Privacy policy

13 October 2026

Who looks after your information

Kat Chu Ltd, 45 Evesham Road, Stratford-upon-Avon, Warwickshire CV37 9AT.
For privacy questions or requests, email Hello@kat-chu.com.

What we use and why

Contact, booking and payment details are used to arrange your sessions, deliver your purchase and manage administration. Birth information, relevant health and life history, your Food & Mood diary, session notes and your personalised booklet are used to prepare and deliver your constitutional reading and guidance.
We ask only for relevant information. You can discuss sensitive details privately rather than recording unnecessary detail in a form.

Our lawful bases

We use information necessary to arrange and deliver your requested service on the basis of contract. We obtain your explicit consent to use health and other sensitive information for your personalised assessment and guidance. Accounting information is retained where legally required.
Necessary records may also be retained for establishing, exercising or defending legal claims, using the applicable legitimate-interest basis and legal-claims condition. We limit this to relevant information and do not treat it as permission for unrelated use.

Recording and transcription

Zoom calls are not recorded or transcribed without your express agreement. Audio/video recording and transcription are separate optional choices. You may decline either; Kat can take written notes instead. You may ask for recording or transcription to stop during the session.
Agreed recordings and transcripts are used to prepare accurate notes and guidance. Raw audio/video and working transcripts are deleted when that preparation is complete and they are no longer needed, unless a specific lawful reason requires retention. Relevant extracts retained as part of the core client record follow the retention period below.
Client-identifiable records, charts, recordings and transcripts are not supplied to ChatGPT. Kat may use assistance to write general, non-identifying educational material.

Storage and service providers

Paper records are kept securely locked. Digital records are password-protected and access is restricted to those who need it for the stated purpose.
Google Drive provides document storage; Zoom provides video sessions and any agreed recording/transcription; Stripe handles payment; Make connects administrative systems. Booking and email services process the information needed for appointments and communications.
These providers process information under their own applicable terms and data-protection arrangements. Some processing may occur outside the UK. Where such transfers occur, applicable UK transfer requirements must be met, including an adequacy arrangement or other appropriate safeguards. Contact Kat for information about the providers and transfer arrangements used for your records.
We do not sell client information. We share information only as necessary to deliver and administer the service, with your permission, or where lawful disclosure is necessary, such as a legal requirement or protection of vital interests.
Provider privacy information:
Google: https://policies.google.com/privacy
Zoom: https://www.zoom.com/en/trust/privacy/
Stripe: https://stripe.com/privacy
Make: https://www.make.com/en/privacy-notice

How long records are kept

Necessary core client records are kept for seven years after your final session, in line with Kat's insurance requirements. Unnecessary duplicates and working material are removed sooner. At the end of the period, records are securely deleted or anonymised unless a specific lawful reason requires longer retention, such as an unresolved claim. Any extension is reviewed and limited to what is necessary.
Financial records follow applicable accounting retention requirements.

Your rights

You can request access, correction and, where applicable, deletion, restriction, objection or portability by emailing Hello@kat-chu.com. Access requests are normally answered within one month, subject to lawful extensions or necessary clarification.
Where processing relies on your consent, you can withdraw it by emailing the same address. This does not affect lawful processing before withdrawal. Withdrawal may prevent further personalised assessment. We explain any necessary records retained on an independently applicable lawful basis.
You can complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/.
Kat makes your assessment personally; there are no solely automated decisions determining your care.

Marketing

Permission to receive marketing is separate from purchasing The Path or consenting to your reading. Your health information is not used for marketing.