Your privacy really matters to me, especially in work as personal as therapy. This policy explains what information Elite Mindset Therapy collects, why I collect it, how I look after it, and the choices and rights you have. It applies to this website, my free resources, my emails and text messages, and my one to one and group sessions.
In this policy, "I", "me", "we" and "us" mean Elite Mindset Therapy, run by Chantal Karyta. "You" means anyone who visits this website, signs up for a free resource, or works with me.
1. Who is responsible for your information
Elite Mindset Therapy is the controller of your personal information (called the "responsible party" under South African law). If you have any questions about this policy or your information, you can contact me at [email protected].
2. The information I collect
Information you give me
- Your first name and email address when you sign up for a free resource such as the Believe in Yourself meditation.
- Your mobile number, if you choose to give it, and whether you've agreed to receive text messages.
- Anything you share when you email me, reply to my emails, message me or book a call.
- If you become a client: your contact details, booking and payment records, and the information you share before, during and after sessions.
Sensitive information. When you work with me as a client, you may share information about your health, emotional wellbeing, relationships or past experiences. This is treated as special category (or special) personal information. I only collect it when it's needed for your sessions, I only use it to support you, and I keep it confidential.
Information collected automatically
- Basic technical information such as your browser, device, IP address and the pages you visit, collected through cookies and similar technology on this website.
- Whether you open my emails or click links in them, so I can understand what's useful and keep my list healthy.
3. How I use your information
- To send you the free resource you asked for, and the short series of follow-up emails that goes with it.
- To send you my newsletter and occasional emails about my work, offers and events, which you can unsubscribe from at any time.
- To send you occasional text messages, but only if you ticked the box to say you're happy to receive them.
- To reply to your questions and arrange calls or sessions.
- To deliver sessions, create your personalised recordings, take payment and keep the records I need to run my practice.
- To keep this website secure and working properly, and to improve it.
- To meet my legal, tax and professional obligations.
I don't sell your personal information, and I don't share it with anyone for their own marketing.
4. My lawful reasons for using your information
Under UK data protection law (UK GDPR) and South Africa's Protection of Personal Information Act (POPIA), I must have a lawful reason to use your information. I rely on:
- Consent for marketing emails, text messages and non-essential cookies. You can withdraw your consent at any time.
- Contract when you book and pay for sessions, so I can provide what you've signed up for.
- Legitimate interests to run and improve my business and this website, in ways you would reasonably expect.
- Legal obligation to keep financial and other records the law requires.
- Explicit consent for any sensitive health or wellbeing information you share as a client.
5. Text messages
If you give me your mobile number and tick the box to say you're happy to hear from me, I may send you occasional text messages about my work and offers. Message frequency varies, and message and data rates may apply. You can opt out at any time by replying STOP, and you can reply HELP for help. Giving your mobile number is always optional, and agreeing to texts is never a condition of receiving anything from me. I don't share your mobile number or your consent to receive texts with third parties for their own marketing.
6. Who I share your information with
I only share your information with trusted providers who help me run my business, and only as much as they need. They're only allowed to use it to provide their service to me. These include:
- My CRM and website platform (Funnel Sketchers, powered by HighLevel), which hosts this website, stores contact details and sends my emails and texts.
- Email delivery services such as Mailgun.
- Video call platforms such as Zoom, for online sessions.
- Payment providers, when you pay for a service.
- My accountant and professional advisers, where needed.
I may also share information if the law requires it, or if I believe someone is at serious risk of harm.
7. International transfers
I work across the UK and South Africa, and some of my providers store data in the United States and other countries. When your information is transferred abroad, I make sure appropriate safeguards are in place, such as approved contract clauses, so it's protected to the standard UK and South African law requires.
8. How long I keep your information
- Mailing list details: until you unsubscribe, or after a long period with no engagement, when I may remove you.
- Client records: for up to 7 years after our last session, in line with professional and tax requirements, and then securely deleted.
- Enquiries that don't lead to working together: up to 2 years.
9. How I keep it safe
I use reputable, secure platforms, keep access to client information to myself, and take sensible steps to protect your information from loss, misuse or unauthorised access. No system is ever completely secure, but I take this seriously and will act quickly if anything goes wrong, including telling you and the relevant regulator where the law requires it.
10. Your rights
Depending on where you live, you have the right to:
- Ask for a copy of the information I hold about you.
- Ask me to correct anything that's wrong or incomplete.
- Ask me to delete your information.
- Object to, or ask me to limit, how I use your information.
- Ask for your information in a portable format.
- Withdraw your consent at any time, without affecting anything done before.
- Opt out of marketing at any time, using the unsubscribe link in any email or by replying STOP to a text.
If you live in the United States, some states (such as California, Colorado, Connecticut, Virginia and others) give you similar rights to know about, access, correct and delete your personal information, and to opt out of its sale or use for targeted advertising. I don't sell your personal information or share it for targeted advertising, and I won't treat you differently for using your rights.
To use any of these rights, email [email protected]. I'll reply within one month, and I may need to confirm your identity first.
11. Making a complaint
If you're unhappy with how I've handled your information, please talk to me first and I'll do my very best to put it right. You also have the right to complain to a regulator:
- UK: the Information Commissioner's Office (ICO), ico.org.uk
- South Africa: the Information Regulator, inforegulator.org.za
- United States: your state Attorney General or consumer protection office
12. Cookies
This website uses cookies that it needs to work properly, and may use analytics cookies to help me understand how it's used. You can block or delete cookies in your browser settings at any time, although some parts of the website may not work as well if you do.
13. Children
My website, resources and services are for adults aged 18 and over. I don't knowingly collect information from anyone under 18.
14. Changes to this policy
I may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.