
Rebecca Scarlett is committed to protecting your privacy and handling your personal data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of data protection law, Rebecca Scarlett is the data controller of your personal information. If you have any questions about this policy or how your data is handled, please contact: [email protected]
We may collect and process the following information:
Your name
Email address
Phone number (if provided)
Billing address and payment details (processed securely via third-party payment providers)
Information you share when booking sessions, attending workshops, completing forms or contacting Rebecca
Technical data such as IP address, browser type and website usage (via cookies)
We only collect information that is relevant and necessary to provide our services.
Your personal data may be used to:
Process bookings and payments
Deliver healing sessions, mentoring, workshops and courses
Respond to enquiries
Send service-related communications
Provide access to digital products
Send newsletters and updates (where you have opted in)
Maintain business records for legal and accounting purposes
We will only send marketing emails where you have given clear consent. You can unsubscribe at any time.
Under UK GDPR, we rely on the following lawful bases:
Contract – to fulfil bookings and provide services
Consent – for marketing emails and optional communications
Legal obligation – for financial record keeping and tax compliance
Legitimate interests – to operate and improve the business
Your personal data will never be sold. We may share data with trusted third parties where necessary, such as:
Payment processors
Email marketing providers
Website hosting providers
Accountants or legal advisors (where required)
These providers process data securely and in compliance with data protection law.
Your information is stored securely using password-protected systems and reputable service providers. We take reasonable steps to protect your data from loss, misuse or unauthorised access.
We retain personal data only for as long as necessary:
Financial records are kept for at least 6 years in line with HMRC requirements.
Marketing data is kept until you unsubscribe or request removal.
Client session records are retained only as long as reasonably required for business and legal purposes.
As part of providing healing sessions, mentoring or holistic support, Rebecca Scarlett may collect limited information about your physical or emotional wellbeing where you choose to share this. This may include health-related information.
This data is processed:
With your explicit consent
For the purpose of providing appropriate and personalised support
In accordance with Article 9(2)(a) UK GDPR (explicit consent)
You are not required to provide health information, but doing so may help tailor your session.
Health information is treated as strictly confidential and stored securely. It will not be shared with third parties unless:
You provide written consent, or
There is a legal obligation to disclose (for example, safeguarding concerns)
Under UK data protection law, you have the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request erasure of your data (in certain circumstances)
Restrict or object to processing
Withdraw consent at any time (for marketing)
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, email: [email protected]
This website may use cookies to improve user experience and analyse website traffic. You can control cookie settings through your browser preferences.
If a cookie banner is in place, you can manage your preferences there.
This Privacy Policy may be updated from time to time to reflect changes in law or business practices. The most current version will always be available on the website.

Reg address and company details
© Rebecca Scarlett 2026. All Rights Reserved.

