1. Who We Are

Angela Smith Therapy is operated by Angela Smith, a qualified therapist based in Northallerton, North Yorkshire, UK. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or engage with our services.

Data Controller: Angela Smith

Address: 2 Slingsby Gardens, Northallerton, North Yorkshire DL7 8JW

Email: info@angelasmiththerapy.com

Website: www.angelasmiththerapy.com

2. What Data We Collect and Why

2.1 Contact Form

When you use the enquiry form on our website we collect your name, email address, and the content of your message. This is used solely to respond to your enquiry. It is not used for marketing and is not shared with third parties.

Legal basis: Legitimate interests — responding to a message you have initiated.

2.2 Event Bookings (Sound Baths & Retreats)

When you book an event such as a sound bath or retreat through our website, we collect your name, contact details, and payment information. Bookings are managed through EventOn and completed via WooCommerce.

Payment is processed securely by Stripe. We do not store your card details.

Legal basis: Contract — processing is necessary to fulfil the booking you have made.

2.3 Therapy Enquiries

Initial contact for therapy appointments is made via our website contact form or by phone. We do not process therapy bookings online. Any personal information shared during this process is handled confidentially and kept separately from website data.

If you become a therapy client, a separate client agreement will cover how your personal and confidential information is held and managed. This includes any health-related (special category) data shared in the course of therapy.

Legal basis: Contract and, for health data, explicit consent.

2.4 Online Shop — Gift Tokens & Products

When you make a purchase through our shop we collect your name, billing address, email address, and order details. Physical product orders will also require a delivery address. Payment is processed via Stripe and WooCommerce.

WooCommerce may create a customer account for you to manage your orders. You can request deletion of your account at any time by contacting us.

We retain order records for accounting and legal purposes.

Legal basis: Contract (to fulfil your order) and Legal obligation (financial record-keeping).

2.5 Newsletter & Marketing Emails

If you sign up to our newsletter or have booked an event through our website, we may send you occasional updates about events, retreats, and sound baths by email. This is managed via MailPoet. You can unsubscribe at any time using the link in any email we send, or by contacting us directly.

Legal basis: Consent. We will only send marketing emails where you have opted in to receive them.

2.6 Cookies

Our website uses cookies to help it function and to understand how it is used. For full details of the cookies we set, how they are categorised, and how to manage your preferences, please see our Cookie Policy, available on our website.

3. How Long We Keep Your Data

Contact form enquiries: Up to 12 months after last correspondence, unless you go on to become a client
Event booking records: Up to 3 years from the date of the event
Financial and order records: 6 years, as required by HMRC
Therapy client records: Notes are stored in a locked filing cabinet, and client notes are stored for 7 years in line with NCPS guidance. Electronic notes are password protected, and stored for the same length of time.

4. Who We Share Your Data With

We do not sell your personal data. We share it only with the following trusted processors:

Stripe — secure payment processing (stripe.com/gb/privacy)
WooCommerce / Automattic — e-commerce platform
EventOn — event listing and booking plugin (data stored on our own server)
MailPoet — newsletter and email marketing (mailpoet.com/privacy-notice)

All processors are required to handle data securely and in line with UK GDPR.

5. Your Rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request erasure (‘right to be forgotten’)
Object to processing based on legitimate interests
Request restriction of processing
Data portability
Withdraw consent at any time where consent is the legal basis

To exercise any right, contact us at info@angelasmiththerapy.com. We will respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk | 0303 123 1113.

6. Security

Our website is hosted on secure, UK-based servers managed by our web development partner, and uses HTTPS/SSL encryption. We take appropriate technical and organisational measures to protect your data from unauthorised access or disclosure.

7. Third-Party Links

Our website contains links to social media platforms. Clicking these takes you to external sites governed by their own privacy policies. We are not responsible for how those sites handle your data.