Privacy Policy

Last updated: 18/06/2026

This Privacy Policy explains how Heather Finch, trading as The Art of Inviting Happiness (“I”, “me” or “my”), collects, uses and looks after your personal information when you visit this website, get in touch, create an account, or book a course or service.

It also explains your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). Cookies are covered separately in my Cookie Policy (https://theartofinvitinghappiness.com/cookie-policy/), and the rules for using the site are in my Terms and Conditions (https://theartofinvitinghappiness.com/terms-and-conditions/).

WHO IS RESPONSIBLE FOR YOUR DATA

I am the data controller responsible for your personal information. If you have any questions about this policy or about how your data is handled, you can reach me here:

Heather Finch – The Art of Inviting Happiness
75 Newton Park
Kirkhill, Inverness
IV5 7QB

Email: Heather@theartofinvitinghappiness.com
Phone: 07398012817

THE INFORMATION I COLLECT

Depending on how you use the site, I may collect:

Enquiry and booking details – your name, email address, phone number and the content of your message when you contact me or book a session.
Account information – if you create an account, your name, email address, username and password.
Order and payment information – when you buy a course or service: your name, billing address, email address and the items you’ve purchased. Card payments are processed securely by Square – I never see or store your full card details.
Information to deliver your course or service – booking dates, attendance and any correspondence relating to the Reiki tuition, Akashic readings or courses you’ve booked.
Comments – if you leave a comment, I collect the comment itself, your name and email address, and your IP address and browser information to help detect spam.
Website usage information – how you arrive at and move around the site, collected through Google Analytics. Full details are in my Cookie Policy.
Marketing preferences – if you sign up to hear from me, your name and email address, and whether you’ve consented to marketing.

HOW AND WHY I USE YOUR INFORMATION

I only use your personal information where the law allows me to. The list below sets out what I use it for and my lawful basis for doing so under the UK GDPR. ICO:00014484371

To respond to your enquiries and provide customer support. Lawful basis: Legitimate interests
To process your orders and provide the courses and services you book. Lawful basis: Performance of a contract
To take payment and help prevent fraud (through Square). Lawful basis: Performance of a contract; Legitimate interests
To keep accounting, tax and transaction records. Lawful basis: Legal obligation
To create and manage your account. Lawful basis: Performance of a contract
To publish and moderate comments you choose to leave. Lawful basis: Legitimate interests
To understand how the site is used so I can improve it (analytics). Lawful basis: Consent (via the cookie banner)
To send you marketing emails, where you’ve asked me to. Lawful basis: Consent
To keep the website secure and working properly. Lawful basis: Legitimate interests

Where I rely on consent, you can withdraw it at any time. Where I rely on legitimate interests, you can object – see “Your rights” below.

COOKIES AND ANALYTICS

This website uses cookies, including essential cookies, Square’s payment and fraud-prevention cookies, WooCommerce cookies, and Google Analytics. Every cookie, what it does and how long it lasts is listed in my Cookie Policy (https://theartofinvitinghappiness.com/cookie-policy/). You can accept, reject or change your cookie choices at any time through the cookie banner.

WHO I SHARE YOUR INFORMATION WITH

I do not sell your personal data, and I never share it for other companies’ marketing. I share it only with the trusted providers that help me run the website and deliver my services, and where the law requires:

Square – processes card payments securely and helps prevent fraud. Privacy policy: https://squareup.com/privacy
Google (Google Analytics) – measures how the website is used. Privacy policy: https://policies.google.com/privacy
My website host – stores the website and its data on secure servers.
My email provider – sends any newsletters you’ve signed up for.
Embedded content providers – pages may include content from YouTube, Facebook or LinkedIn (see below).
Professional advisers, regulators or law enforcement – only where I’m legally required to disclose information.

EMBEDDED CONTENT FROM OTHER WEBSITES

Some pages may include embedded content, such as videos, images or social media posts. Embedded content from another website behaves exactly as if you had visited that website directly. These websites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with that content – including if you are logged in to that website.

SENDING YOUR DATA OUTSIDE THE UK

Some of my providers, such as Square and Google, are based outside the UK or process data internationally. Where your information is transferred outside the UK, it is protected by appropriate safeguards recognised under UK data protection law – for example a UK “adequacy” decision or the UK International Data Transfer Agreement.

HOW LONG I KEEP YOUR INFORMATION

Order, payment and accounting records – kept for at least 6 years, to meet HMRC and tax requirements.
Account information – kept while your account is active; you can ask me to delete it at any time.
Enquiry and booking correspondence – kept no longer than necessary to deal with your enquiry and for a reasonable period afterwards.
Comments – kept while published; you can ask me to remove them.
Analytics data – kept for the periods set out in the Cookie Policy and by Google.
Mailing list data – kept until you unsubscribe.

YOUR RIGHTS

Under UK data protection law you have the right to:

be told how your data is used (this policy);
ask for a copy of the personal data I hold about you;
have inaccurate or incomplete data corrected;
ask me to delete your data, where there’s no legal reason for me to keep it;
restrict or object to how I use your data;
ask for your data in a portable format; and
withdraw consent at any time — for example by unsubscribing or changing your
cookie settings.

To exercise any of these rights, just contact me using the details above. I’ll respond within one month.

HOW TO COMPLAIN

If you’re unhappy with how I’ve handled your personal data, please contact me first so I can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office (ICO)
Wycombe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

KEEPING YOUR INFORMATION SECURE

I take reasonable steps to keep your information safe, including serving the whole site over a secure (HTTPS) connection and using reputable providers such as Square to handle payments. No method of sending information over the internet is completely secure, but I work to protect your data and keep it confidential.

CHILDREN

This website and my services are intended for adults aged 18 and over. I do not knowingly collect personal information from children. If you believe a child has provided me with their personal data, please contact me and I will delete it.

CHANGES TO THIS POLICY

I may update this Privacy Policy from time to time. Any changes will be posted on this page, and I’ll update the “last updated” date at the top.

CONTACT ME

If you have any questions about this Privacy Policy or your personal data, please get in touch:

Heather Finch – The Art of Inviting Happiness
75 Newton Park
Kirkhill, Inverness
IV5 7QB

Email: Heather@theartofinvitinghappiness.com
Phone: 07398012817