Skip to content
The Peaceful SoulNottingham

Legal

Privacy Policy

This policy explains, in plain English, what personal information The Peaceful Soul ("we", "us", "our") collects through this website, why, where it is stored, how long we keep it, and the rights you have. Detzi Simpson, trading as The Peaceful Soul (107 Kent Road, Mapperley, Nottingham, NG3 6BS) is the data controller. We are committed to handling your information respectfully and in line with UK data protection law (UK GDPR and the Data Protection Act 2018).

You can contact us about anything in this policy at info@thepeacefulsoul.co.uk or 07944 570551.

What we collect, why, and our lawful basis

When you send a contact enquiry, we collect your name, email address and your message, so we can reply and help you. Lawful basis: our legitimate interest in responding to you, and taking steps at your request before any booking.

When you join our mailing list, we collect your email address and, if you give it, your name, so we can send you occasional updates about classes, courses and events. You can unsubscribe at any time. Lawful basis: your consent.

When you book or RSVP to an event, we collect your name, email address, phone number (if you give it), the number of places, and (for paid events) the amount paid and a payment reference. We use this to manage your booking, send your confirmation, and contact you about the event. Lawful basis: performance of our contract with you.

When you apply for a course or retreat (our "apply to join" events), we also collect the answers you give to the questions we ask, for example your previous Reiki training, teacher and level, and a certificate you upload to confirm your prior training. We use this only to check the course is right for you and to run it safely. Uploaded certificates are stored privately and can only be opened by Detzi from the secure admin area; they are never published or shown on the public website. Lawful basis: performance of our contract with you and our legitimate interest in confirming eligibility.

When you pay online, your card payment is taken by Stripe, our payment provider. We do not see or store your card number; we only receive a payment reference and the amount. Lawful basis: performance of our contract with you.

To keep the site secure, our hosting provider and our spam/abuse protections may process technical information such as your IP address and basic request details. Lawful basis: our legitimate interest in keeping the site safe and available.

We do not ask for sensitive health information through this website. Please avoid including health details in a message unless it is necessary; if you do, we treat it with extra care and use it only to look after you.

Where your information is stored

We store your information in our own database and with trusted providers who help us run the business. Some of these providers are based outside the UK (for example in the USA), and we rely on their own data protection safeguards (such as UK/EU standard contractual clauses or recognised data protection frameworks) for any international transfer.

  • Vercel hosts the website and keeps short-lived server logs (which can include IP addresses).
  • Neon / Vercel Postgres is our database, holding bookings, enquiries, mailing-list signups and course application answers.
  • Vercel Blob privately stores uploaded course certificates.
  • Stripe processes card payments.
  • Resend sends our confirmation and notification emails.

Separately, one-to-one treatments are booked through Fresha, the optional map is provided by Google, and our online courses area links out to MemberVault. When you use those, your information is handled under their privacy policies, not this one.

We never sell your personal data, and we only share it with the providers above to run the service, or where we are required to by law.

How long we keep it

We keep your information only for as long as we need it, then delete it securely. Our intended periods are below. (Detzi to confirm these before launch.)

  • Booking and payment records: up to 7 years, to meet tax and accounting obligations.
  • Course/retreat application answers and uploaded certificates: kept only while needed to assess and run the course, and deleted within 6 months of the course finishing, or sooner if you ask.
  • Contact enquiries: up to 24 months, then deleted.
  • Mailing list: until you unsubscribe, after which we remove you promptly.

Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you;
  • ask us to correct anything that is inaccurate;
  • ask us to erase your data ("the right to be forgotten");
  • object to or restrict how we use it;
  • ask for a copy of certain data to reuse elsewhere (portability); and
  • withdraw your consent at any time (for example, unsubscribe from the mailing list).

To exercise any of these, email us at info@thepeacefulsoul.co.uk and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Children

This website and our online bookings are intended for adults. We do not knowingly collect data from children through the site.

Cookies

For how we use cookies and similar technology, please see our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The version published here is the one that applies.