Last updated: 10 October 2026
This notice explains how Lavinia uses personal information when you visit lavinia.ws, enquire about or book a reading, make a payment, request a recording or submit a testimonial.
Who is responsible for your information?
Lavinia is owned by Lavinia Lunt, who is the controller of personal information used in the business.
Contact: Lavinia Lunt, trading as Lavinia, 5 Cheddar Grove, Burtonwood, Warrington, Cheshire WA5 4PB, United Kingdom.
Email: lavinia@lavinia.ws
Telephone: +44 (0)7985 157112.
Enquiries, bookings and payments
We use the name, contact details, requested service, preferred dates and messages you provide to respond to your enquiry and arrange your reading. Information needed to arrange and provide a requested service is processed to take steps at your request before a contract or to perform that contract. General correspondence is handled in our legitimate interests in answering enquiries and running the business.
Booking records are retained only for accounting purposes. We do not keep session notes or a separate history of the contents of your readings. Accounting information is retained to meet applicable tax and recordkeeping obligations, for the period those obligations require. This is separate from the two-year recording policy below.
Payments are managed through WooCommerce, with Stripe enabled for card processing. Order, billing, payment-status and transaction information is used to administer payments and meet accounting obligations. Payment security and fraud prevention also serve legitimate interests in protecting customers and the business. Enter card details only in the payment form; do not send them in messages.
Requested recordings
Readings are recorded only if you request a recording, solely to provide a record for you. The email address collected for this purpose is used solely to send you a copy. Recordings and their delivery email addresses are retained for two years from the reading and then deleted. They are not used for marketing or public testimonials.
Recording is optional and is based on your consent. A recording may contain sensitive personal information, including health information or religious or philosophical beliefs. Where this information is recorded, explicit consent is required. You may withdraw consent and request deletion by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal. In a group session, all participants must agree before they are recorded.
The two-year rule applies to the recording and the email address held for its delivery. If you separately use the same address for a booking, payment, enquiry or testimonial, that separate record is handled for the corresponding purpose described in this notice.
Testimonials
Submitting a testimonial is voluntary. We receive your display name, email address, review heading and review text. With your permission, the approved review and display name may be published on the website. The email field is not displayed with your review. Please do not include private information about another person in your submission.
Public testimonials are retained while you permit their publication and they remain relevant to the service. You can withdraw permission or ask for removal by emailing us. We use contact information attached to a submission only to administer the testimonial, not to add you to a marketing list.
Technical information, cookies and online readings
The website and its providers may process IP addresses, browser/device information, cookies and security or error logs to deliver the website, maintain its security and troubleshoot problems. Our basis for necessary security and administration is our legitimate interests in operating a safe, reliable service. Consent is required for non-essential cookies where applicable.
CookieYes is used to manage cookie preferences. Use the cookie preference controls where displayed, or your browser’s cookie settings. Blocking cookies may affect shopping baskets, forms or other functions. Booking a reading does not subscribe you to marketing.
Google reCAPTCHA is used to help protect forms against automated abuse. It processes technical and interaction information. Google’s Privacy Policy and Terms of Service apply to its service.
If you choose a Zoom reading, Zoom processes the name, connection information and audio/video you share to deliver the session. See Zoom’s Privacy Statement. A Zoom appointment is not automatically permission to record it.
Who may receive information?
Information is shared only where needed for the relevant purpose, including with authorised website administrators; hosting, email, recording-storage and backup providers; booking and order-management services; payment and fraud-prevention providers; and accountants, professional advisers or authorities where legally required.
Stripe, Google and Zoom may also act as independent controllers for aspects of their services. Their own notices explain their processing. See Stripe’s Privacy Policy as well as the Google and Zoom notices above.
Some providers operate internationally, including in the United States. Their notices explain processing locations and transfer arrangements. Where we arrange a restricted transfer of your information outside the UK, the transfer must be covered by an applicable UK adequacy decision or another lawful mechanism, such as approved contractual safeguards. Contact us for information about the arrangements applicable to your information and how to obtain a copy of relevant safeguards.
Keeping and protecting information
We limit information to what is needed for its stated purpose. Requested recordings and delivery email addresses have the two-year period described above. Booking information kept for accounting follows applicable legal recordkeeping requirements. No session notes are kept.
Other enquiry correspondence is kept only as needed to deal with the enquiry. Testimonial information follows the publication and administration purposes above. Necessary technical logs and backup copies are subject to their security, recovery and deletion processes rather than being used as a separate customer reading history. When deciding how long these are needed, we consider the task they support, whether a security incident or request is unresolved, and applicable legal obligations.
We use appropriate access restrictions and safeguards for the information we handle. Please avoid sending unnecessary sensitive information in booking forms or information about others without their permission.
Your rights
You can request access to your personal information, correction, deletion, restriction or a portable copy where the relevant right applies. You can withdraw consent at any time by contacting us. Some rights are subject to exceptions, including where information must be retained by law.
Right to object: you can object to processing based on legitimate interests because of your circumstances. You can object to direct marketing at any time.
We may ask for proportionate information to verify your identity. We normally respond within one month, subject to applicable rules on clarification and extensions. Contact lavinia@lavinia.ws to exercise your rights.
You are not required to submit a testimonial or request a recording. However, without the contact, booking or payment details needed for a requested service, we may be unable to arrange or provide it.
Concerns and changes
Please contact us with a concern so we can investigate. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
We will update this notice when our practices change and show the revision date above.