Privacy Policy – Intuitive Wisdom of the Soul
Last updated: 14 October 2026
This privacy policy explains how I collect, use and look after your personal information when you visit my website, join my mailing list, or book a session with me.
I am Robyn Riddett, a Clairvoyant, Soul Transformation Therapist, and Yoga Teacher trading as Intuitive Wisdom of the Soul. I am a sole trader based in London, and I am the "controller" of your personal information. That means I decide how and why it is used, and I am responsible for looking after it.
You can contact me about anything in this policy:
• Email: rlriddett@me.com
• Post: LG2, 90 St Pancras Way, London, NW1 9DQ
• Website: www.intuitivewisdomofthesoul.com
I have not appointed a Data Protection Officer, so please contact me directly.
What personal information I collect
I only collect what I need. Depending on how you use my services, this may include:
• Contact details
Examples: Name, email address, phone number.
When I collect it: When you join my mailing list, make an enquiry or book.
• Booking and payment details
Examples: Session type, dates, payment confirmation.
When I collect it: When you book and pay. I do not see or store your full card details; these are handled by Square Payments.
• Reading information
Examples: Your full birth name and date of birth, [time and place of birth], and the questions or themes you bring.
When I collect it: When you book a Soul Plan Reading, astrology-based or intuitive reading.
• Health and wellbeing information
Examples: Anything you choose to share about your physical, emotional or mental wellbeing.
When I collect it: Before or during a healing session or reading (see “Health and wellbeing information” below).
• Your preferences
Examples: Which topics you would like to hear about.
When I collect it: When you join my mailing list.
• Website information
Examples: Pages visited, device and browser type.
When I collect it: When you visit my website, through cookies (see “Cookies”).
• Feedback and testimonials
Examples: Your comments and, if you agree, your name or initials.
When I collect it: When you send me feedback.
You do not have to give me any of this information. However, I cannot book a session without your contact details, and I cannot complete a Soul Plan Reading without your full birth name.
Why I use your information, and the lawful basis
The law requires me to have a lawful basis for each way I use your information. These are mine:
• Arranging, delivering and following up your sessions, readings and retreats
Lawful basis (UK GDPR Article 6): Contract — I need it to provide the service you have booked.
• Taking payment and keeping business and tax records
Lawful basis (UK GDPR Article 6): Contract, and legal obligation (HMRC record-keeping rules).
• Sending my newsletter and news about my services
Lawful basis (UK GDPR Article 6): Consent — only if you have opted in.
• Replying to your enquiries
Lawful basis (UK GDPR Article 6): Legitimate interests — responding to people who contact me.
• Keeping my website working and secure
Lawful basis (UK GDPR Article 6): Legitimate interests — running a safe, working website.
• Publishing testimonials
Lawful basis (UK GDPR Article 6): Consent — only with your permission.
Where I rely on legitimate interests, I have considered whether your rights outweigh my interests, and I only use your information in ways you would reasonably expect.
I do not make any decisions about you based solely on automated processing, and I do not use profiling.
Health and wellbeing information
Information about your physical or mental health is treated as "special category" information under UK data protection law, and needs extra protection.
I only collect health and wellbeing information when you choose to share it to help me tailor a healing session or reading. I will ask for your explicit consent before I record it, usually on my client booking form. This is my lawful basis under UK GDPR Article 9(2)(a).
You can withdraw this consent at any time by emailing me. If you do, I will delete those notes, although this may limit how I can support you in future sessions.
My sessions are complementary and are not a substitute for medical care. I do not share your health information with anyone unless you ask me to, or unless I am required to by law or need to act to protect someone's life.
My mailing list
I only send you my newsletter and news about readings, workshops and retreats if you have opted in by ticking the box on my sign-up form. I will email you about once a month.
Every email includes an unsubscribe link, or you can simply reply and ask me to remove you. I will stop emailing you promptly. I keep a short note of your email address on a "do not contact" list so that I do not accidentally add you again.
I will never sell, rent or trade your information, and I will never share it with other businesses for their own marketing.
Who I share your information with
I use a small number of trusted service providers to run my business. They only process your information on my instructions and must keep it secure:
• Squarespace
What they do: Hosts my website, forms and email campaigns.
• Squarespace
What they do: Sends my newsletter.
• Square Payments
What they do: Processes payments.
• Acuity Scheduling
What they do: Manages appointments.
• Zoom / Microsoft (Teams)
What they do: Hosts online sessions.
I may also share information if the law requires it, for example with HMRC.
International transfers
Some of these providers are based in, or store data in, the United States or other countries outside the UK. Where this happens, the transfer is protected by a safeguard recognised under UK law:
• Squarespace (website, forms, email campaigns and Squarespace Payments)
Safeguard used for UK personal data: The UK Extension to the EU-US Data Privacy Framework, with the UK Addendum to the EU Standard Contractual Clauses as a back-up.
• Acuity Scheduling (a Squarespace company)
Safeguard used for UK personal data: The same safeguards as Squarespace.
• Square
Safeguard used for UK personal data: The UK Addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement.
• Zoom
Safeguard used for UK personal data: The UK Extension to the EU-US Data Privacy Framework, and standard contractual clauses where needed.
• Microsoft (Teams)
Safeguard used for UK personal data: The UK Extension to the EU-US Data Privacy Framework, and standard contractual clauses where needed.
You can ask me for more details.
How long I keep your information
I keep your information only for as long as I need it:
• Mailing list details
How long I keep it: Until you unsubscribe. Your email address then stays on my “do not contact” list.
• Enquiries that do not lead to a booking
How long I keep it: 12 months after our last contact.
• Client records and session notes
How long I keep it: 2 years after your last session, unless you ask me to delete them sooner.
• Health and wellbeing notes
How long I keep it: Until you withdraw consent, or 2 years after your last session, whichever is sooner.
• Payment and booking records
How long I keep it: At least 5 years after the 31 January tax return deadline for the relevant tax year, as HMRC requires (GOV.UK).
• Testimonials
How long I keep it: Until you ask me to remove them.
When I no longer need your information, I delete it securely.
Your rights
Under UK data protection law you have the right to:
• Access a copy of the information I hold about you
• Correct information that is wrong or incomplete
• Erase your information in certain circumstances
• Restrict how I use your information in certain circumstances
• Data portability: receive information you gave me in a format you can pass to someone else, where I rely on consent or contract
• Withdraw consent at any time, where I rely on consent. This is as easy as unsubscribing or emailing me, and does not affect anything I did before you withdrew it
Your right to object
You have the right to object at any time to me using your information for direct marketing, and I will stop. You can also object where I rely on legitimate interests, and I will stop unless I have a compelling reason to continue.
To use any of these rights, email me at rlriddett@me.com. I will respond within one month. There is usually no charge.
Cookies
My website uses cookies, which are small files stored on your device. Some are essential to make the website work, such as keeping it secure. Others, such as analytics cookies that tell me which pages are popular, are only used if you agree to them through the cookie banner when you first visit.
You can change your choice at any time through the cookie settings link at the bottom of my website, or by changing your browser settings. For details of the cookies Squarespace sets, see Squarespace's Cookie Policy.
Keeping your information safe
I take sensible steps to protect your information, including strong passwords and two-step verification on my accounts, keeping devices up to date, and keeping any paper notes locked away. Only I can access client records. If there is ever a data breach that puts you at risk, I will tell you and the ICO where the law requires.
Complaints
If you are unhappy with how I have handled your information, please contact me first at rlriddett@me.com. I will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated, and tell you the outcome.
If you are still not satisfied, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
Changes to this policy
I may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.