1. Your Privacy Matters

This Privacy Policy explains how I collect, use, and protect your personal data in line with the General Data Protection Regulation (GDPR) and Irish data protection laws. It applies to all interactions, including my website, newsletter, client sessions, workshops, and events.

2. What Information Do I Collect?

I may collect and store the following personal data:

• Contact details: Name, email address, phone number

• Session information: Notes from coaching, healing, or other client work

• Booking details: Date, time, service type, and payment info (via third-party processor)

• Newsletter sign-up: Email address and consent

• Workshop registration: Name, email, relevant health info (if voluntarily shared)

• Technical data: IP address, browser type, pages visited (via website analytics tools)

3. How I Use Your Information

Your personal data is used to:

• Communicate with you regarding services or offerings

• Deliver sessions, workshops, and email newsletters

• Send resources like the free gratitude workshop

• Respond to enquiries or requests

• Keep basic business records for legal and tax reasons

• Improve the website experience (using analytics)

4. Legal Basis for Processing

I collect and process your data based on:

• Your consent (e.g., newsletter sign-up)

• Performance of a contract (e.g., when you book a session or workshop)

• Legal obligations (e.g., tax records)

• Legitimate interests (e.g., website improvements, client support)

You may withdraw your consent at any time by contacting me or unsubscribing from emails.

5. How Your Data Is Stored

Your data is securely stored through:

• Encrypted devices and password-protected systems

• Reputable third-party services (e.g., payment processors, email platforms)

• Limited access to only necessary persons (just me, unless otherwise stated)

I do not share, sell, or rent your data to any third parties for marketing purposes.

6. How Long Will I Keep Your Data?

• Newsletter subscribers: Until you unsubscribe

• Clients and session records: Up to 7 years (for legal/accounting compliance)

• Workshop attendees: Up to 3 years after the event

• Website data (analytics): Typically anonymised and retained for the short term

7. Your Rights Under GDPR

You have the right to:

• Access the data I hold about you

• Request corrections or updates

• Request erasure (right to be forgotten)

• Withdraw consent at any time

• Object to or restrict processing

• File a complaint with the Irish Data Protection Commission (www.dataprotection.ie)

To exercise any of these rights, please email me at support@heartalchemyinstitute.com

8. Cookies and Website Analytics

My website may use cookies and analytics tools to enhance the user experience. You will be notified and asked to consent when you first visit the site. You can disable cookies via your browser settings.

9. Third-Party Services

I use trusted third-party providers for things like:

• Email marketing (e.g., MailerLite, Mailchimp, etc.)

• Payment processing (e.g., Stripe, PayPal)

• Booking software (if applicable)

These providers are GDPR-compliant and only access data necessary to deliver their service.

10. Updates to This Policy

This policy may be updated periodically to reflect changes in law or operational requirements. You will be notified of any significant updates via email or on the website.