Privacy policy

Privacy Policy (Helen Thornton)

Last updated: 3 February 2026

This Privacy Policy explains how Helen Thornton (“we”, “us”, “our”) collects and uses personal data when you visit helenthornton.com, contact us, subscribe to updates, or book services/courses.

We are the data controller for the personal data described in this policy. UK data protection law requires us to give you clear “privacy information” about what we do with your data.

1) Who we are and how to contact us

Controller: Helen Thornton (UK-based, Lincolnshire)

Contact

  • Website contact form

  • Telephone: +44 (0)7947 623923

  • Email: helentheequineosteopath@gmail.com

2) The personal data we collect

We may collect the following, depending on how you interact with us:

A. Information you provide

  • Name, email address, telephone number

  • Your location (e.g., yard/town/postcode area) so we can plan visits

  • The content of your enquiry (what you write in the contact form / email)

  • Booking details (service requested, dates, and practical arrangements)

  • If you subscribe: your name (if provided) and email address

  • If you tick the contact-form opt-in: your preference to receive emails from us

  • Any photos/videos you choose to send us (for example, to show a movement concern)

B. Website usage information (Google Analytics)

  • Technical and usage data such as IP address, device/browser type, pages visited, time on site, and how you arrived at the site. We use this to understand how people use our website and to improve it.

C. Payment information

  • If you pay online, payments are processed by our payment provider. We typically receive confirmation and basic transaction details (such as amount, date, and reference), not full card details.

3) How we use your data and our lawful bases

UK GDPR requires a lawful basis for each type of processing.

A. To reply to your enquiry and communicate with you

  • What we do: respond to messages, answer questions, arrange calls/appointments

  • Lawful basis: legitimate interests (running the business and responding to requests), and/or contract if you are booking a service

B. To deliver the service you book

  • What we do: schedule visits, provide the service, keep essential admin records

  • Lawful basis: contract (to provide what you requested)

C. To send emails you have opted into

  • What we do: send occasional updates, relevant news, or booking availability only if you subscribe or tick the contact-form opt-in

  • Lawful basis: consent (you can withdraw at any time)

D. Website analytics (Google Analytics)

  • What we do: measure site usage so we can improve content and structure

  • Lawful basis: consent for non-essential cookies/analytics technologies

E. Legal and regulatory obligations

  • What we do: keep appropriate records for tax/accounting and deal with disputes if needed

  • Lawful basis: legal obligation (for certain records) and legitimate interests (for protecting and asserting legal rights)

You do not have to opt into marketing. If you contact us without ticking the opt-in box, we will use your details to respond to your enquiry, but we will not add you to marketing emails.

4) Subscribing and marketing preferences

If you subscribe on the website, or tick the opt-in on the contact form, we will send you occasional emails.

  • You can unsubscribe at any time using the link in our emails (or by contacting us).

  • Withdrawing consent will not affect the lawfulness of emails sent before you unsubscribed.

  • Right to object: you can object to direct marketing at any time, and we will stop.

5) Who we share your data with

We do not sell your personal data.

We share personal data only where it is necessary to run the website and provide services, and only with trusted providers who must protect it and use it only for the service they provide.

Website platform and hosting

  • Squarespace – hosts the website and processes website form submissions (including contact form messages and subscription details) as part of providing the website platform.

Email marketing (only if you subscribe / opt in)

  • Squarespace Email Campaigns – manages our subscriber list and sends email campaigns to people who have opted in to receive emails from us.

Payments

  • Stripe – processes payments. We receive confirmation of payment and basic transaction details (such as amount, date and reference). Stripe processes payment card details directly.

Course bookings (where offered)

  • TicketSource – manages course/event bookings and delegate administration. If you book a course, TicketSource will process the booking information you enter so we can administer your place and communicate with you about the event.

Analytics

  • Google Analytics (Google LLC) – used to understand how the website is used and to improve it. Analytics cookies are used only if you consent to non-essential cookies.

Professional advisers and legal requirements

  • We may also share personal data with our professional advisers (for example, our accountant or legal advisers) where necessary, and with authorities where we are required to do so by law, or where necessary to establish, exercise or defend legal claims.

6) International transfers

Some providers we use (for example, website hosting, analytics, or email tools) may process data outside the UK, including in the USA.

Where international transfers apply, we use appropriate safeguards permitted under UK GDPR. This can include transfers to US organisations covered by the UK Extension to the EU–US Data Privacy Framework (where applicable) or other approved safeguards.

7) How long we keep your data

We keep personal data only as long as needed for the purpose it was collected.

Typical retention periods:

  • Enquiries (no booking): up to 12 months after the last contact

  • Bookings and essential service admin records: typically up to 3 years after the last appointment

  • Subscription list: until you unsubscribe (and for a short period afterwards to record your unsubscribe and prevent re-adding you by mistake)

  • Financial records (invoices/receipts): typically up to 6 years (to meet tax/accounting obligations)

We may keep information longer where needed for legal claims or compliance.

8) Cookies and Google Analytics

We use cookies and similar technologies:

  • Strictly necessary cookies help the website function.

  • Optional (non-essential) cookies (including analytics) are used only if you consent.

Google Analytics uses cookies/technologies to help us understand how the website is used. You can change your cookie preferences at any time via the cookie controls (where available) and through your browser settings.

9) Your rights

You have rights under UK data protection law, including:

  • access, rectification, erasure, restriction, objection, data portability

  • withdrawing consent (where we rely on consent)

  • complaining to the ICO

To exercise your rights, contact us using the details in section 1.

10) Complaints

If you are unhappy with how we handle your data, please contact us first and we will do our best to resolve it. You can also complain to the Information Commissioner’s Office (ICO).

11) Security

We use reasonable technical and organisational measures to protect personal data. However, no online system is completely secure, so please avoid sending sensitive personal information by email unless necessary.

12) Changes to this policy

We may update this policy from time to time. The latest version will be published on our website with an updated “Last updated” date.