Privacy Policy

1. Who we are

For Haven Sake (“we”, “us”, “our”) is a Havening Techniques® wellbeing practice run by Marion Judd. For the purposes of UK data protection law, we are the “data controller” responsible for your personal information.

Trading name: [For Haven Sake — confirm legal/trading name]
Address: [business address, or “available on request”]
Email: marion@forhavensake.com
ICO registration: [registration number, if applicable]

2. The information we collect

We only collect information that helps us support you well. Depending on how you interact with us, this may include:

Information you give us

• Contact details — such as your name, email address and phone number when you enquire or book a discovery call.
• Your message — anything you choose to tell us in an enquiry form, email or call.
• Session information — notes relevant to your sessions, where you choose to share them (see Health information).

Information collected automatically

• Website & device data — basic technical information such as your browser type and how you use the site, collected through cookies and similar technologies (see Cookies & analytics).

3. How we use your information

We use your information to:

• respond to your enquiries and arrange your free discovery call;
• plan and provide your sessions;
• communicate with you about your appointments;
• keep appropriate records and meet our legal and insurance obligations;
• improve and maintain our website.

Under UK data protection law, we rely on the following lawful bases:

• Consent — for example, when you submit an enquiry or agree to receive communications.
• Contract — to provide the sessions you’ve asked for.
• Legal obligation — where we must keep certain records.
• Legitimate interests — to run and improve our practice in ways you’d reasonably expect, balanced against your rights.

4. Health & sensitive information

Because of the nature of our work, you may share information about your health, wellbeing or personal experiences. This is treated as “special category” data and given extra protection.

We only process this information with your explicit consent, or where another lawful condition applies, and we keep it to the minimum needed to support you safely. You are always in control of what you share, and you never have to share more than you wish to.

5. Sharing your information

We never sell your information. We only share it where necessary to run our practice, with trusted service providers who process it on our behalf under appropriate agreements. These may include:

• Website hosting — [host to confirm]
• Enquiry forms & CRM — [e.g. GoHighLevel — to confirm]
• Online booking — [e.g. Cal — to confirm]
• Email — [email provider to confirm]
• Website analytics — [e.g. Google Analytics — to confirm]
• Payments — handled separately; [payment method/provider to confirm]

We may also disclose information where we are required to by law, or to protect someone’s safety.

6. Cookies & analytics

Our website uses cookies and similar technologies to help it work properly and to understand how visitors use it. Some are essential; others (such as analytics) are only used with your consent.

You can manage your preferences at any time through your browser settings or our cookie controls. Full details are set out in our [Cookie Notice — link once published].

7. How long we keep your information

We keep your information only for as long as necessary for the purposes set out in this policy, or for as long as we’re required to by law or by our insurer.

• Enquiries that don’t lead to sessions — [retention period to confirm]
• Client session records — [retention period, typically set by your insurer]

When information is no longer needed, it is securely deleted or anonymised.

8. Keeping your information secure

We take appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access. While no method of transmission or storage is ever completely secure, we work to keep your information safe and to act quickly if anything goes wrong.

9. Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• ask us to correct anything inaccurate or incomplete;
• ask us to delete your information in certain circumstances;
• restrict or object to how we use it;
• request a copy of your information in a portable format;
• withdraw consent at any time, where we rely on it.

To exercise any of these rights, please email marion@forhavensake.com. We’ll respond within the timescales required by law.

10. International transfers

Some of our service providers may store or process information outside the UK. Where this happens, we take steps to ensure your information is protected by appropriate safeguards, as required by UK data protection law.

11. Children’s privacy

We work with children and young people, always with the involvement of a parent or guardian. Where we collect information relating to anyone under 18, we do so with appropriate consent and handle it with particular care.

12. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date. Please check back occasionally to stay informed.

13. Contact & complaints

If you have any questions about this policy or how we handle your information, please contact us at marion@forhavensake.com.

If you’re unhappy with how we’ve handled your information, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk. We’d appreciate the chance to put things right first, so please do come to us before you approach the ICO if you can.