Legal

Privacy Policy

Sing Me Well takes privacy and emotional wellbeing seriously and aims to handle all personal information respectfully and securely. This policy explains what we collect, why we collect it, and the choices you have.

For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), the data controller is Sing Me Well, founded by Jordene Locke, based in the United Kingdom.

Last updated · May 2026

Information we collect

We only collect information that helps us offer a thoughtful, safe service:

  • Identity and contact details you share through our enquiry, consultation and booking forms (name, email, phone, location).
  • Information you choose to share about your goals, voice, wellbeing, or relevant context for sessions.
  • Booking and scheduling information processed through our calendar and session management tools.
  • Payment confirmations from our payment providers (we do not store full card details).
  • Communication preferences for newsletters, waitlists and follow-up emails.
  • Technical information collected automatically via cookies and analytics (see our Cookie Policy).

How we use your information

We use your information to:

  • Respond to enquiries and arrange consultations or sessions.
  • Tailor sessions appropriately and conduct suitability assessments.
  • Manage bookings, rescheduling and cancellations.
  • Send relevant communications such as session reminders, follow-ups, and (with consent) newsletters or waitlist updates.
  • Maintain accurate records for accounting, safeguarding and regulatory purposes.
  • Improve the website, our materials and the overall client experience.

Lawful bases for processing

Under UK GDPR we rely on the following lawful bases:

  • Consent, for marketing emails, newsletters, and optional cookies.
  • Contract, to arrange and deliver consultations and sessions you have booked.
  • Legitimate interests, for replying to enquiries, improving our services and protecting the safety of clients and staff.
  • Legal obligation, for accounting, tax and safeguarding requirements.

Sensitive wellbeing information

Information you share about your wellbeing, emotional health, neurodivergence or personal circumstances is treated with particular care. It is only accessed by those directly involved in delivering or supporting your sessions, stored securely, and never used for marketing. Where information you share would be considered "special category data" under UK GDPR, we rely on your explicit consent and process it only for the purpose of delivering your sessions safely.

Children and young people

Where a session involves a young person under 18, we ask a parent or legal guardian to provide the enquiry information and consent. Information about young people is collected only to the extent needed to plan and deliver sessions safely. Please see our Safeguarding & Young People Policy for more.

How long we keep your information

We keep your information only for as long as it is needed:

  • Enquiry-only contacts: up to 12 months from your last contact.
  • Active and past client records: for up to 6 years after our last session, to meet UK accounting and professional record-keeping standards.
  • Newsletter and waitlist data: until you ask to be removed.
  • Website analytics: aggregated and retained in line with our analytics provider's defaults.

Who we share information with

We never sell your personal information. We share it only with carefully selected third parties that help us run the service, including:

  • Website hosting and domain providers.
  • Email and newsletter platforms.
  • Online booking, calendar and scheduling tools.
  • Payment processors.
  • Cloud storage and backup providers.
  • Professional advisers (accountants, insurers, legal advisers) where required.

These providers act as data processors on our behalf and are bound by appropriate data protection terms. Where any provider is based outside the UK, we ensure suitable safeguards (such as UK adequacy regulations or standard contractual clauses) are in place.

How we keep your information secure

We use reasonable technical and organisational measures to protect your information, including access controls, encrypted connections, reputable providers and staff with a clear duty of confidentiality. No system is completely secure, but we take any breach seriously and will notify you and the Information Commissioner's Office where required by law.

Your rights under UK GDPR

You have the right to:

  • Access the personal information we hold about you.
  • Ask us to correct information that is inaccurate or incomplete.
  • Ask us to delete information where there is no lawful reason to keep it.
  • Restrict or object to certain uses of your information.
  • Withdraw consent at any time where consent is our lawful basis.
  • Request a copy of your information in a portable format.
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, please contact us using the details below.

Cookies and analytics

Our website uses a small number of essential and optional cookies. Please see our Cookie Policy for full details and to manage your preferences.

Changes to this policy

We may update this policy from time to time to reflect changes in our practice, the law, or our service. When we make a meaningful change, we will update the date at the top of this page.

Contact us about your data

Contact