Privacy Policy | Quantum Healing Therapies

1. Data Controller

Sam ("we", "us", "our") trading as Quantum Healing Therapies is the data controller for personal data collected through this website.

Email: contact@samblaney.com

2. What Data We Collect

We may collect the following personal data:

Contact information: name, email address, phone number: submitted via our contact or booking forms
Health information: details you voluntarily share about your physical or emotional wellbeing to help us tailor your healing session
Technical data: IP address, browser type, pages visited: collected automatically via cookies
Payment data: processed securely by our third-party payment provider; we do not store card details

3. Lawful Basis for Processing

We process your data under the following lawful bases (UK GDPR Article 6):

Consent: when you submit a contact form, subscribe to communications or accept cookies
Contractual necessity: to fulfil a booking or deliver a service you have purchased
Legitimate interest: to improve our website and services

Where we process special category health data, we rely on your explicit consent (Article 9(2)(a)).

4. How We Use Your Data

To respond to enquiries and schedule sessions
To deliver healing sessions (in-person or online)
To create bespoke Hypno-Heal recordings tailored to you
To send occasional updates or resources (only with your consent)
To improve our website experience

5. Cookies

This website uses essential cookies to remember your cookie consent preference. We may also use analytics cookies (e.g. Google Analytics) to understand how visitors use the site. You can accept or decline non-essential cookies via the banner displayed on your first visit.

6. Data Sharing

We do not sell, rent or share your personal data with third parties for marketing purposes. Data may be shared with:

Payment processors: to complete transactions securely
Email service providers: to deliver communications you have opted into
Website hosting providers: for technical delivery of this site

All third-party processors are required to handle your data in accordance with UK GDPR.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected:

Contact form submissions: up to 12 months
Client session records: up to 6 years (in line with professional insurance requirements)
Financial records: up to 7 years (HMRC requirements)

8. Your Rights

Under UK GDPR, you have the right to:

Access: request a copy of the personal data we hold about you
Rectification: ask us to correct inaccurate data
Erasure: ask us to delete your data ("right to be forgotten")
Restriction: ask us to limit how we process your data
Portability: receive your data in a structured, commonly used format
Object: object to processing based on legitimate interest
Withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email contact@samblaney.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect data from minors without parental or guardian consent. Sessions for under-18s require a parent or guardian to provide consent and be present (or available) during the session.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this page periodically.