Privacy policy.

Last updated: 9 September 2025

Welcome to Hearth Centre (the “Site,” “we,” “us,” or “our”). We are committed to protecting your privacy and respecting your rights under the EU General Data Protection Regulation (GDPR).

This Privacy Policy outlines how we collect, use, store, and protect your personal data when you interact with our website and services.

1. Who We Are

Hearth Centre is a trauma-informed, queer-friendly healing practice based in Greece, operated by Kaira (Shamanic Practitioner, Reiki Teacher, and CI Student Practitioner).

Our website is hosted by Squarespace, and we use Acuity Scheduling (a Squarespace company) for session bookings.

If you have questions about this policy, you can contact us here.

2. What Personal Data We Collect

We may collect and process the following data:

  • When You Visit the Site:

  • IP address and browser type

  • Pages visited and time spent

  • Cookies and analytics data (only if you consent)

When You Book a Session:

  • Full name

  • Email address

  • Phone number (if provided)

  • Information you choose to share in client forms (e.g., informed consent forms, health disclosures)

  • Payment information (processed securely via third-party services; not stored on our servers)

When You Contact Us:

  • Your name and email address

  • The contents of your message

3. How We Use Your Data

We only process your personal data for the following purposes:

  1. To provide and manage healing services and sessions

  2. To confirm and schedule appointments

  3. To respond to your questions and communications

  4. To comply with our legal obligations

  5. To improve our website and offerings (analytics, only with your consent)

  6. To send you follow-up information about your session, if requested

We do not use your information for automated decision-making or profiling.

4. Legal Basis for Processing

Under the GDPR, we rely on one or more of the following legal grounds to process your data:

  1. Your consent (e.g., contact forms, analytics cookies)

  2. Contractual necessity (e.g., managing bookings and delivering services)

  3. Legal obligations (e.g., accounting or tax requirements)

  4. Legitimate interests (e.g., improving services, unless those interests are overridden by your rights)

5. How We Store and Protect Your Data

Your data is stored securely using:

Squarespace (hosting and forms)

Acuity Scheduling (appointment system)

Google Drive / encrypted storage for client session notes

We use reasonable organizational and technical safeguards to protect your data and keep it confidential.

We do not sell, rent, or share your data with third parties except as required by law or necessary for providing services (e.g., payment processors).

6. International Data Transfers

Since we use cloud-based tools, your data may be transferred outside the EU (e.g., to servers in the U.S.). We ensure all tools used are GDPR-compliant and offer adequate safeguards, such as Standard Contractual Clauses (SCCs).

7. Data Retention

We retain personal data only for as long as needed:

Client records: Up to 7 years for legal and tax compliance

Session notes (if collected): Retained securely as long as relevant or required

Mailing list/contact info: Until you withdraw consent

You may request deletion at any time unless legal obligations prevent it.

8. Cookies & Tracking

We use cookies for essential site functionality and (with your consent) for analytics. You can manage your cookie preferences via the cookie banner or browser settings. For more, see our Cookies Policy.

9. Your Rights (under GDPR)

You have the right to:

Access your personal data

Correct inaccurate data

Request deletion (“right to be forgotten”)

Restrict or object to processing

Data portability (to another service)

Withdraw consent at any time

File a complaint with your Data Protection Authority (e.g., Hellenic DPA)

To exercise your rights, email us here.

10. Changes to This Privacy Policy

We may update this policy from time to time to reflect legal or service changes. Updates will be posted on this page with a revised “Last updated” date.

11. Questions or Concerns?

I’m committed to ethical, respectful handling of your information. If you have any concerns, I’d be happy to address them.

Contact Page | Based in Greece