Privacy and safeguarding policy


Privacy Policy

Last updated: 05/05/2026

Unstoppable Voices Youth Project is part of Herosoma company which is committed to protecting your privacy and handling your personal information with care and respect. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, contact us, book a session, or use our services.

By using our website or engaging with our services, you agree to the terms of this Privacy Policy.

Who we are

Herosoma is a trauma-informed somatic therapy and wellbeing practice based in the UK. Unstoppable Voices Youth Project is part of bigger extension for community wellbeing purpose.

If you have any questions about this Privacy Policy or how your information is used, you can contact us at:

Business name: Herosoma
Contact name: Anna Pichlewska
Email: hello@herosoma.co.uk
Phone: 07903772900
Location: Andover – Hampshire

What information we collect

We may collect and process the following personal information:

  • Your name.
  • Your email address and phone number.
  • Your booking and appointment details.
  • Information you share in contact forms, emails, WhatsApp messages, or booking forms.
  • Information you choose to share about your health, wellbeing, lifestyle, or personal history.
  • Session notes and records relating to your appointments.
  • Payment information, where relevant.
  • Technical information such as website usage data, if cookies or analytics are used.

Why we collect your information

We use your information to:

  • Respond to enquiries.
  • Manage bookings and appointments.
  • Provide our services safely and appropriately.
  • Keep client records.
  • Process payments and issue invoices.
  • Communicate important updates about sessions or services.
  • Meet legal, insurance, and professional obligations.
  • Improve our website and services.

Lawful basis for processing

Under UK GDPR, we must have a lawful basis for processing your personal data.

We may process your data on the basis of:

  • Contract – when it is necessary to provide the services you have requested.
  • Consent – where you have given clear permission.
  • Legal obligation – where we are required to keep or share information by law.
  • Legitimate interests – where processing is necessary for the running of our business and does not override your rights.

Where we process special category data, such as health or wellbeing information, we do so only where necessary to provide therapeutic or wellbeing services and with appropriate safeguards in place.

How we store and protect your information

We take appropriate steps to keep your information secure. This may include:

  • Password-protected devices and accounts.
  • Secure cloud storage.
  • Restricted access to client records.
  • Safe storage of any paper records.
  • Regular review and deletion of data that is no longer needed.

Third-party services

We use trusted third-party services to support our business operations, including:

  • Setmore for online booking and appointment management.
  • WhatsApp for messaging and communication.
  • Titan for email services.
  • WordPress for our website.
  • Stripe for payment processing.

These services may process personal information on our behalf or independently in accordance with their own privacy policies. We recommend reviewing their privacy policies for further information about how they handle your data.

How long we keep your information

We only keep personal data for as long as necessary for the purposes for which it was collected, including legal, accounting, and insurance requirements.

If you do not go on to book a session, we will usually delete your contact details after a reasonable period unless we need to keep them for legal or business reasons. Where services have been provided, records may be kept for a longer period in line with professional or legal requirements.

Sharing your information

We do not sell your data.

We may share your information only where necessary with:

  • Payment processors.
  • Booking platforms.
  • Email or cloud service providers.
  • Professional advisers such as accountants, insurers, or legal advisers.
  • Emergency services or safeguarding bodies, if there is a serious risk of harm.
  • Other organisations where required by law.

Any third-party providers we use are expected to handle your data securely and in line with data protection law.

Confidentiality and safeguarding

We treat all client information as confidential. However, confidentiality may need to be broken if:

  • There is a serious risk of harm to you or another person.
  • We are required to do so by law.
  • A safeguarding concern arises involving a child or vulnerable person.

Where possible, we will explain this to you first.

Your rights

Under data protection law, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your data in certain circumstances.
  • Ask us to restrict or object to certain processing.
  • Withdraw consent where consent is the basis for processing.
  • Request a copy of your data in a portable format, where applicable.

To exercise any of these rights, please contact us using the details above.

Cookies

Our website may use cookies to improve your experience and understand how visitors use the site. You can adjust your browser settings to control or block cookies.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Complaints

If you are unhappy with how your personal information has been handled, please contact us first so we can try to resolve the matter.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO).

Website: ico.org.uk