Privacy Policy

Last updated: 23 September 2025

1. Who I Am

I, Katarina Wagner / Devana Therapies, provide counselling, nature therapies and related wellbeing services. I am the data controller for the personal information you provide.

2. Commitment to Your Privacy

I am committed to protecting your personal information and respecting your privacy. This policy explains what data I collect, why I collect it, how it is used, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. What Information I Collect

I may collect the following categories of information:

• Personal identifiers: name, date of birth, contact details, address, emergency contact.
• Health information: physical and mental health history, medication, allergies, mobility needs, counselling notes.
• Administrative information: appointment history, correspondence, invoices.
• Payment information: processed securely via Stripe (I do not store card details).
• Website interaction: if you use my online booking form, Cliniko may set cookies or similar technologies.

4. How I Collect Information

• Directly from you (via forms, email, phone, or in session).
• Through my booking system (Cliniko).
• Through my payment processor (Stripe).

5. Why I Collect Information (Purposes & Legal Bases)

I process your data for the following reasons:

• To provide services (contractual necessity).
• To ensure safety and duty of care (vital interests, legal obligation).
• To maintain records for professional and legal standards (legal obligation).
• To manage appointments and communication (legitimate interests).
• To process payments (contractual necessity).
• With your consent (e.g. for optional communications).

6. How I Store and Share Information

• Records are stored securely in Cliniko and/or encrypted files.
• Counselling notes are kept brief and separate from identifying details where possible.
• I do not share your information with third parties except:
  • Cliniko (for booking and record keeping).
  • Stripe (for payment processing).
  • Supervision (discussing work in a way that protects your identity).
  • Legal exceptions (risk of harm, safeguarding, or legal requirement).

7. Cookies and Online Booking

When you use my website's embedded Cliniko booking form, Cliniko may set cookies for session management, analytics, or marketing.

• I do not use cookies directly on my website.
• By using the booking form, you consent to Cliniko's use of cookies.
• For details, see Cliniko's Privacy Policy.

8. Payments via Stripe

Payments are processed securely by Stripe.

• I do not have access to your full card details.
• Stripe may process your data both on my behalf (to complete your payment) and as an independent controller (for fraud prevention, compliance, and regulatory purposes).
• For details, see Stripe's Privacy Policy.

9. How Long I Keep Your Information

• Counselling and health records: 7 years after your last session.
• Administrative and financial records: as required by law (usually 6 years).
• After these periods, records are securely destroyed.

Where I have a legal obligation to keep data longer than that, I will delete it as soon as my legal obligation is discharged.

10. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Request correction of inaccurate data.
• Request erasure (subject to legal retention requirements).
• Restrict or object to processing.
• Request data portability.
• Withdraw consent (where processing is based on consent).
• Lodge a complaint with the Information Commissioner's Office (ICO).

11. Changes to This Policy

I may update this policy from time to time. The latest version will always be available on my website.

12. Contact

If you have any questions about this policy or your data, please contact me at:

• Email: info@devana-therapies.co.uk
• Phone: 07835 331 890

My ICO Registration Number: ZB344582