Privacy Policy
How Humma’s Healing collects, uses and protects your personal information.
Last updated: September 2026
Humma’s Healing (“I”, “me”) is run by Humma as a sole trader and respects your privacy. This policy explains how your personal information is handled when you visit this website, contact me or book a session. I am the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact: via the contact form or email.
Information I collect
- Enquiries: your name, email address, the session you’re interested in, who the session is for, and anything you choose to include in your message.
- Bookings: your name, contact details, the session or package booked and any information you share to help me prepare your session. For sessions for a child, this may include information provided by a parent or guardian; for animals, information about the animal and its owner.
- Session records: the written summary of your session and related correspondence.
- Payments: payments are made through PayPal. I receive confirmation of your payment with your name and email address, but do not see or store your card or bank details. PayPal’s own privacy notice applies to information you give them.
- Intake form: the details you give when booking — name, preferred name, date of birth and sex of the person receiving the session; partner, children and other household members (names, relationships and, where given, dates of birth); the issues you would like to address and how much they are affecting you; and your typed signature confirming consent. For animals, the animal’s name, type and age. Family details are used only to prepare your session.
- Technical data: the hosting provider may automatically record basic server logs (such as IP address, browser type and pages requested) for security and to keep the website running.
Information about your wellbeing
Some of what you share, or what is recorded in a session summary, may relate to your emotional or physical wellbeing. This can be treated as special category data. I only process it with your explicit consent, which you give when you book or share it with me, and you can withdraw that consent at any time.
How and why I use your information
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry | Legitimate interests / steps at your request before entering a contract |
| Providing booked sessions, summaries and follow-up | Performance of a contract; explicit consent for wellbeing information |
| Taking payment and keeping financial records | Performance of a contract; legal obligation |
| Keeping the website secure | Legitimate interests |
I do not sell your information, use it for automated decision-making, or send marketing emails without your separate consent.
Children
Sessions for children and teens are arranged with a parent or guardian, whose consent is obtained where required. Information about a child is used only to provide the session requested.
Who I share information with
I only share information where necessary with trusted service providers who help me run the business, such as my website host, email provider (Gmail) and payment provider (PayPal). They may only use your information to provide their service to me. Some providers may store data outside the UK; where this happens, appropriate safeguards are in place as required by UK data protection law.
Cookies
This website does not use advertising, analytics or tracking cookies. Fonts are hosted on this website itself, so no information is sent to font providers when you visit. If this changes, this policy will be updated and your consent requested where required.
How long I keep information
- Enquiries that don’t lead to a booking: up to 12 months.
- Client records and session summaries: up to 6 years after your last session.
- Financial records: as required by HMRC (normally 6 years).
Your rights
You have the right to request access to your information, and to ask for it to be corrected, deleted or restricted. You can also object to processing, request data portability and withdraw consent at any time. To make a request, please email me. I will respond within one month.
If you are unhappy with how your information has been handled, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. I would appreciate the chance to address your concerns first.
Keeping information secure
I take reasonable technical and organisational measures to protect your information, including secure (HTTPS) connections to this website and password-protected accounts.
Changes to this policy
This policy may be updated from time to time. The latest version will always be available on this page.