Legal

Privacy Policy

25 June 2026

1. Who We Are

SoulKey Alchemy is a spiritual healing practice operated by Claire. We provide transformational healing services including Compassion Key sessions, Soul Alignment, and Energy Clearing. Our website is soulkeyalchemy.com. For any privacy-related enquiries, please contact us at [email protected].

2. Information We Collect

We collect information you provide directly to us, including:

  • Name and email address when you contact us or book a session
  • Phone number if provided in booking or contact forms
  • Messages and enquiries you send through our contact form
  • Account information if you register for our premium portal (email and password)
  • Payment information processed securely by Stripe — we do not store card details

We also collect certain technical information automatically when you visit our site, including IP address, browser type, pages visited, and referring URLs, via standard server logs and analytics tools.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and booking requests
  • Provide and manage the healing services you have requested
  • Process contributions and payments via Stripe
  • Manage your premium portal account
  • Send you session confirmations and follow-up communications
  • Improve our website and services
  • Comply with legal obligations

We will never sell your personal information to third parties.

4. Legal Basis for Processing (UK GDPR)

Where the UK GDPR applies, we process your personal data on the following legal bases:

  • Contract: to fulfil a booking or service request you have made
  • Legitimate interests: to respond to enquiries and improve our services
  • Consent: where you have opted in to receive communications
  • Legal obligation: where we are required to process data by law

5. Cookies and Analytics

Our website uses cookies and similar technologies. We use Google Analytics 4 to understand how visitors use our site. Analytics data is anonymised and aggregated. A cookie consent banner is displayed on your first visit — analytics are only activated after you consent. You may withdraw consent at any time by clearing your browser cookies.

6. Third-Party Services

We use the following third-party services which may process your data:

  • Stripe — for secure payment processing. Stripe's privacy policy: stripe.com/gb/privacy
  • Google Analytics — for anonymised website analytics
  • GoDaddy Airo Inbox — for managing contact form messages and enquiries

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact and booking enquiries are retained for up to 2 years. Account data is retained for as long as your account is active.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Data portability — receive your data in a structured format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please email us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data is transmitted over HTTPS. Passwords are stored using industry-standard hashing. Payment data is handled exclusively by Stripe and never stored on our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].