The purpose of this Privacy Notice is to explain how Holistic Goddess Limited collects personal data about you when you interact with us. Personal data is information about an individual that could, alone or together with other information, personally identify that individual. Holistic Goddess Limited is committed to ensuring that all personal data supplied is collected and processed fairly and lawfully.
Holistic Goddess Limited provides Flower and Vibrational Essence consultations, and Spiritual Companionship sessions (details of both of these can be found on our website).
We may collect, store, and use the following kinds of personal data in relation to our online presence:
- information about your computer and about your visits to, and your use of, the Holistic Goddess website (including your IP address, geographical location, browser type, referral source, length of visit, and number of page views)
- information that you provide to us for the purpose of using our services
- information that you provide to us for the purpose of subscribing to our website services, email notifications, or newsletters
- any other information that you choose to send to us
Most browsers allow you to reject all cookies, whilst some browsers allow you to reject just third party cookies. Blocking all cookies will have a negative impact upon the usability of many websites.
The basis on which we use the information above is that of “legitimate interest” in order that we might fulfil the services that we offer you, using data that you would reasonably expect us to hold and use. We also use some of the information in your client record to allow us to meet our legal and regulatory obligations.
With your consent, we will use your data to keep you informed by email, newsletters, and our website services, of relevant products and services, along with articles that we think will be of interest to you. You can unsubscribe from our email and newsletters at any time.
For those who enquire about consultations or sessions, we may collect, store, and use information that you choose to send us in relation to your enquiry.
For those who book and attend at least one session, we may collect, store, and use the following kinds of personal information, which forms your client record:
- information such as your name, email address, and other contact details
- information that you provide to us as part of the work we do together
- contemporaneous records of our sessions together
- emails, texts, or other messages that are sent between us
- information sent from any third party, e.g. your GP
The basis on which we use the information in your client record is that of “legitimate interest” in order that we might fulfil the services that we offer you, using data that you would reasonably expect us to hold and use. We also use some of the information in your client record to allow us to meet our legal and regulatory obligations.
Some of the information you give us may be classed as “special categories of personal data” under the General Data Protection Regulation (GDPR). We collect, store, and process this data under the GDPR condition where such processing is ‘necessary for medical diagnosis, the provision of health care, or treatment pursuant to contract with a health professional’.
Your client record data is confidential and is not shared with anyone, except where there is a legal requirement for us to do so, or where we have good cause to believe that if information is not disclosed, you or others would be exposed to a serious risk of harm. We will attempt to seek your consent prior to such disclosure, and minimise the amount of information disclosed, but we may be obliged to disclosure without consent.
For the purposes of professional development and support, our professional bodies’ codes of ethics allow for the anonymous sharing of client records verbally, or for supervision or training. In these cases, all personally identifying information is removed from the client record and no information that might identify you is used.
We will retain your client record for a period of seven years after your last consultation or session takes place. Paper copies of such records will be held securely and be shredded or destroyed after the retention period. Electronic copies of such records will be held securely and be deleted after the retention period.
Under the GDPR you have a number of rights, including the following:
- the right to information about how we collect and process your data, as set out above.
- the right of access to personal data we hold about you, and the right to data portability.
- the right to have inaccurate data corrected.
- the right to erasure of your data, the right to restrict processing, and the right to object to processing, in some situations. We do not carry out automated decision making or profiling based on your personal data.
- the right to complain to a supervisory authority.
If you wish to contact us regarding this Privacy Notice, please do so via our contact form.
Last updated: 19 August 2018.