privacy policy

Privacy Policy

Effective Date: September 2026

This Privacy Policy explains how your personal data is handled when you use this website which operates on the Payhip platform.

For Visitors: Browsing the site does not require you to provide personal details. Payhip’s servers automatically process basic technical data (like your IP address) solely to display the website securely on your screen. No tracking cookies are used.
For Buyers: When you buy a digital product or course basic information is collected to fulfill your order.

To comply with the GDPR and UK GDPR, this policy outlines my practices as an independent Data Controller.

1. Information I Collect

When you buy from this website, I receive basic information necessary to process your request, such as your name and email address.

Behind the scenes, the Payhip platform also automatically processes basic background data (like your IP address and country location) solely to load the website on your screen, protect the store against fraud and calculate correct location taxes.

Please note: All financial transactions are handled securely by PayPal. I do not see or store your credit card or bank details.

2. Lawful Basis for Processing Data

Under the GDPR, I process your data using the following legal grounds:

Contract: To deliver your ebooks, manage your course dashboard and fulfill your purchase.
Legitimate Interests: To ensure the website loads properly, maintain site security and reply to your customer support emails.
Legal Obligation: To keep financial and tax records required by law.

3. How I Use Your Information & Tracking

I only use your details to deliver your digital purchases, provide customer support or reply to your emails.

No Invasive Tracking: I do not track your browsing habits. All third-party marketing trackers, tracking pixels, and advertising cookies are disabled.
Analytics: This site uses only Payhip’s built-in, first-party analytics system.

4. Data Sharing

I do not sell or share your personal information for marketing purposes. Your data is handled strictly behind the scenes by my trusted service providers (Data Processors):

Payhip: Hosts the store, manages user accounts and delivers your digital files.
PayPal: Secures and processes all checkouts and payments.

5. Data Retention

I store your data only as long as necessary to provide your products and satisfy legal guidelines:

Invoices & Tax Records: Retained for the minimum duration mandated by law to prove business revenue.
Support Emails: Kept temporarily until your query is fully resolved.

6. Your Legal Rights (UK & EU Residents)

If you live in the UK or the EU, you have the right to request the following regarding your data:

Access: Receive a copy of the data I hold about you.
Rectification: Fix any incorrect or misspelled information.
Erasure: Ask to delete your data (except what I must legally keep for tax records).
Restriction: Ask to pause how your data is used while a dispute is resolved.
Objection: Object to data used under "legitimate interests" (like support emails).
Portability: Request a digital copy of your data to take elsewhere.

To use any of these rights, email me at the address below. I will respond within 30 days free of charge

kath@solemammareflexology.co.uk

Sole Mamma Reflexology

Updated September 2026

The type of personal information I collect

To give professional reflexology and other treatments, I will need to ask for and keep information about your health. I will only use this for informing reflexology and other treatments and any advice I give because of your treatment. The information to be held is:

Your contact details

Medical history and other health-related information

Treatment details and related notes

How I get the personal information and why I hold it

Most of the personal information I process is provided directly by you in your client consultation form and during subsequent treatments for one of the following reasons:

For informing reflexology and/or other treatments and any advice I give because of your treatment.

For the purpose of sending reminders for appointments

I use the information that you have given me to:

Provide you with the best possible treatment options, support and advice.

This information may be shared with a third party if there is a safeguarding concern or when responding in an emergency which poses risk to your life or health

Lawful Basis for holding and using Client Information

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis I rely on for processing this information are:

Contractual obligation: To fulfill our service agreement to provide you with treatments.

I have a legal obligation:

‘Claims occurring’ insurance: (records to be kept for 7 years after last treatment)

Law regarding children’s records (records to be kept until the child is 25 or if 17 when treated, then 26)

CNHC requirements to retain information for 8 years

I have a legitimate interest to safely tailor your sessions and maintain insurance [i.e.my requirement to retain the information to provide you with the best possible treatment options and advice]

As I hold special category data (i.e. health related information), the additional condition under which I hold and use this information is: for me to fulfil my role as a health care practitioner bound under the AoR Confidentiality as defined in the AoR Code of Practice and Ethics.

Protecting your Personal Data - How I store your personal information

I am committed to ensuring that your personal data is secure. To prevent unauthorised access or disclosure, I have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information I collect from you. I will contact you using the contact preferences you have given me.

I keep your personal information for the time period stated above. After this time I will then dispose your information by securely destroying them to comply with UK GDPR.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact me at kath@solemammareflexology.co.uk or kathmurphyreflexology@gmail.com or call 07961594315 or write to Sole Mamma Reflexology, 41 George Jackson Ave, Holmes Chapel, CW47GQ if you wish to make a request.

THERAPIST’S RIGHTS

If you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you

Your therapist must keep your records of treatment for a certain period as described above, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed

Your therapist can move their records between their computers and IT systems without your permission if your details are protected from being seen by others.

Should you have a concern re data protection please click the link below:

https://docs.google.com/document/d/1i5QTHK5q2n9DzGu5V48vVviOFPpdek56Ly2zGMHGSec/edit?usp=drive_link