Privacy Policy

Privacy Policy — Laura Hughes Therapies

Last updated: 31st December 2025

This Privacy Policy describes how personal information is collected, used, stored, and shared when you visit laurahughestherapies.co.uk (the “Site”), make contact, or purchase products or services.


1. Data Controller

Laura Jayne Hughes
Registered with the Information Commissioner’s Office (ICO)
Registration Number: ZA191735
ICO Register: https://ico.org.uk/ESDWebPages/Entry/ZA191735

Website: laurahughestherapies.co.uk
Contact Email: hello [@] laurahughestherapies.co.uk (remove spaces and brackets)


2. Scope of This Policy

This policy applies to:

  • Website browsing
  • Enquiries or bookings for services
  • Purchases in the online shop
  • Any other interaction with the Site or business operations

Your privacy matters; we are committed to protecting your personal data in line with UK GDPR and data protection law.


3. Personal Information We Collect

A. Information You Provide Directly

When you contact us, book services, book appointments, or interact via forms or email, we may collect:

  • Name
  • Contact details (email, phone)
  • Booking details
  • Any other information you share to arrange services

If you decide to engage in services after initial contact, your data will be stored according to your Service Agreement.


B. Online Shop and Purchases

When you make a purchase through the Site, we collect:

  • Billing and shipping address
  • Email address
  • Phone number
  • Payment information (handled securely by third-party providers)
  • Optional account credentials (if you create an account)

While browsing and using the Site:

  • Products viewed
  • Cart contents via cookies
  • IP address, browser type, location
    are collected to provide shop functionality and estimate shipping/taxes.

C. Automatic Device Information

We automatically collect certain technical information about your device, such as:

  • IP address
  • Browser and device type
  • Time zone
  • Pages viewed and interaction data
    via cookies, log files, and similar technologies.

D. Comments and Anti-Spam

If you leave comments or reviews, we may collect:

  • Comment text
  • Commenter name and email
  • IP address
  • Browser user agent

We use the Akismet Anti-Spam service to protect the Site, which may process this data for spam filtering.


4. How We Use Your Personal Data

We may use personal information to:

  • Respond to enquiries and messages
  • Arrange appointments and services
  • Deliver products you’ve ordered
  • Send order confirmations and service details
  • Process refunds and support requests
  • Improve our services and website
  • Send marketing communications (only with consent)

We also use some information to:

  • Prevent fraud
  • Comply with legal obligations (tax, accounting)

5. Legal Basis for Processing

Under UK GDPR, data is processed on the basis of:

  • Your consent
  • Performance of a contract
  • Legal obligation
  • Legitimate interests (e.g., improving the website, preventing fraud)

6. Who Has Access to Your Information

Authorized team members may access personal data where necessary to:

  • Fulfil orders
  • Provide services
  • Process refunds or support requests

Access is limited to what is essential for those tasks.


7. Sharing With Third Parties

We share information only when necessary, for example:

  • With payment processors (e.g. PayPal) to complete transactions
  • With hosting or analytics providers
  • To comply with legal requirements

Payments

Payments made through the online shop are processed securely using WooPayments, which is powered by Stripe. WooPayments allows customers to pay using a range of payment methods (such as debit or credit cards and other supported payment options).

When processing a payment, certain personal information (including your name, billing details, and purchase total) is shared with WooPayments and Stripe solely for the purpose of completing the transaction and preventing fraud.

Payment details are processed securely and are not stored on our website servers.

Booking and Scheduling

We use Calendly to manage some bookings and appointments. Calendly may collect personal information such as your name, email address, time zone, and booking preferences. This information is used solely for scheduling and managing appointments.


8. Data Retention

We retain data:

  • Until an inquiry is actioned and no longer needed
  • For 6 years to meet accounting and tax requirements
  • For as long as needed to fulfil services and legal obligations
  • Comments or reviews may remain unless removed

9. Cross-Border Transfers

Some data (e.g., payment processing or hosting) may be transferred outside the UK or EU. We rely on appropriate safeguards for lawful transfer.


10. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion or restriction
  • Object to processing
  • Withdraw consent
  • Lodge a complaint with the ICO

To exercise these rights, contact:
hello [@] laurahughestherapies.co.uk


11. Cookies and Tracking

This Site uses cookies. By continuing to use the Site, you consent to cookies as described in our Cookie Policy.


12. Changes to This Policy

We may update this policy. The latest version is published on the Site.


13. Contact

Email: hello [@] laurahughestherapies.co.uk
Website: laurahughestherapies.co.uk