Privacy Policy

A legal disclaimer

Neya Noka (NN) Privacy Notice

For clients and general users of the website and all social media

Last updated: November 2026

This Privacy Notice is for Neya Noka (NN). It explains how we collect, use, store and protect your personal data, and has been written in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025.

Data Controller: Jade Langridge-Tien, trading as Neya Noka, Moortown, Leeds.

Contact: jade4@neyanoka.net

ICO registration number: [add your ICO data protection fee registration number]

This notice covers:

What information we collect
How we use this information, and the legal basis for its use
With whom we will share your personal data
How long we will keep your personal data for
Where your data will be stored and how we keep it safe
What your rights are in relation to your personal data
Cookies
Confidentiality
How to make a complaint
Children
Changes to this notice

1. What information we collect

Information you give us

Contact details: your name, email address, phone number and, where needed, your home or work address.
Enquiries and bookings: information you submit through our contact forms, for example when you ask a question, arrange a free discovery call, or book a session, container or reading.
Newsletter sign-up: your name and email address when you join our newsletter or request our free meditation.
Payment information: details of what you have bought and when. Card payments and Klarna payments are handled by secure third-party providers. We do not see or store your full card details.
Messages: anything you send us by email, contact form, phone or social media messages.
Client information: if you become a client, information you share on intake forms and during sessions. This may include information about your physical and mental health, medical history, emotional and personal history, life experiences, relationships, and your spiritual or religious beliefs. We may also keep session notes and, only with your agreement, session recordings.

Information about your health and your spiritual or religious beliefs is known as special category data. The law gives it extra protection, and we treat it with particular care (see section 2).

Information collected automatically

When you visit our website, our website platform (Wix) and any analytics tools we use may collect technical information such as your IP address, device and browser type, and the pages you visit. See section 7 on cookies.

Information from third parties

If you pay by card or Klarna, the payment provider will confirm to us whether your payment was successful. Klarna does not share your credit check results with us.

2. How we use this information, and the legal basis for its use

We only use your personal data where the law allows us to. The table below sets out what we use it for and the legal basis we rely on.

What we use your data for

Legal basis

Responding to questions sent through our contact forms, email or social media, and arranging free discovery calls

Legitimate interests (replying to people who contact us), or steps taken at your request before entering a contract

Booking and providing sessions, containers and readings, including delivering readings and audio files by email, and running online sessions via Zoom

Contract

Taking payment by card or Klarna, issuing receipts, and preventing fraud

Contract, and legitimate interests (preventing fraud)

Keeping client records and session notes, which may include health information and spiritual or religious beliefs

Contract, plus your explicit consent for special category data, and where it applies, the provision of health care or treatment by a professional bound by a duty of confidentiality (UK GDPR Article 9(2)(h) and Data Protection Act 2018, Schedule 1, Part 1, paragraph 2)

Sending our newsletter, including when you sign up to receive our free meditation

Consent

Discussing anonymised client work with a clinical supervisor, as required by good professional practice

Legitimate interests (safe and ethical practice). No identifying details are shared

Meeting the requirements of the law, our insurers and our professional bodies (BACP and GHR), and keeping tax and accounting records

Legal obligation, and legitimate interests

Handling complaints, and establishing or defending legal claims

Legal obligation, and legitimate interests

Understanding how our website is used so we can improve it

Legitimate interests, and consent where cookies require it (see section 7)

Inviting you to give feedback or take part in a survey

Consent

About the free meditation: when you request our free meditation, we will email it to you and add you to our newsletter. This is made clear on the sign-up form. You can unsubscribe at any time using the link at the bottom of every email, and you can keep the meditation.

Withdrawing consent: where we rely on your consent, you can withdraw it at any time by contacting us. This does not affect anything we did with your data before you withdrew it.

We do not sell your personal data, and we do not use automated decision-making or profiling that has legal or similarly significant effects on you.

3. With whom we will share your personal data

We only share your data where it is needed for the purposes above. This includes:

Wix, which hosts our website and processes our contact, booking and sign-up forms.
Our card payment provider [e.g. Wix Payments, Stripe or PayPal], which processes card payments securely.
Klarna, if you choose to pay with Klarna. You will provide your details directly to Klarna, which may carry out a credit check. Klarna acts as an independent data controller, and its own privacy notice explains how it uses your data.
Our newsletter provider [e.g. Wix Email Marketing, Mailchimp or MailerLite].
Zoom, for online sessions.
Our email and cloud storage providers Google Workspace
Our clinical supervisor, in anonymised form only.
Professional advisers, such as our accountant, insurer and legal advisers, where needed.
Professional bodies (BACP and GHR), where required, for example in connection with a complaint.
Government authorities, law enforcement or the courts, only where the law requires it (see section 8).

The providers above who process data on our behalf are only allowed to use it to provide their services to us. In the unlikely event that Neya Noka is sold or merged with another organisation, your details may be shared with the advisers of any prospective buyer and passed to the new owners.

4. How long we will keep your personal data for

Type of data

How long we keep it

Client records, intake forms, session notes and related emails

7 years after your last session, as required by our professional bodies (BACP and GHR) and our insurers

Session recordings (only made with your agreement)

Kept for 7 years

Payment and financial records

6 years, for tax and accounting purposes

Enquiries and discovery calls that do not lead to a booking

12 months

Newsletter details

Until you unsubscribe. We then keep only your email address on a suppression list so you are not contacted again

We will not keep your information longer than necessary. We may keep it for a short time beyond these periods while it is reviewed and securely deleted, or longer where the law requires it or to resolve a dispute or legal claim.

5. Where your data will be stored and how we keep it safe

Your data is stored securely using password-protected and, where possible, encrypted systems with two-step verification. Any paper records are kept in a locked cabinet.

Some of our service providers (such as Wix, Zoom and our email provider) may store or process data outside the UK, for example in the European Economic Area or the United States. Where this happens, the transfer is protected either because the UK Government has recognised that country as providing adequate protection (including the UK Extension to the EU-US Data Privacy Framework), or because approved safeguards are in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. What your rights are in relation to your personal data

Under UK data protection law you have the following rights:

The right to be informed about how your data is used (this notice).
The right of access: to ask for a copy of the personal data we hold about you.
The right to rectification: to ask us to correct or complete inaccurate information.
The right to erasure: to ask us to delete your data. This is not absolute. For example, we must keep client records for the period in section 4.
The right to restrict processing: to ask us to limit how we use your data, for example while a complaint is resolved.
The right to data portability: to receive data you gave us in a structured, machine-readable format.
The right to object: to processing based on legitimate interests, and an absolute right to object to direct marketing at any time.
The right to withdraw consent at any time where we rely on consent.
Rights relating to automated decision-making. We do not make decisions about you by automated means.

To use any of these rights, contact us at [jade@neya-noka.com]. There is normally no charge. We will respond within one month, which may be extended by up to two further months for complex requests, in which case we will let you know. We may ask you to confirm your identity first. When responding to a request for your data, we will carry out a reasonable and proportionate search.

7. Cookies

Our website uses cookies, which are small files stored on your device.

Essential cookies are needed for the website to work, for example to keep forms and payments secure. These do not need your consent.
Analytics cookies help us understand how visitors use the site so we can improve it. Where the law allows, some analytics cookies may be used without asking first, and you can opt out at any time through our cookie settings.
Marketing or advertising cookies [e.g. the Meta Pixel or Google Ads, if used] are only used if you agree to them through our cookie banner.

You can change your cookie choices at any time using the cookie settings link on our website, or through your browser settings.

8. Confidentiality

Everything you share in sessions is treated as strictly confidential in line with the ethical standards of the therapist and client relationship. We will not share information that identifies you with any person, agency or organisation without your consent, except in the limited circumstances below, where the law or professional ethics require it:

where there is a serious risk of harm to you or to someone else;
where there is a safeguarding concern about a child or a vulnerable adult;
where we are required to by a court order or other legal obligation, including laws relating to terrorism or money laundering.

Wherever it is possible and safe to do so, we will talk with you first before sharing anything. As described in section 2, we discuss client work with a clinical supervisor, but only in anonymised form.

9. How to make a complaint

If you have a concern about how we have handled your personal data, please contact first at jade4@neyanoka.net. You can raise a complaint in any way, by email, through our contact form, or by phone, and you do not need to use any particular wording. I will acknowledge your complaint within 30 days, look into it without undue delay, and let you know the outcome.

If you are not happy with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:

Website: https://ico.org.uk/make-a-complaint/
Helpline: 0303 123 1113

10. Children

Our services are for adults aged 18 and over, and our website is not intended for children. We do not knowingly collect personal data from anyone under 18.

11. Changes to this notice

We may update this notice from time to time, for example if the law changes or we start using a new service. The latest version will always be on our website, with the date it was last updated at the top.