Privacy Policy

1. Who we are

This website is operated by C L Gerrard Ltd, trading as The Emotional Healing Space. We are the data controller for the personal information collected through this website.

You can contact us at: claire@theemotionalhealingspace.com

2. What data we collect

When you use our contact form, we collect:

• Email address (required) - to respond to your enquiry
• Phone number (optional) - if you choose to provide it
• Your message (required) - the content of your enquiry
• Your IP address - processed automatically for security and spam prevention when you submit the form (see section 5)

We do not use cookies for analytics or tracking. Cloudflare, our hosting and security provider, may set strictly necessary technical cookies (such as __cf_bm and a Turnstile challenge cookie) to protect this website and the contact form from abuse. These cookies are strictly necessary and do not require your consent.

3. How we use your data

We use your information solely to respond to your enquiry and, where appropriate, arrange a session or consultation. We do not use it for marketing purposes, and we do not sell or share it with third parties except as described in this policy.

4. Legal basis

We process your data on the basis of legitimate interests (Article 6(1)(f) UK GDPR), specifically, responding to enquiries from prospective clients, and protecting this website and contact form from spam and abuse.

Where your message contains information about your health or wellbeing, that constitutes special category data, processed under Article 9(2)(h) UK GDPR (provision of healthcare and wellbeing services).

5. Data processors

Your contact form submission is handled entirely by Cloudflare, which provides all of the infrastructure behind this website:

• Hosting & network - Cloudflare hosts this website and provides security and performance infrastructure. Your data passes through Cloudflare's network.
• Cloudflare Turnstile - a privacy-focused alternative to CAPTCHA that protects the contact form from spam and bots. When you submit the form, your IP address and basic browser signals are checked by Turnstile to confirm you are a genuine visitor.
• Cloudflare Email Routing - delivers your enquiry to our inbox. Your submission is processed within Cloudflare's network and is not sent to any other third-party form or email provider.

6. How long we keep your data

Enquiry emails are retained for up to 2 years, after which they are permanently deleted. Where an enquiry leads to a client relationship, records are retained in line with our professional and legal obligations.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to how we process your data
• Receive your data in a portable format

To exercise any of these rights, email claire@theemotionalhealingspace.com . We will respond within one calendar month.

8. Complaints

If you have concerns about how we handle your personal data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or call 0303 123 1113.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent version.