Privacy Policy | Soul Tuning

Soul Tuning Privacy Policy

Who I am (Controller)

Soul Tuning is a trading name of Tina Sayer.

I am the data controller for the personal information described in this policy.

Email: tina@soultuning.studio
Correspondence address: Unit 166501, PO Box 7169, Poole, BH15 9EL

The personal information I collect

I may collect and use the following personal information:
your name, email address, phone number, and booking details;
information you choose to share in connection with a session, such as your goals, preferences, sensitivities, and relevant wellbeing or health-related information;
payment and transaction information needed for purchases and receipts. I do not see or store full card numbers;
records of enquiries or communications you send to me;
website security, anti-spam, and basic technical log information;
your name and email address if you subscribe to my mailing list

How I collect your information

I collect personal information directly from you when you:
contact me through my website, email, or other channels;
book or request a session;
make a payment;
join my mailing list;
provide information during or before a session.
I may also receive limited technical information automatically through my website, such as security logs and cookie-related data.

Why I use your information and the legal bases I rely on

I use your information to respond to enquiries. The lawful basis for this is legitimate interests.
I use your information to book, confirm, and deliver sessions or services. The lawful basis for this is contract.
I use your information to process payments and keep accounting records. The lawful basis for this is contract and legal obligation.
I use your information to send service-related messages, such as confirmations, reminders, updates, or follow-up information connected to a booking. The lawful basis for this is contract and, where appropriate, legitimate interests.
I use your information to send newsletters or optional marketing updates where you have chosen to receive them. The lawful basis for this is consent. You can withdraw your consent at any time by unsubscribing or contacting me.
I use your information to maintain website security, prevent spam, and protect my services. The lawful basis for this is legitimate interests.
If you choose to share wellbeing or health-related information, this may be special category data. Where I process it, I do so only where necessary in connection with your session, relying on an appropriate Article 6 lawful basis together with Article 9 explicit consent for the special category element.

Who I share your information with

I do not sell or rent your personal information.

I may share your information with trusted service providers where necessary to run my business, for example:

Wix, for website hosting, forms, bookings, and related website services;
Stripe and/or Wix Payments, for payment processing;
email or newsletter providers, where used to send communications you have asked to receive;
professional advisers or public authorities where reasonably necessary or required by law.

Some providers may process your information as my processor, acting on my instructions. In some cases, a provider such as a payment processor may also act as an independent controller for some of its own compliance and operational purposes.

International transfers

Some of my service providers may process personal information outside the UK. Where that happens, I will make sure appropriate safeguards are in place to protect your information.

How long I keep your information

I keep personal information only for as long as reasonably necessary for the purposes set out in this policy.

In general:

booking records and session-related records: up to 7 years where needed for business administration, record-keeping, legal, or tax purposes;
enquiry emails: for as long as needed to deal with your enquiry and for a reasonable period afterwards;
marketing data: until you unsubscribe, withdraw consent, or ask me to delete it, unless I need to retain limited information to meet a legal obligation or keep a suppression record;
payment and transaction records: for as long as required by tax and accounting law.

Your data protection rights

Under UK data protection law, you may have the right to:

access the personal information I hold about you;
ask for incorrect information to be corrected;
ask for your information to be erased;
ask for processing to be restricted;
object to certain processing;
withdraw consent where I rely on consent;
ask for transfer of your information in some circumstances.

To exercise any of these rights, please contact me at tina@soultuning.studio.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how I use your information.

Children

My website and services are not intended for children under 18. I do not knowingly collect personal information from children. If you believe a child has provided personal information to me, please contact me so I can take appropriate steps.

Security

I use appropriate technical and organisational measures to help protect personal information, such as secure hosting, access controls, and encryption in transit where applicable. Payment information is processed through third-party payment providers using their own security measures.