top of page

Privacy Policy

Last updated: 31 July 2026

 

Found in Sound respects your privacy and is committed to protecting your personal information. This privacy policy explains what information we collect, why we collect it, how it is used and stored, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. Who we are

Found in Sound is the trading name of Laura Pacheco, a sole trader based in the United Kingdom. Laura Pacheco is the data controller responsible for the personal information collected and processed by Found in Sound. Tom Robertson assists with some aspects of the business and may access limited personal information where necessary to help administer bookings, deliver sessions, respond to enquiries or operate Found in Sound. He is expected to handle this information confidentially and only for its intended purpose.

 

Contact details

Found in Sound
The Chapel

18-20 Greatness Road
Sevenoaks
Kent
United Kingdom

Email: foundinsoundappointments@gmail.com
Telephone: 07429 803097
Website: www.foundinsound.co.uk

​

2. The information we may collect

Depending on how you interact with Found in Sound, we may collect:

​

  • Your name, email address, telephone number and postal address.

  • Booking, appointment and attendance information.

  • Information you provide when contacting us by email, telephone, website form or social media.

  • Payment, order and transaction information.

  • Information connected with digital purchases, including Sonic Lumins purchases and downloads.

  • Account or site-membership information created through our website.

  • Marketing and communication preferences.

  • Responses to surveys, feedback forms, reviews or listening reflections.

  • Technical information about how you use our website, such as your IP address, device, browser and cookie preferences.

  • Photographs, audio or video recordings where you have given permission.

  • Information supplied through third-party booking platforms such as Treatwell or ClassPass.

​

3. Health and wellbeing information

When you book or attend a sound therapy, sound massage, reiki or related wellbeing session, we may ask for information concerning your:

​

  • Physical health and medical history.

  • Mental or emotional wellbeing.

  • Pregnancy.

  • Medication.

  • Injuries, operations or implanted medical devices.

  • Accessibility requirements.

  • Reasons for attending and anything relevant to adapting your session safely.

  • Experiences or responses during and following a session.

 

You may also choose to disclose physical, emotional or wellbeing information through a Sonic Lumins listening reflection or another feedback form. Information concerning a person’s health is treated as special-category data under UK data-protection law and receives additional protection. We will only collect information that is relevant to the purpose for which it is requested. Where we rely on explicit consent to process health or wellbeing information, you may withdraw that consent by contacting us. Withdrawal will not affect processing that took place before consent was withdrawn. Please do not provide more personal or medical information than you feel is necessary.

​

4. How we collect your information

We may collect information when you:
 

  • Visit or use our website.

  • Contact us directly.

  • Join our mailing list.

  • Book, cancel or attend a session or event.

  • Complete a consultation, consent or health-information form.

  • Purchase a service, gift card, event ticket or digital product.

  • Create a Wix customer or member account.

  • Purchase or download a Sonic Lumin or Sonic Lumins collection.

  • Complete a listening reflection, questionnaire or feedback form.

  • Leave a review or testimonial.

  • Participate in a photograph, recording or promotional activity with your consent.

  • Book through a third-party platform.


Some technical information may also be collected automatically through cookies and similar website technologies.


5. Why we use your information

We may use your information to:
 

  • Respond to enquiries.

  • Process and manage bookings, cancellations and payments.

  • Provide the products, sessions or events you have requested.

  • Deliver digital products and administer access to purchases.

  • Make reasonable and appropriate adjustments to sessions.

  • Consider whether a service is suitable to provide safely.

  • Maintain appropriate consultation and session records.

  • Send essential information concerning your booking, order or account.

  • Email you a copy of a Sonic Lumins listening reflection where requested.

  • Understand listening experiences and develop Sonic Lumins where explicit consent has been provided.

  • Maintain business, financial and tax records.

  • Manage gift cards, memberships or loyalty benefits.

  • Respond to complaints, concerns or legal claims.

  • Protect the security of our website and business systems.

  • Improve our website, services and customer experience.

  • Send marketing communications where we have permission or another lawful basis to do so.


6. Our lawful bases for processing

Under UK data-protection law, we must have a lawful basis for using personal information. Depending on the circumstances, we may rely on: 

Contract - We process information where it is necessary to provide a product or service you have requested, manage a booking, complete a purchase or fulfil our agreement with you.


Consent - We rely on consent where you have actively chosen to:
 

  • Receive marketing communications.

  • Provide certain health or wellbeing information.

  • Complete and submit a Sonic Lumins listening reflection.

  • Allow photographs, audio, video, feedback or testimonials to be used for an agreed purpose.


Where the information may include health or wellbeing information, we may rely upon your explicit consent under Articles 6(1)(a) and 9(2)(a) of the UK GDPR.


Legal obligation - We may process information where necessary to comply with accounting, tax, insurance, safeguarding or other legal requirements.


Legitimate interests - We may process information where it is reasonably necessary for the operation and protection of Found in Sound, provided that our interests do not override your rights and freedoms. This may include responding to enquiries, maintaining service standards, preventing fraud, protecting our systems and establishing or defending legal claims.


7. Sonic Lumins purchases and listening reflections

When you purchase Sonic Lumins through our website, Wix and the applicable payment provider process the information required to complete the transaction and deliver your download. Found in Sound can access information such as your name, contact details, order, amount paid and transaction status. We do not receive or store your complete card details.
 

Sonic Lumins listening reflections are optional. The questions may invite you to reflect on your physical sensations, emotions, attention, energy, memories or personal insights. You are not required to submit a reflection in order to use a Sonic Lumin you have purchased.

If you submit an online listening reflection:
 

  • We will ask for your explicit consent before collecting it.

  • Your responses may be connected to your email address.

  • We may use your email address to send you a copy of your answers.

  • We may review your responses to understand listening experiences and inform the development of Sonic Lumins.

  • We will not add you to our marketing list unless you provide separate permission.

  • We will not publish your words as a testimonial or identify you publicly without obtaining additional permission.

  • Identifiable reflections will normally be retained for no longer than 12 months.

  • After this period, they will be deleted or converted into genuinely anonymous information that can no longer be connected to you.


A downloadable reflection worksheet may also be provided. If you complete the worksheet privately without submitting it to us, Found in Sound does not collect or process its contents.


8. Marketing communications

We may send news about Found in Sound, Sonic Lumins, sessions, events or related offerings where:

  • You have actively subscribed or given consent; or

  • You are an existing customer and the law allows us to contact you about similar products or services, provided you were given an opportunity to opt out.


You can unsubscribe at any time by using the unsubscribe link in an email or contacting us directly. Consent to marketing is separate from consent to process a booking, purchase, consultation form or listening reflection. You are not required to receive marketing in order to purchase from us or use our services. We may retain limited information on a suppression list to ensure that we respect an unsubscribe request.
 

9. Payments

Payments made through our website are processed by Wix Payments or another payment provider made available through Wix.

Payment providers collect and process payment information under their own privacy policies and security procedures. Found in Sound does not receive or store your complete debit or credit-card number.

We may retain transaction records for accounting, tax, refund, fraud-prevention and dispute-resolution purposes.


10. Who we may share information with

We do not sell your personal information. Where necessary, information may be shared with trusted service providers that help us operate Found in Sound, including:
 

  • Wix, which provides our website, forms, bookings, customer accounts, digital sales, communications and payment facilities.

  • Payment-processing providers.

  • Email and cloud-storage providers, including Google and Dropbox.

  • Booking and marketplace platforms such as Treatwell or ClassPass where you use those services.

  • Accountants, bookkeepers, insurers, professional advisers or legal representatives.

  • Technology, website-support or security providers.

  • Event venues or delivery partners where limited information is necessary to administer an event.

  • Regulators, public authorities, emergency services or law-enforcement bodies where disclosure is legally required or necessary to protect someone’s vital interests.


These organisations may act as independent data controllers or as processors acting on our instructions. We only share information that is reasonably necessary for the relevant purpose.


11. International data transfers

Some service providers may process or store information outside the United Kingdom. Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate legal safeguard is in place. Depending on the destination and provider, this may include UK adequacy regulations, approved contractual protections or the UK International Data Transfer Addendum.

Further information about a provider’s data practices can be found in its own privacy policy.


12. How we store and protect information

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure or alteration. These measures may include:
 

  • Password-protected accounts and devices.

  • Two-factor authentication where available.

  • Restricted access to client and business records.

  • Secure cloud storage.

  • Keeping sensitive information separate from general mailing information where practicable.

  • Limiting access to people who require it for a legitimate business purpose.

  • Reviewing and deleting information when it is no longer required.


No electronic storage or transmission system can be guaranteed to be completely secure, but we take proportionate steps to reduce the risks.


13. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, tax, insurance and professional obligations.

Our usual retention periods are:
 

  • General enquiries: normally up to 12 months after the last meaningful contact.

  • Booking and customer correspondence: normally up to two years after the last booking or interaction, unless it forms part of a session record or is needed for another lawful reason.

  • Consultation, consent and session records: normally up to seven years after the last session, or longer where required by an insurer, professional body or applicable legal limitation period.

  • Children’s records: these may need to be retained for longer in accordance with applicable limitation periods, insurance requirements and safeguarding obligations.

  • Financial, order and transaction records: normally six years after the end of the relevant financial year.

  • Sonic Lumins listening reflections: identifiable responses are normally retained for no longer than 12 months and are then deleted or genuinely anonymised.

  • Marketing information: until you unsubscribe, withdraw consent or we determine that the information is no longer current or necessary.

  • Photographs, recordings and testimonials: for the period covered by the permission given, or until consent is withdrawn where withdrawal is applicable.

  • Legal disputes or complaints: for as long as reasonably necessary to resolve the matter and meet applicable legal or insurance requirements.


Where information is genuinely anonymised so that no individual can be identified, it is no longer personal data and may be retained for statistical or service-development purposes.


14. Cookies and website analytics

Our website uses cookies and similar technologies to operate correctly, remember preferences, process bookings and purchases, maintain security and understand how visitors use the site. Where required, non-essential cookies will only be used after you have made your cookie choices through the website’s consent banner. You can change your cookie preferences through the cookie settings available on our website. Further information can be found in our Cookie Policy.


15. Links to other websites

Our website may contain links to third-party websites or services. Found in Sound is not responsible for the privacy practices, security or content of external websites. You should review the privacy policy of any external service before providing personal information.


16. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Ask for confirmation that we process your personal information.

  • Request a copy of the personal information we hold about you.

  • Ask us to correct information that is inaccurate or incomplete.

  • Ask us to erase your information.

  • Ask us to restrict how your information is used.

  • Object to certain processing.

  • Request the transfer of information you provided to another organisation in an appropriate electronic format.

  • Withdraw consent where consent is the basis for processing.

  • Complain about how your information has been handled.


Some rights are subject to legal exceptions. For example, we may need to retain certain financial records or information connected with an existing legal claim even if you request deletion. To exercise your rights, contact: foundinsoundappointments@gmail.com

We may need to confirm your identity before releasing or changing personal information. We will normally respond within one month.


17. Complaints

If you have concerns about how Found in Sound handles your personal information, please contact us first so that we can try to resolve the matter.


You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:

Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113


18. Changes to this policy

We may update this privacy policy when our services, systems or legal obligations change. The latest version will be published on this page with the date of the most recent update.

bottom of page