Last updated 8 November 2026.
Who we are
This notice covers the websites inherbody.co.uk and drkamilahortynska1.com and the services of Dr Kamila Hortynska, clinical psychologist (HCPC registered), trading as In Her Body and Dr Kamila Hortynska. The data controller is TRUE SOUL QM LTD, a company registered in England and Wales (company number 16476956), registered with the Information Commissioner’s Office under reference ZC294193. You can contact us about anything in this notice at hello@drkamilahortynska.com.
What we collect, why, and on what basis
| When | What | Why and lawful basis |
|---|---|---|
| You visit either website | Pages visited, device and browser type, approximate location, how you reached the site (cookies and analytics, see below) | To run and improve the site. Legitimate interests; analytics and advertising cookies only with your consent |
| You contact us (contact form, email, Psychology Today, social media message) | Your name, email, phone if given, and what you write | To answer you. Legitimate interests. Kept 12 months, then deleted unless you become a client |
| You sign up for a free guide, the newsletter or a free event | First name, email address, which guide or event, and whether you open or click our emails | To send what you asked for and our newsletter. Consent; you can unsubscribe at any time from any email |
| You book a free connection call or a session | Name, email, phone, time zone, and the answers you give on the booking form (which may include why you are getting in touch) | To arrange and provide the service. Contract. Health information you give here is handled as below |
| You work with us 1:1 | Your contact details, the dates of your sessions, anything you choose to send us (for example a questionnaire or a message), and invoices or receipts if you ask for them | To provide the service and keep accounts. Contract; for anything about your health that you choose to share, Article 9(2)(h) UK GDPR (provision of health care) with the common-law duty of confidentiality; legal obligation for accounts |
| You buy an ebook, course, recording or meditation | Name, email, billing address, what you bought; payment is taken by Stripe or PayPal, and we never see your full card number | To deliver what you bought and keep accounts. Contract and legal obligation |
| You join an online event (Q&A, masterclass, Academy, retreat) | Name, email, and if you choose to speak, your voice and image during the session. Q&A sessions are not recorded. Masterclasses may be recorded; participants’ faces, voices and names are removed before any recording is shared, unless they give their consent to be included | To run the event. Contract or consent |
Who we share information with
We use mainstream services to run the business, and your information is stored in them: Google Workspace (email, documents), MailerLite (newsletter and free guides), Acuity Scheduling (bookings), WooCommerce on our own websites with Stripe and PayPal (payments), Zoom (sessions and events), Substack (newsletter readers who subscribe there), Canva and Descript (only for content creation, no client data), and an accountant for company accounts. Each of these acts under a contract that requires them to protect your data. We do not sell or rent your information, and we do not share client information with anyone unless you specifically ask us to (for example a letter to your GP), the law requires it, or there is a serious risk to your life or someone else’s. In that last case, we tell you first unless doing so would increase the risk.
Where your data is kept
Some of these services store data in the UK or EU and some in the USA. This is standard practice, and these transfers outside the UK are covered by the UK–US Data Bridge or by standard contractual clauses approved by the UK government.
How we keep it safe
The devices and accounts we use are password-protected and we use mainstream providers with their own security standards. Email is not a fully secure channel: if you want to send us something personal, you are welcome to password-protect the file and give us the password separately; the choice of how to send it is yours.
How long we keep it
- Information from 1:1 work: 7 years after your last session, then securely deleted.
- Accounts and invoices: 6 years after the end of the tax year they relate to (HMRC requirement).
- Newsletter and free guide subscribers: until you unsubscribe, then deleted within 30 days. Subscribers who have not opened any email for a long period are regularly removed.
- Enquiries that do not lead to work: 12 months.
- Event bookings: kept with your contact details as above. The free Q&A is not recorded.
Cookies and analytics
Both sites use cookies that are needed for the site to work (for example the shopping basket). With your consent, they also use Google Analytics to see how the site is used, and Google Ads and Meta (Facebook and Instagram) advertising cookies to measure our adverts. You can refuse these in the cookie banner and change your choice at any time through the cookie settings link in the footer, or through your browser. Pages may contain embedded content (for example YouTube or Spotify players), which behaves as if you had visited that site.
Your rights
You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it (we may need to keep client and accounting records for the periods above), object to or restrict how we use it, ask for it in a portable format, and withdraw consent at any time where consent is the basis. Email hello@drkamilahortynska.com; we reply within one month. Please note that under UK law, access to health records can in rare cases be limited where disclosure would cause serious harm.
Complaints
If something is wrong, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this notice
We review this notice at least once a year and whenever we change how we work. The date at the top shows the current version.
