Privacy notice
Last updated 5 October 2026.
Who I am
I'm Kirstie Carlton-Blake, and I trade as Humblebee Wellness at 33 The Green, St Leonards-on-Sea, East Sussex, TN38 0SX. I decide how your information is used, which makes me the "data controller".
You can reach me at kirstie@humblebee.life or on 07711 209325.
What I collect
- When you book: your name, email address, mobile number (if you give one: it is used only to text you a reminder before your appointment), the appointment you chose, any question or note you add when you book, and whether you'd like occasional news by email.
- Your booking history: appointments booked, moved, cancelled, attended or missed, and deposits paid or refunded.
- Whether your consultation form has been received: the website stores a simple yes or no, and nothing else. No further personal information is collected from or about the form.
- Basic security records: the internet (IP) address used when someone asks for a booking link, so repeated attempts can be slowed down.
- Delivery records: whether an email or text to you was sent.
What I don't collect
This website never sees your consultation form: see "Your consultation form" below.
This website doesn't hold any health or medical information about you. Please don't put health details in the questions box when you book; that's what the consultation form is for.
Your card details: when you pay online, my card payment provider takes the payment on its own secure page, and this website never sees your card number.
There's no tracking, no analytics and no advertising on this website.
Your consultation form
Your consultation form is a Microsoft Form in my own Microsoft 365 account. Your answers go straight to that account, and only I look at them. I don't share them with anyone else.
They are never sent to or stored on this booking website: the website only knows whether I've marked your form as received.
Microsoft stores the answers for me in its EU data centres, as my provider, under its data protection terms with me. I keep them for the same seven years as my other records, then delete them.
Who helps me run it, and where your information is
I use a small number of trusted providers to run my business. Each one only handles what it needs to do its job, under a data protection agreement with me.
| Provider | What it does | Where |
|---|---|---|
| My database provider | Stores the booking records | London, UK |
| My website hosting provider | Runs this website | London, UK. Some technical records, such as logs, may be handled in the United States. |
| My email sending provider | Sends booking emails | Sent from Ireland. Records of what was sent and whether it arrived are kept in the United States. |
| My text message provider | Sends appointment reminder texts, if you gave a mobile number | Processed and stored in Ireland. Its support staff may see them from outside the UK and EU when fixing a problem, and the mobile networks that deliver a text handle it under their own rules. |
| My card payment provider | Takes card payments on its own secure page. It also uses some payment information for its own purposes, such as preventing fraud, under its own privacy policy. | UK, EU and United States |
| Microsoft | My email inbox (replies to booking emails reach me there) and the consultation form | My email is stored in Microsoft's UK or EU data centres. Consultation form answers (Microsoft Forms) are stored in Microsoft's EU data centres. |
The UK recognises the EU as giving your information the same level of protection as here. Some of these providers are based in the United States and handle some information there. Where they do, the transfer is protected in the ways UK law requires: the UK–US data bridge and the UK's approved contract terms, written into each provider's data protection agreement with me.
If you'd like to know which companies I use, just ask and I'll tell you.
Why I use it
| What for | The legal reason |
|---|---|
| Taking, managing and confirming your booking | Contract: I need it to provide the appointment you booked |
| Taking and refunding a deposit | Contract |
| Appointment reminders, by email and, if you gave a mobile, by text | Legitimate interests: helping you not miss an appointment you booked |
| A thank-you after your visit asking for a Google review | Legitimate interests: hearing how your visit went and helping new clients find me. Every one of these emails has an unsubscribe link, and once you use it I won't send you another. |
| Letting me know when someone books, cancels or moves | Legitimate interests: running my diary |
| Occasional news and offers | Consent: only if you ticked the box, and you can withdraw it at any time. |
| Keeping financial records | Legal obligation: tax records |
| Security records | Legitimate interests: preventing misuse |
How long I keep it
Everything this website holds about you is kept for seven years after your last appointment. That's what my insurer expects, and it also covers the tax records HMRC requires.
I review the records and delete them in line with that seven-year period.
Your consultation form answers aren't kept by this website at all. They're kept in my Microsoft 365 account for seven years, then deleted (see "Your consultation form" above).
Your rights
To use any of these, email kirstie@humblebee.life or call 07711 209325. You don't have to pay, and I'll reply within one month. I may need to check it's really you before sharing anything.
- Access: ask for a copy of the information I hold about you.
- Correction: ask me to correct anything that's wrong.
- Deletion: ask me to delete your information. I may need to keep payment records for tax, and I'll tell you if so.
- Restriction: ask me to pause using your information while something is sorted out.
- Portability: ask for your booking details in a file you can take elsewhere.
- Objection: object to reminders, review requests, or anything I do based on legitimate interests. For review requests, the unsubscribe link in the email does this straight away, and it's permanent for that email address.
- Withdrawing consent: stop news and offers at any time, using the unsubscribe link or just by telling me.
Complaints
If you're unhappy with how I've handled your information, please tell me first so I can put it right.
You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113, or write to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Automated decisions
No decisions about you are made automatically. The website works out which appointment times are free; it doesn't make judgements about people.
Changes
If I change this notice, I'll update the date at the top of the page.