available on my website or by request. 
Changes take effect immediately upon publication.

14. Contact Information
If you have questions about this policy or how your data is handled, please contact the Data Controller,
Andrea Cunningham
 at andrea@inneryouholistic.com