Privacy Policy

So Salata Wellbeing is committed to protecting your privacy and treating your personal information with care, respect, and transparency. This policy explains what information I collect, how it is used, and your rights under UK GDPR.

Information I Collect

Information collected through my website

My website collects very limited personal information, including:

• Your name and email address if you submit an enquiry form

• Any information you choose to include in an email enquiry

• Basic contact details (name + email) when you book a discovery call through a Practice Better link

I do not collect health information on my website.

Information collected through a secure GDPR

All sensitive or health‑related information is collected afterwards, inside a secure, GDPR‑compliant platform used for all coaching work.

This may include:

• Health history

• Goals

• Session notes

• Programme information

• Documents you choose to upload

This client portal acts as my data processor. I remain the data controller.

Automatically collected information

My website may collect basic technical data such as:

• IP address

• Browser type

• Pages visited

• Cookies (see Cookie Policy)

This helps me understand how the site is used.

How Your Information Is Used

I use your information to:

• Respond to enquiries

• Arrange discovery calls

• Provide wellbeing coaching (via client portal)

• Manage bookings and communication

• Send resources or updates you request

• Improve my website and services

I do not sell your information or share it with third parties for marketing.

Lawful Basis for Processing

I process your information under:

• Consent — when you submit an enquiry or opt in to emails

• Contract — when you book a discovery call or coaching service

• Legitimate interest — for website analytics and improving services

• Legal obligation — for record‑keeping and tax purposes

You may withdraw consent at any time by emailing hello@sosalata.co.uk or through your client portal

Where Your Information Is Stored

• Website enquiries: email inbox

• Discovery call details: secure client portal

• Coaching information: secure client portal

• Payments: Stripe or other secure payment processors

• Website analytics: Squarespace or similar tools

All sensitive data is stored only inside secure client portal

How Long Your Information Is Kept

• Enquiry emails: up to 12 months

• Discovery call details: until the call is completed

• Client records (inside secure, GDPR‑compliant digital platform ): up to 7 years (legal + insurance requirement)

• Financial records: 7 years (legal requirement)

• Newsletter subscribers: until you unsubscribe

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion (“right to be forgotten”)

• Withdraw consent

• Restrict or object to processing

• Request a copy of your data in a portable format

To make a request, email hello@sosalata.co.uk.

Important note about deletion

You may request deletion at any time. However, I am legally required to keep:

• Client records

• Session notes

• Financial information

for up to 7 years. All other data can be deleted immediately.

Children’s Privacy

My services are for adults (18+). I do not knowingly collect data from children.

Data Security

I take your privacy seriously and use secure systems, encrypted platforms, and password‑protected devices to keep your information safe.

If a data breach ever occurs, I will notify affected individuals and the ICO within the required timeframes.

Cookies

My website uses cookies to support basic functionality and understand how visitors use the site. You can manage or disable cookies through your browser settings.

A full explanation is available in my Cookie Policy.

Changes to This Policy

This policy may be updated occasionally to reflect changes in services or legal requirements. The latest version will always be available on this page.