This privacy policy explains how Rock and Reiki ("we", "us", "our") collects, uses, and protects your personal information when you visit www.rockandreiki.com (the "Site").

We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Rock and Reiki is a sole trader/business based in the United Kingdom, offering reiki and related wellbeing services.

Data Controller: Andrew Weyhrich / Rock and Reiki Contact email: rockandreikiuk@gmail.com 

What Information We Collect

When you use the contact form on our Site, we collect:

Your name

Your email address

Any message content you choose to include

We do not knowingly collect any other personal data through the Site (for example, we do not collect payment details, health records, or sensitive category data via the contact form).

Why We Collect This Information

We use the information you provide solely to:

Respond to your enquiry or message

Communicate with you about the services you've asked about

Legal basis for processing: We process this data on the basis of our legitimate interest in responding to enquiries from potential and existing clients, and, where relevant, to take steps prior to entering into a contract with you (Article 6(1)(b) and 6(1)(f) UK GDPR).

We will never use your contact form details to send marketing emails unless you separately and explicitly opt in to receive them (as required by PECR — the Privacy and Electronic Communications Regulations).

How We Store Your Information

Messages submitted through the contact form are sent to and stored in our email inbox, provided by Gmail. 

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

How Long We Keep Your Information

We retain contact form submissions for as long as reasonably necessary to deal with your enquiry and for a short period afterwards in case of follow-up (typically no longer than 12 months), unless you become a client, in which case we may retain relevant correspondence as part of standard business/accounting records for as long as required by law.

Sharing Your Information

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share your information with:

Trusted service providers who help us run the Site or manage communications (e.g. website host, email provider) — only where necessary and under appropriate confidentiality authorities where required by law

Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you

Rectify inaccurate or incomplete data

Erase your data ("right to be forgotten")

Restrict or object to our processing of your data

Data portability (receive your data in a portable format)

Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at rockandreikiuk@gmail.com. We will respond within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at www.ico.org.uk or by calling 0303 123 1113.

Cookies

Our website is built and hosted using IONOS. As standard, IONOS-built websites use technically necessary cookies to enable core site functionality, such as remembering your session and ensuring the site displays correctly. These cookies do not track you across other websites and are typically deleted at the end of your browser session.

Depending on our website plan and any additional features we use (such as embedded maps, social media content, or analytics tools), additional cookies may be set — for example, by Google Maps if we embed a location, or by analytics services to help us understand how visitors use the site. Where this applies, a cookie consent banner will appear on the Site allowing you to accept or reject non-essential cookies before they are set, in line with UK GDPR and PECR requirements.

You can control or delete cookies at any time through your browser settings. Please note that blocking essential cookies may affect how parts of the Site function.

For more detail on how IONOS itself processes data as our hosting provider, see IONOS's own privacy and cookie information.

Children's Privacy

Our Site and services are not directed at children, and we do not knowingly collect personal data from anyone under 16.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date.

Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at:

Email: rockandreikiuk@gmail.com