Data Collected

The Data Protection Act 1998 (DPA) defines personal information as information that can be used to identify an individual. Each individual can be identified by their name, address, telephone number or email address.

Personal data: We may ask you to use personally identifiable information that can be used to contact and identify you. This includes email address, first and last name, phone number, and usage data.

Why we collect information

We collect personally identifiable information so that we can get in touch with you regarding our products and services, and to keep you up to date with news and course information from Tanya Geddes. If you have provided your contact information through the website, we will request your consent to (a) keep this information and (b) contact you using this information. If you do not provide consent, we will not keep your information or attempt to contact you in any way.

If you have provided information to us over the phone or email as part of your interest in enrolling in a course, we require this data to provide course information and to enrol you in courses if you are so interested. We retain student information to provide learning materials, course details and other pertinent information. If you choose to withhold or withdraw your information from us, we will not be able to provide you with these services. 

Information We Collect

Embody Therapy Co. collects personal information (e.g., name, company, address, phone number, email) only when you provide it via our website or email.

Our web server tracks general site activity, logging IP addresses anonymously to analyze trends like visit duration, popular pages, and visitor locations. We do not link IP addresses to personal identities.

We may also collect personal information when you make a purchase, contact us via social media, write reviews, join events or promotions, or interact with our customer care team. Additional data collection methods may be used in the future.

We collect and store the information you provide, including:

• Full name, email, and phone number

• Shipping and billing addresses

• Payment details (for transaction purposes)

• Username and password for our website

• Order history, shopping behavior, and preferences

• Information from social media interactions

• Location data (if using our mobile site or app)

• Other details you submit or receive from third parties

Protecting my personal information

The DPA and the General Data Protection Regulation (GDPR) require that all organisations that store personal information about people may only do so provided that the information is: processed lawfully, fairly and transparently. That it is collected for specified, explicit and legitimate purposes; adequate, relevant and limited to what is necessary. That it is accurate and, where necessary, kept up to date; kept in a form that permits identification of information subjects for no longer than is required for the purposes for which the personal information is processed. And that it is processed in a way that ensures appropriate security of the personal data.

Storing Data

Personal information will be stored both electronically and physically. Electronic information is stored via password-protected devices and is only accessible to the therapist. Information is stored physically using paper records, held securely in locked storage in an anonymised form. These are only accessible to the therapist.

Time of storage

If you wondering how long your personal information will be stored, according to the GDPR, your personal information should be stored no longer than necessary. The therapist will keep your personal information for a minimum of seven years following the termination of your treatment. However, you may request your personal information be destroyed after your final therapy session.

Sharing personal information

Your personal information is kept confidential. Only in exceptional circumstances is information shared. For example, if the client is causing physical and emotional harm to themselves and others, this may need to be reported to the emergency contact or G.P. If there is a requirement of a court of law, or in other criminal proceedings, the therapist may be required to share information. During supervision, no names are shared, and issues are anonymised to keep your personal information safe.

Deleting data

The client can request that their personal information be deleted. This is known in the new legislation as the Right to Erasure. However, the therapist has a right to refuse to comply with the client’s request, for example, to defend themselves in a claim or to comply with insurance terms and conditions.

Usage Data 

Usage data is collected automatically when using the service. Information includes your device’s internet protocol address (IP address), browser type, browser version, the pages of our service, time and date of your visit, time spent on those pages, unique device identifiers and other diagnostic data.

When using a mobile device, the data we collect includes the mobile device, your unique ID, the IP address, the operating system, the internet browser, unique identifiers and other diagnostic data.

Cookies

What are cookies?

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic, letting you know when you visit certain sites. The web application tailors its operations to your likes and dislikes by remembering your preferences.  They allow websites to work more efficiently and do not take up much space. They can be removed automatically once the online session has expired.

Cookies we use:

• Cookies or browser cookies: A cookie is a small file placed on your device. You can choose to refuse all cookies or show when a cookie is being sent. If you do not accept cookies you may not be able to use some parts of our service.

• Flask cookies: We may use local stored objects (or flash cookies) to collect and store information about your preferences or your activity. Flash cookies are not managed by the same browser settings as those used for browser cookies.

• Web beacons: Some sections of our services and emails may contain small electronic files known as web beacons (gifs, pixel tags, single-pixel gifs). Cookies include persistent or session cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser. Learn more about cookies here.

We may use your personal data for the following:

We use cookies to help you navigate our website and browsing data to optimise your experience. Some cookies expire when you close your browser, other cookies are used to remember you once you return to the site and last for longer. You can find more information about cookies here.

• To maintain our service: monitoring your use and upgrading our service.

• To manage your account: your registration and how you use the service.

• For the performance of a contract: the development and undertaking of a purchase contract for any product or service you have purchased.

• The manage your account: to manage your registration as a user. The personal data you provide can give you access to various functionalities.

• To contact you: This may be done via email, telephone calls, SMS, or other forms of electronic communication such as a mobile application’s push notifications regarding updates of informative communications.

• Updates: To provide you with news and special offers, regarding products and services. You can opt-out or unsubscribe from such services.

• Other purposes: We may use your data for data analysis, trend analysis, improving services, products, marketing and experience.

Disable Cookies

You may choose to prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Disabling cookies can affect the functionality of websites and it is not recommended that you do this.

Links to other websites

We may include links to other websites. If you click on a third party, you will be directed to that site. We advise you to review the privacy policy of each site you use. We assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

How to access and control your data

You have the right to:

• Know what personally identifying information is kept about you.

• Correct any incorrect information.

• Change how your data is processed.

• Update any email or phone contact preferences.

• Have your data erased from the data processing software.

Agreement & Updates

By using this site, you agree to our privacy policy. Embody therapy co may update this policy at any time, with changes reflected on this page.

Contact Us

For questions or concerns, email us at:

embodytherapyco@gmail.com

This privacy notice is regularly reviewed and was last updated in February 5th 2025.