Privacy Policy

Last updated: 28 September 2026

Who we are

This website is operated by Dr Catherine Buchan, trading as Catherine Buchan, Healing with the Angels. The data controller for your personal information is The Agile Leader Ltd (registered in England & Wales No. 10979005; registered office 30 Grove Place, Sholing, Southampton, SO19 9QY). Angel Therapy services are provided by Catherine Buchan under this trading name.

For any question about this policy or your personal data, contact healingwiththeangels444@gmail.com.

What we collect, and why

Emailing us directly

If you email healingwiththeangels444@gmail.com directly, we’ll have your email address and whatever you choose to tell us, for the purpose of replying to you.

Booking a session

“Book a Session” links take you to Calendly to choose a time. That booking happens on Calendly’s own website, under Calendly’s own privacy policy, not this one. We only see the booking details Calendly shares with us (such as your name, email, the time you chose and your answers to the booking questions) to check that a session is right for you, and to prepare for and hold the session. We need your name, email address and what you’d like support with in order to arrange a session; without them, we can’t book one for you.

Your session

Sessions take place online, normally on Google Meet, and are not recorded.

Session records

I do not keep written notes, transcripts or formal records of individual Angel Therapy sessions, and I do not create or maintain a client case file or ongoing record of the content of sessions.

Paying for your session

Payments are made through a secure Stripe payment page. Stripe handles your card details; we never see or store them. We receive your name, email address, the amount paid and the date.

Information about your health or wellbeing

What you share when booking, or during a session, may include information about your physical or mental health. The law treats this as “special category” data. I do not keep written records of this information or maintain a health record. Where such information is used during a session, I handle it only as necessary to provide the service.

Analytics

We use Google Analytics 4, which uses cookies and collects information about how you use the site (such as pages visited, links clicked, including “Book a Session”, and general location) to help us understand and improve it. Google may process this data outside the UK/EEA. Google Analytics only runs if you accept it via the cookie banner shown on your first visit, described under “Cookies” below. If you’ve accepted it and want to change your mind, you can use “Cookie Preferences” in the footer, your browser’s cookie settings, or a tool such as the Google Analytics opt-out browser add-on.

Cookies

When you first visit this site, you’ll see a banner asking whether you accept or decline analytics cookies. No analytics cookies are set unless you choose “Accept.” Your choice is remembered on your device, and you can change it at any time using Cookie Preferences in the footer of any page.

Our web host, Cloudflare, may set a strictly necessary cookie to protect the site from malicious traffic. Beyond this and the analytics described above, this site does not use cookies to track you across other websites or to serve you advertising. Calendly and Stripe set their own cookies when you use their pages, under their own policies.

Who we share data with

We use a small number of service providers to run this site and our sessions: Calendly (bookings), Stripe (payments), Google (email, online sessions via Google Meet, the website’s fonts and, if you accept, Google Analytics) and Cloudflare (web hosting). Some of these providers may process data outside the UK/EEA, under appropriate safeguards such as the UK–US data bridge or standard contractual clauses. We don’t sell your personal data, and we don’t share it with anyone else except where required by law, or where there is a serious risk of harm to you or someone else, as explained in our Terms & Conditions.

Marketing

We don’t use your details for marketing.

Our legal basis

We rely on our agreement with you when you book and have a session; your consent where required for information about your health or wellbeing that you choose to share; your consent for analytics cookies; our legal obligation to keep payment records; and, in rare cases, the need to protect someone from serious harm.

How long we keep it

Booking details, and emails about your sessions, are kept for 12 months after your last session, then securely deleted. Payment records are kept for 6 years, as required for tax purposes. Analytics data is kept for 14 months.

Your rights

Under UK data protection law, you have the right to ask what personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to withdraw your consent at any time, and to receive a copy of it in a portable format. To exercise any of these, email healingwiththeangels444@gmail.com. If you’re not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO).

We don’t use automated decision-making or profiling.

Children

This website and the services described on it are intended for adults aged 18 and over. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy as the site changes. The date at the top shows when it was last revised.