Legal

Privacy policy

How your personal information is collected, used, and protected when you use this website and book a session.

Last updated: 7 July 2026

Sue Cain ("I", "my", "me") is committed to protecting and respecting your privacy. This policy explains how I collect, use, and safeguard your personal information when you visit suecain.co.uk ("this website") or book a session with me.

I am a sole trader based in Bolton, United Kingdom. I am the data controller for the personal information you provide. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information I collect

Booking information: When you book a session or sound bath, I collect your name, email address, phone number, and any details you provide in the booking or intake form (such as relevant health information to ensure a safe session).

Payment information: Payments are processed securely through Stripe. I do not see or store your full card details — Stripe handles this. I receive confirmation of your payment, your name, and your billing postcode.

Communication records: If you contact me via the contact form, email, or phone, I keep a record of that correspondence to respond to your enquiry and provide my service.

Technical information: When you visit this website, basic technical information may be collected automatically, such as your IP address, browser type, and the pages you visit. See my Cookie Policy for details.

2. How I use your information

  • To provide the sessions and services you have booked
  • To process payments and issue receipts
  • To send booking confirmations and appointment reminders
  • To respond to your enquiries and communicate with you about your booking
  • To keep accurate records for my professional practice
  • To meet legal, accounting, and tax obligations

3. Legal basis for processing

I process your personal information under the following lawful bases:

  • Contract: to set up and deliver your booking and process payment
  • Legal obligation: to keep records required for tax and accounting
  • Legitimate interests: to respond to enquiries and run my practice effectively
  • Consent: where you have given consent for specific uses, such as marketing communications

4. Who I share your information with

I do not sell or rent your personal information. I share it only with the following trusted providers, strictly to operate my practice:

  • Stripe — secure payment processing
  • Google — calendar and email infrastructure for booking management
  • Resend — email delivery for confirmations and reminders
  • My website hosting platform — to store and display this website and its data securely

Each provider acts as a data processor on my behalf and is bound by contractual obligations to keep your data secure and confidential.

5. How long I keep your information

I retain client booking and session records for as long as necessary to provide my service and meet legal and accounting requirements (typically six years). Marketing consent records are kept until you withdraw consent. You may ask me to delete your information earlier where legally permissible (see your rights below).

6. Your rights under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — to see what data I hold about you
  • Right to rectification — to correct inaccurate or incomplete data
  • Right to erasure — to request deletion of your data ("right to be forgotten")
  • Right to restrict processing — to limit how I use your data
  • Right to data portability — to receive your data in a usable format
  • Right to object — to object to certain processing
  • Right to withdraw consent — at any time, where processing relies on consent

To exercise any of these rights, please contact me using the details below.

7. Security

I take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. All data is stored securely through my hosting platform and trusted third-party providers. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.

8. Links to other websites

This website may contain links to third-party websites (such as social media). I am not responsible for the privacy practices or content of those websites. Please review their privacy policies before submitting personal information to them.

9. Changes to this policy

I may update this policy from time to time. Any changes will be posted on this page with an updated revision date. I encourage you to review this page periodically.

10. Contact me

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact me:

  • By email: through the contact page
  • By post: available on request

If you are unhappy with how I handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.