PRIVACY POLICY
Your information
A plain-English guide to what information is collected, why it is used and the choices you have.
Your data,
without the fog.
ON THIS PAGE
01 WHO IS RESPONSIBLE FOR YOUR INFORMATION
02 INFORMATION COLLECTED
03 WHY IT IS USED AND THE LAWFUL BASIS
04 HEALTH, ACCESSIBILITY AND OTHER SENSITIVE DETAILS
05 HOW INFORMATION IS COLLECTED
06 WHO INFORMATION MAY BE SHARED WITH
07 INTERNATIONAL TRANSFERS AND SECURITY
08 HOW LONG INFORMATION IS KEPT
09 YOUR RIGHTS, COMPLAINTS AND UPDATES
LAST UPDATED · 18 SEPTEMBER 2026
This notice explains how Karen Hyatt, trading as Karen Hyatt Sound Healing & Wellbeing, handles personal information under UK data protection law. It is designed to be read alongside the website’s cookie settings and any extra information shown when data is collected.
01
Who is responsible for your information
Karen Hyatt, trading as Karen Hyatt Sound Healing & Wellbeing, is the data controller for the personal information described here. Contact: karenhyatt25@gmail.com. This notice applies when you use the website, make an enquiry, book an experience, join a mailing list or otherwise communicate with Karen.
02
Information collected
This may include your name, email address, telephone number, booking and attendance details, messages and enquiry information, marketing preferences, accessibility requests, feedback, testimonials and correspondence. The website may also collect technical information such as your IP address, device, browser, pages visited and cookie choices. Payment card details are normally handled directly by the payment provider rather than stored by Karen.
03
Why it is used and the lawful basis
Information is used to answer enquiries, manage bookings, take payment, deliver events, provide customer support and communicate important changes because this is necessary to take steps at your request or perform a contract. Records may be kept to meet tax, accounting, safeguarding or other legal duties. Limited information may be used for security, service improvement and defending legal claims where Karen has a legitimate interest that does not override your rights. Marketing is sent only where consent is given or another lawful route applies, and you can opt out at any time.
04
Health, accessibility and other sensitive details
Please share only information that is relevant to taking part safely or arranging reasonable adjustments. Health information can be special category data. Where Karen needs to use it, this will usually be with your explicit consent; in a genuine emergency it may be used to protect vital interests or as otherwise permitted by law. It will not be used for unrelated marketing and access will be limited.
05
How information is collected
Information is collected directly when you complete the contact form, email, message, book, pay, attend an event, submit feedback or join a mailing list. It may also come from someone making a group booking on your behalf, from a venue or event partner where appropriate, and automatically through website cookies and similar technology. If another person gives Karen your details, they should have permission to do so.
06
Who information may be shared with
Information may be shared only where needed with website and hosting providers such as Wix, booking and payment providers, email and cloud-storage services, event venues, trusted event collaborators, professional advisers, insurers, and public authorities where legally required. These organisations may act as processors or as separate controllers under their own privacy notices. Personal information is not sold.
07
International transfers and security
Some service providers may store or access information outside the United Kingdom. Where this happens, Karen will rely on an adequacy decision, approved contractual protections or another lawful safeguard where required. Reasonable technical and organisational measures are used to protect information, but no internet service can promise absolute security.
08
How long information is kept
Enquiries that do not lead to a booking are normally kept for up to 12 months. Booking, payment and accounting records may be retained for up to six years after the relevant financial year. Marketing details are kept until you unsubscribe or the list is no longer used; a minimal suppression record may be kept so your preference is respected. Health or accessibility details are kept only as long as needed for the event, follow-up, safety or a legal claim. Cookie duration is shown in the cookie settings where available.
09
Your rights, complaints and updates
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, objection, portability, or withdrawal of consent. Email karenhyatt25@gmail.com to make a request. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, although Karen would appreciate the chance to help first. This notice may be updated when services, suppliers or the law change; the latest version and date will appear on this page.
A very human approach to privacy.
Questions or requests about your information can be sent directly to Karen.