At Shanti Lucia, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect information when you visit our website, subscribe to our newsletter, enquire about our services or attend sound healing and other wellbeing sessions.

1. Who We Are

Shanti Lucia is a wellbeing practice operated by Lucia Cortesao in Kingston upon Thames, United Kingdom.

For enquiries about your personal information, please contact:

Email: info@shantilucia.com
Website: https://shantilucia.com

2. Information We Collect

Depending on how you interact with Shanti Lucia, we may collect:

• Contact information: Name, email address, telephone number and postal address.
• Booking and consultation information: Date of birth, emergency contact details, session preferences and relevant information about your wellbeing.
• Health information: Medical conditions, injuries, pregnancy, medications, sound sensitivities and other health considerations you choose to disclose.
• Consent records: Completed consultation forms, treatment consent declarations, electronic signatures and dates of consent.
• Newsletter information: Email address and, where provided, first name.

We only request information that is relevant to providing our services or communicating with you.

3. How We Use Your Information

We use personal information to:

• Respond to enquiries and arrange appointments.
• Assess suitability for sound healing and adapt sessions to individual needs.
• Maintain appropriate consultation and treatment records.
• Contact clients about their appointments.
• Send newsletters, event invitations and updates to people who have subscribed.
• Meet applicable legal obligations and manage legitimate business records.

Health information is used only for relevant consultation, safety and treatment-planning purposes.

We do not sell or rent personal information to third parties.

4. Legal Basis for Processing

Under UK GDPR, we process personal information using an appropriate lawful basis, depending on the purpose.

This may include:

• Contract: To arrange and provide services requested by clients.
• Legitimate interests: To manage enquiries, maintain appropriate business records and administer our practice, where those interests are not overridden by individuals’ rights.
• Consent: For optional marketing communications and other activities requiring consent.
• Legal obligation: Where processing is necessary to comply with applicable law.

Health information receives additional protection under UK GDPR because it is special-category personal data.

Where we rely on explicit consent to process health information, we will request that consent separately from consent to receive treatment. Individuals may withdraw their consent by contacting us, although withdrawal does not affect processing already carried out lawfully.

Where another lawful condition applies, we will identify and document that condition.

5. Consultation Forms and Third-Party Services

We use Tally to collect digital consultation and consent forms.

Completed forms may be stored within Tally and downloaded as PDF records for secure storage by Shanti Lucia.

We use Brevo to manage newsletter subscriptions and email communications.

These service providers may process information on our behalf under their applicable data protection arrangements.

We may also use other service providers where necessary to operate our website or deliver our services.

6. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, disclosure or misuse.

Access to confidential consultation and health records is restricted to authorised persons who need the information for legitimate purposes.

Where records are downloaded, they are stored using appropriate access controls and security measures.

We do not disclose confidential health information to other clients or use it for marketing.

7. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, insurance and record-keeping requirements.

Consultation and treatment records are reviewed and securely deleted when no longer required.

Newsletter information is retained while you remain subscribed, unless a longer period is required for a legitimate legal purpose.

8. Newsletter Consent

If you subscribe to our newsletter, we may send information about sound healing events, wellbeing services, music, meditations and related Shanti Lucia activities.

You may unsubscribe at any time using the link included in our marketing emails or by contacting info@shantilucia.com.

Newsletter subscriptions are voluntary and are not required to receive treatment.

9. Your Data Protection Rights

Under UK data protection law, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of information in certain circumstances.
• Request restriction of processing.
• Object to certain types of processing.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent.

To exercise your rights, please contact info@shantilucia.com.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to support website functionality and understand how visitors interact with our content.

Where required by law, we will request consent before placing non-essential cookies.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology or legal requirements.

The latest version will be available on our website.

12. Contact Us

For questions about this Privacy Policy or how we handle personal information, please contact:

Lucia Cortesao – Shanti Lucia
Email: info@shantilucia.com
Website: https://shantilucia.com