Effective Date: March 2, 2025
Business Name: Maevesphere
Location: London, United Kingdom
Contact: www.maevesphere.co.uk

Email: hello@maevesphere.com

​

​

​

Maevesphere, operated by Anna Maeve Moss and based in London, United Kingdom, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you engage with our Reiki, distant Reiki and coaching services or purchase products (physical and digital) through our online platform. We serve clients and customers worldwide and comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and other applicable data protection laws.

​

By using our services or making a purchase, you consent to the practices described below. Please read this policy carefully.

​

1. Data We Collect

We collect the following personal data to provide our services and fulfill orders:

• Identity and Contact Data: Name, email address, and (for physical products) postal address.

• Health Data: Information provided via health questionnaires (mandatory for Reiki/coaching clients), such as medical history or conditions relevant to sessions.

• Payment Data: Billing details (e.g., credit/debit card or bank transfer information) processed through secure third-party payment providers.

• Technical Data: IP address, browser type, and device information collected automatically when you visit our website.

• Communication Data: Details from emails, forms, or video/voice consultations related to bookings or inquiries.

 

2. How We Collect Data

• Directly from You: When you book a service, complete a health questionnaire, place an order, or contact us via email or our website form.

• Automatically: Through cookies or similar technologies on our website (see Section 8 for details).

• Third Parties: From payment processors or delivery services (e.g., postal providers) to complete transactions or shipments.

 

3. How We Use Your Data

We use your data for the following purposes, based on lawful grounds under UK/EU GDPR:

• Service Delivery (Contract): To schedule and provide distant Reiki/coaching sessions, send post-session feedback reports, and deliver digital products (e.g., e-books, meditations).

• Order Fulfillment (Contract): To process payments and ship physical products (e.g., art prints, journals).

• Legal Compliance (Legal Obligation): To meet tax, accounting, or consumer protection requirements.

• Communication (Legitimate Interest): To confirm bookings, respond to inquiries, or notify you of changes to services/products.

• Safety (Legitimate Interest): To assess health questionnaire responses and ensure safe service provision (e.g., referring clients with serious issues to professionals).

• Website Improvement (Legitimate Interest): To analyze technical data for enhancing user experience (with consent where required).

 

4. Data Sharing

We do not sell or share your data for marketing purposes. Data is shared only as necessary:

• Service Providers: With third-party platforms (e.g., payment processors, email services, or digital communication tools) under strict data protection agreements.

• Delivery Partners: With postal services for shipping physical products.

• Legal Authorities: If required by law or to protect our rights (e.g., fraud prevention).

 

5. Data Storage and Security

• Storage: Data is stored securely on encrypted servers or password-protected systems within the UK. Health questionnaires are kept in confidential, restricted-access files.

• Retention:

  • Service data (e.g., health info) is retained for 6 years post-last session, per UK legal requirements for potential claims.

  • Purchase data is kept for 7 years for tax purposes.

  • Communication data is retained for 2 years unless ongoing engagement requires longer.

• Security: We use industry-standard measures (e.g., encryption, firewalls) to protect against unauthorized access, loss, or breach. In case of a data breach, we’ll notify you and relevant authorities within 72 hours, per GDPR.

 

6. International Data Transfers

For clients/customers outside the UK/EU, data may be transferred globally to deliver services (e.g., feedback reports) or fulfill orders (e.g., shipping). We ensure adequate safeguards (e.g., Standard Contractual Clauses) to maintain GDPR-level protection, regardless of location.

 

7. Your Rights

Under UK/EU GDPR, you have the following rights:

• Access: Request a copy of your data.

• Rectification: Correct inaccurate data.

• Erasure: Request deletion (subject to legal retention obligations).

• Restriction: Limit processing in certain cases.

• Objection: Object to processing based on legitimate interests.

• Portability: Receive your data in a structured format.

• Withdraw Consent: Where consent applies (e.g., cookies), withdraw it anytime.
  To exercise these rights, email [insert contact]. We’ll respond within 30 days. You may also complain to the UK Information Commissioner’s Office (ICO) or your local EU data authority.

 

8. Cookies and Tracking

Our website may use cookies for functionality (e.g., navigation) and analytics (e.g., site usage). Essential cookies don’t require consent; optional ones (e.g., analytics) do—we’ll prompt you via a cookie banner. You can manage preferences in your browser settings.

 

9. Third-Party Links

Our website may link to external sites (e.g., payment processors). We’re not responsible for their privacy practices—review their policies separately.

 

10. Children’s Data

Services are for individuals 18+ (or with parental consent if under 18). We do not knowingly collect data from children without consent.

 

11. Updates to This Policy

 

We may update this Privacy Policy. Changes will be posted on our website or emailed to you, effective upon posting.

 

 

 

Contact Us

For questions or to exercise your rights, email to: hello@maevesphere.co.uk

We’re dedicated to safeguarding your data while supporting your healing and creative journey.

​