Privacy Policy
Privacy Policy
Last updated: 1 October 2026
At Healing Spaces, we are committed to protecting your privacy and ensuring that your personal data is handled safely, lawfully, and transparently. This policy explains how we collect, use, and store your information when you contact us for support or participate in our services.
1. Who we are
Healing Spaces is a mental-health-focused initiative that transforms living environments for individuals who struggle with their mental or physical health, disabilities, or other difficulties. We provide cleaning services, decluttering services, and mental-health-aware home support.
Karina Barboza, trading as Healing Spaces, is the Data Controller of your personal information. This means we are responsible for keeping your data safe.
2. The data we collect
We only collect information necessary to provide our services, including:
- Your name and contact details (email, phone number)
- Your home address (for service delivery)
- Notes regarding your home setup or specific requirements (to tailor our service)
- Photographs (only taken and stored with your explicit consent)
- On the shop pages and the pages with free downloads only: which page you looked at, where you came from, and what you tapped (for example opening a preview or the buy button). This uses no cookies and nothing that follows you between visits; it is a random note that disappears when you close the tab, and is joined to a name only if you buy. We use it to see where the shop is confusing so we can make it kinder. If you would rather not be counted, add
?nostats=1to the page address.
3. How we use your data
We use your data under the lawful basis of "Contract" (to fulfil the service you asked for) and "Legal Obligation" (for tax records).
- To communicate with you about appointments
- To issue invoices and process payments
- To deliver our cleaning and decluttering services safely
Photographs of your space are taken only with your consent, and we use them to plan our work together and remember where things belong between sessions. They are stored securely in our private client records and deleted if you ask or if you withdraw consent. We never share or publish photographs by default. Some clients choose to let us share photographs in fully anonymised form, with nothing that identifies you or your home; that only ever happens with your separate agreement. And if you would rather we did not share, we will not ask again.
4. Sharing your data
We do not sell your data. We only share it with third parties if necessary to run the business, such as:
- Accountants (for tax purposes)
- Gov.uk / HMRC (if legally required)
- Google, for an optional one-question survey about your shop order, only if you say yes to it on the thank-you page (Google Customer Reviews)
Free downloads and Kari's notes
When you ask for a free download, we keep only your email address, so we can send you the link and so your downloads keep working. We do not store which page you came from or which download you asked for against your email. We count downloads without any email attached.
Kari's occasional notes are a separate choice. You only get them if you tick the box on the form, or sign up on our newsletter page. Leaving the box unticked still gets you your download.
- Why: for the download, so we can do what you asked; for Kari's notes, your consent, which you give by ticking the box and confirming your email.
- Who holds it: our email service Brevo (Sendinblue SAS) keeps your email address on our behalf. We do not sell it or share it with anyone else.
- How long: until you ask us to remove it. Every note from Kari has a one-click unsubscribe link, and you can email us at any time to be removed completely.
- On your device: once you confirm, we set a small cookie for a year so your downloads open without signing up again. It holds your email address in a signed form and nothing else. Clearing your cookies removes it.
5. Data retention
We keep client records, including the record of you signing our terms, for seven years: tax law asks for six, and our insurer asks for seven. After this period, paper records are shredded and digital records are deleted. In a digital session or tech help we see what is on your screen while we work with you. We keep none of it, apart from a screenshot you have agreed to, which is deleted once the job is done.
6. Your rights
Under the UK GDPR, you have the right to:
- Request a copy of the data we hold on you
- Ask us to correct wrong information
- Ask us to delete your data (unless we need to keep it for tax reasons)
- Withdraw consent for marketing or communication at any time
7. Contact us
For any privacy questions, please contact Karina at kari@healing-spaces-kari.co.uk or 07752 212213.
8. Changes to this policy
We review our Privacy Policy regularly. Updates will be posted on this page with the latest effective date.