Privacy & cookies

This notice applies to website visitors, people making an enquiry and clients of Laya Prasada.

Who is responsible for your information

The data controller is Joanna Barcikowska, trading as Laya Prasada, based in Bury, Greater Manchester. Questions and privacy requests can be sent to layaprasada@gmail.com.

Information I may collect

• your name, email address and information included in an enquiry;
• appointment, language and service preferences;
• payment and accounting information, such as the date and amount of a bank transfer;
• session notes and information you choose to share about your physical or emotional wellbeing, health, relationships or intimate life;
• records of consent, correspondence, complaints or safeguarding concerns;
• a testimonial or photograph, but only where you have agreed to its public use; and
• limited technical information in hosting security logs, such as IP address, browser and date of access.

How and why I use it

I use personal information to answer enquiries, decide whether a session is appropriate, arrange and provide sessions, maintain safe and useful client records, receive payment, meet tax and accounting obligations, respond to concerns and protect legal rights.

The usual UK GDPR bases are steps taken at your request before a contract and performance of a contract; legal obligations for financial records; and legitimate interests in administering and protecting this small practice. Consent is used for optional testimonials, photographs and marketing.

Health information and information about a person’s sex life or sexual orientation are special category data. Where this information is necessary for the work, I ask for explicit consent and record it. Where strictly necessary, such information may also be retained for the establishment, exercise or defence of legal claims. You may withdraw consent at any time, although this does not affect use that was lawful before withdrawal or information that must be retained for another lawful reason.

Contact form and email

The contact fields on this website do not submit information to the website. When you select Send message, your device opens your own email app with a draft addressed to me. The message is only sent when you send it from that app. Please do not include detailed medical or highly intimate information in a first email.

Who may process or receive information

I do not sell personal information. It may be processed or received only where necessary by:

• Google/Gmail, which hosts my email;
• Hostinger, which hosts this website and may maintain security and access logs;
• banks involved in receiving a transfer;
• an accountant, professional adviser, insurer, regulator or public authority where reasonably necessary or required by law; and
• Google Fonts and Pexels, which receive limited technical information such as an IP address when the site loads fonts or the home-page video.

Some providers may process information outside the UK. Where this happens, I select providers that state they use a recognised safeguard, such as an adequacy arrangement or approved contractual clauses.

How long information is kept

• an enquiry that does not become a booking: normally up to 12 months after the last contact;
• client correspondence, consent records and session notes: normally up to 7 years after the final session, where needed for continuity, safeguarding, insurance, complaints or legal claims;
• financial and tax records: for at least 5 years after the 31 January tax return deadline for the relevant tax year, or longer if required by HMRC;
• testimonials and photographs: until consent is withdrawn or the material is no longer used; and
• technical hosting logs: for the limited period applied by the hosting provider for security and operation.

Records are reviewed and securely deleted or anonymised when they are no longer needed.

Security

Electronic client records are protected with password-controlled access and are available only to Joanna unless disclosure is necessary for one of the reasons described above. No internet or email service can be guaranteed completely secure, so sensitive information is kept to what is necessary.

Cookies and similar technologies

This website currently does not set cookies, use analytics, advertising pixels or store identifiers in your browser. For that reason, no cookie-consent banner is displayed. Google Fonts and the Pexels video are external resources, but they are not used by Laya Prasada to track visitors.

If analytics, embedded social-media content or any other non-essential storage technology is added later, this notice will be updated and the technology will not load until any legally required choice has been provided.

Your rights

Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or object to its use. You may also withdraw consent. Write to layaprasada@gmail.com. I will normally respond within one month.

You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Changes and questions

This notice will be reviewed when the services, providers or data practices change. If anything is unclear, contact me at the address above.

Last updated: August 2026.