How we collect, use and protect your personal information.

Who we are

This website is operated by Heart of Transformation, operated by Jo Di Francesco.

For the purposes of UK data protection law, Heart of Transformation is responsible for deciding how personal information collected through this website and its services is used.

If you have a question about this Privacy Policy or about personal information held about you, please use the contact page.

INFORMATION WE MAY COLLECT

Personal information you provide

Depending on how you use the website and which services you choose, we may receive information including:

• Your name
• Email address
• Telephone number, where provided
• Information contained in a contact form or message
• Appointment and booking information
• Information you choose to provide about the reason for seeking support
• Relevant health or wellbeing information where this is necessary for a therapy, massage or other service
• Information relating to attendance at an event or session

Please only provide information that is relevant to your enquiry or service.

HOW INFORMATION IS USED

Why we process personal information

Personal information may be used to:

• Respond to enquiries
• Arrange and manage appointments
• Provide the service you have requested
• Communicate information relating to a booking
• Assess whether a particular service may be appropriate
• Maintain appropriate client or appointment records
• Manage payments and administration where applicable
• Meet legal, regulatory, insurance or safeguarding responsibilities
• Protect the security and proper operation of the website

LAWFUL BASES

The legal basis for using your information

Under UK data protection law, personal information must be processed on an appropriate lawful basis.

Depending on the circumstances, this may include:

• Contract — where information is necessary to arrange or provide a service you have requested.
• Legitimate interests — where information is needed for the reasonable operation and administration of the business, provided your rights and interests are properly considered.
• Legal obligation — where information must be processed to meet a legal requirement.
• Consent — where you have specifically agreed to a particular use of your information and consent is the appropriate lawful basis.

HEALTH & WELLBEING INFORMATION

Special category information

Some services may require you to provide information about your physical or emotional health. Under data protection law, health information receives additional protection and is treated as special category personal data.

Such information will only be requested where it is relevant to the service being provided and will be handled with additional care.

The appropriate legal condition for processing this type of information will depend on the circumstances and may include your explicit consent or another condition permitted by UK data protection law.

BOOKING SERVICES

Calendly

Online appointments are booked using Calendly.

When you use the booking calendar, information you provide may be processed by Calendly as part of providing the booking service.

Calendly may use cookies or similar technologies and may process data through systems located outside the United Kingdom. Where applicable, those transfers should be protected using recognised data-transfer safeguards.

Please also see the Cookie Policy for information about third-party services used on this website.

EVENT BOOKINGS

Eventbrite

Public sound bath and event bookings may be handled through Eventbrite.

If you follow a link from this website to Eventbrite, information you provide while booking is processed through Eventbrite’s systems and subject to its own privacy practices.

Heart of Transformation may receive information from Eventbrite that is necessary to administer an event, such as attendee names, booking information or contact details.

Who we may share information with

Personal information is not sold to third parties.

Information may be shared where reasonably necessary with organisations that help provide or administer the service, including:

• Website hosting and technical service providers
• Calendly for appointment booking
• Eventbrite for public event bookings
• Payment providers where relevant
• Professional advisers such as accountants, insurers or legal advisers where necessary
• Authorities or other organisations where disclosure is required by law or for legitimate safeguarding purposes

Only information reasonably necessary for the relevant purpose should be shared.

How long information is kept

Personal information should not be kept for longer than reasonably necessary.

Retention periods may vary depending on the type of information, the service provided and any legal, insurance, tax, safeguarding or professional record-keeping requirements that apply.

Information that is no longer required should be securely deleted, anonymised or otherwise disposed of appropriately.

Keeping information secure

Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse or disclosure.

No website, email system or online service can be guaranteed to be completely secure, but care is taken to use appropriate services and working practices for the information being handled.

YOUR RIGHTS

Your data protection rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

• Ask for access to personal information held about you
• Ask for inaccurate information to be corrected
• Ask for information to be deleted in certain circumstances
• Ask for processing to be restricted in certain circumstances
• Object to particular types of processing
• Receive certain information in a portable format where applicable
• Withdraw consent where processing relies on consent

These rights are not absolute and whether a particular right applies depends on the circumstances.

If you would like to exercise a data protection right, please use the contact page.