Last updated: 11 November 2026
1. Who we are
This policy explains how Tina Crowley (“Tina”, “we”, “us”) collects and uses your personal data when you visit tinacrowley.com, book a reading or healing session, buy from the shop, join an online course or contact us. We are the data controller for that data and follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
| Controller | Tina Crowley, Psychic & Reiki Master |
|---|---|
| Address | [ADD POSTAL ADDRESS], Worthing, West Sussex, United Kingdom |
| [email protected] | |
| Phone | 07979 757570 |
| ICO registration | ZB406190 |
If you have any questions about this policy or your data, please contact us using the details above.
2. What data we collect
We collect only what we need to provide our readings, healings, courses and shop.
| Where | What we collect |
|---|---|
| Contact form | Name, date of birth, phone, email, subject, your message, and your agreement to our terms |
| Booking a reading or session | Name, email, phone, the service, date and time booked, any notes or questions you give us, and for remote sessions the details needed to join a video call |
| Email and WhatsApp readings | Your questions, any names, dates of birth or photos you choose to share, and our written reply |
| Shop, gift vouchers and checkout | Name, billing and delivery address, email, phone, order history and discount codes used |
| Payments | Handled by Stripe and PayPal. We see a payment confirmation and the last four card digits, never your full card details |
| Customer and course accounts | Username, email, password (stored encrypted), course enrolments and progress |
| Reviews | Name, rating and the review text you post |
| Website visits | IP address, device and browser type, pages viewed, how you reached the site and how you move around pages (see section 4, Cookies) |
Readings and healings can involve personal matters such as health, relationships, bereavement or beliefs. Only share what you are comfortable sharing. We use this information only to give you your reading or session, and we never use it for marketing.
Our services are for adults aged 18 and over. We do not knowingly collect data from children.
3. How we use your data and why
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Taking and managing bookings, sending confirmations, reminders and invoices | Contract |
| Giving your reading, healing session, workshop or course | Contract |
| Processing shop orders, gift vouchers, delivery, returns and refunds | Contract |
| Answering your enquiries | Legitimate interests (responding to people who contact us) |
| Keeping accounting and tax records | Legal obligation |
| Protecting the site from spam and fraud (reCAPTCHA, payment checks) | Legitimate interests |
| Using any health or other sensitive information you share for your reading or healing | Your explicit consent, which you can withdraw at any time |
| Website analytics and session recordings | Your consent, given through our cookie banner |
We do not sell your data. We do not send marketing emails unless you have opted in, and every marketing email lets you unsubscribe. We do not make decisions about you by automated means.
4. Cookies and similar technologies
Cookies are small files stored on your device. Essential cookies run the site. All others are set only if you accept them in our cookie banner, and you can change your choice at any time.
| Cookie or tool | Provider | Purpose | Type |
|---|---|---|---|
| Shop cart and session cookies (woocommerce_*, wp_woocommerce_session_*) | Us | Keep items in your basket and run checkout | Essential |
| Login cookies (wordpress_*, wordpress_logged_in_*) | Us | Keep you signed in to your account or course | Essential |
| Booking system cookies | Us | Complete an appointment booking | Essential |
| Google reCAPTCHA | Stop spam on our forms | Essential | |
| Stripe and PayPal cookies | Stripe, PayPal | Secure payments and fraud prevention | Essential |
| Order attribution (sbjs_*) | Us | Record how you found the site when you place an order | Analytics |
| Google Analytics (_ga, _ga_*) via Google Tag Manager | Count visits and see which pages are used | Analytics | |
| Microsoft Clarity (_clck, _clsk, CLID) | Microsoft | Heatmaps and anonymised session recordings to improve the site | Analytics |
| TikTok feed | TikTok | Show Tina’s TikTok videos on the site. TikTok may set its own cookies | Third-party content |
You can also block or delete cookies in your browser settings, but parts of the site, such as the basket and booking, may then stop working.
5. Who we share your data with
We share your data only with the service providers below, and only so they can do their job for us.
| Provider | What they do |
|---|---|
| OSAM Websites Ltd (UK) | Hosts and maintains this website and sends booking and order emails |
| Stripe and PayPal | Take card and PayPal payments |
| Zoom | Runs video sessions for remote readings |
| Google (Calendar, Analytics, Tag Manager, reCAPTCHA) | Keeps Tina’s diary in sync with bookings, site analytics and spam protection |
| Microsoft (Clarity) | Site usage analytics |
| Yahoo (email) and WhatsApp (Meta) | Carry your messages and email or WhatsApp readings |
| Royal Mail or other couriers | Deliver shop orders |
| Our accountant and HMRC | Keep and check our financial records |
We may also disclose data where the law requires it.
International transfers. Some of these providers, such as Google, Microsoft, Stripe, PayPal, Zoom, Yahoo and Meta, may process data in the USA or elsewhere outside the UK. When they do, they protect it with UK-approved safeguards such as the UK–US Data Bridge or the ICO’s International Data Transfer Addendum.
6. How long we keep your data
| Data | Kept for |
|---|---|
| Bookings, orders, invoices and payment records | 6 years from the end of the tax year, as HMRC requires |
| Reading and session notes, and email or WhatsApp reading content | Up to 2 years after your last session, unless you ask us to delete them sooner |
| Contact form enquiries that don’t lead to a booking | 12 months |
| Customer and course accounts | Until you close the account, or after 3 years of inactivity |
| Analytics data | 14 months (Google Analytics), 12 months (Microsoft Clarity) |
7. Your rights
Under UK data protection law you have the right to:
- access a copy of the data we hold about you
- correct data that is wrong or incomplete
- delete your data, where we no longer need to keep it
- restrict or object to how we use it
- move your data to another provider (data portability)
- withdraw consent at any time, where we rely on consent
To use any of these rights, email [email protected]. It’s free, and we will reply within one month.
8. Keeping your data safe
The site runs over an encrypted (HTTPS) connection on UK-managed hosting, with regular security updates, backups and malware scanning. Card payments are handled entirely by Stripe and PayPal. Only Tina, and the website team when maintaining the site, can see your booking and order details.
9. Complaints
Please contact us first so we can put things right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Changes to this policy
We will update this page when our services or the tools we use change. The date at the top shows when it was last updated.
