Depending on how you interact with These Three Spoons, I may process:

• Contact information, such as your name, email address and telephone number, to answer enquiries and communicate with you.

• Booking information, including appointments, workshop places, attendance, cancellations and relevant requests, to organise and provide services.

• Payment and invoice information, to process payments, refunds and financial records.

• Nutrition and health information you provide, including relevant pregnancy, allergy, medical, dietary or child-feeding information, to prepare and provide appropriate support.

• Newsletter information, including your email address, subscription preferences and consent records.

• Technical information, such as IP address, browser and device details, requested pages and access times, to deliver and protect the website.

Please provide only information relevant to your enquiry or service. If you share information about a child, please ensure you have parental responsibility or appropriate authority to do so.

I use personal information on the following grounds under the General Data Protection Regulation (GDPR):

• Article 6(1)(b): to arrange and perform a contract with you, including responding to requests about a potential booking.

• Article 6(1)(c): to meet legal obligations, such as tax and accounting requirements.

• Article 6(1)(f): for legitimate interests, including answering general enquiries, securing the website, administering the business and handling legal claims.

• Article 6(1)(a): where you give consent, including for newsletter subscriptions.

Where I rely on consent to process health information, I also obtain your explicit consent under Article 9(2)(a).

You may withdraw consent at any time by contacting me. This does not affect processing lawfully carried out before withdrawal. If essential information cannot be processed, I may be unable to provide the relevant personalised support.

This website is hosted by Squarespace. Squarespace processes technical information needed to operate and secure the website, and information submitted through website forms.

If you use a contact form, I use your details and message to respond and, where relevant, discuss or arrange services. Messages may also be delivered to my business email account through Google Workspace.

For more information:

Squarespace Privacy Policy
Google Cloud Privacy Notice

Bookings are managed through Acuity Scheduling, part of Squarespace. Information entered into the scheduler is processed to manage bookings, confirmations, reminders and cancellations.

Payments are handled by Stripe or PayPal, depending on your choice. The payment provider processes the information needed to complete and secure the transaction. I receive relevant transaction details and payment status, rather than your full card details.

Payment providers may also use information for their own legal, security and fraud-prevention obligations.

Stripe Privacy Policy
PayPal Privacy Statement

Health information and consultation notes are stored on my computer’s hard drive. Information you share through booking forms, email or messaging services is also processed by those providers. Access is limited to authorised purposes, and health information is not used for marketing.

Relevant consultation records are normally kept for three years after the end of the calendar year of our last consultation. Unnecessary information is deleted sooner; records may be kept longer where legally required or needed for legal claims.

Other information is kept only as long as needed: enquiries until no longer required, booking and financial records for applicable statutory periods, and newsletter details until you unsubscribe. Limited records may remain to document consent or respect your opt-out.

Please contact me before sending detailed health information so we can agree how to share it.

I use Google Workspace for business email.

If you contact me through WhatsApp or Instagram, I use the information you send to respond and manage our communication. These services also process information under their own privacy policies. You can contact me by email instead; using WhatsApp or Instagram is not required to book a service.

The Instagram link on this website is an external link, not an embedded feed. Following it takes you to Instagram, where its privacy practices apply.

WhatsApp Privacy Policy
Instagram Privacy Policy

If you subscribe, I use your email address to send nutrition information, business updates and details of services or events through Squarespace Email Campaigns.

You can unsubscribe at any time using the link in an email or by contacting me. Booking a workshop or consultation does not automatically subscribe you to marketing emails.

I retain subscription and consent records as needed to manage your preferences and demonstrate compliance.

Squarespace Email Campaigns records whether you open my newsletters and which links you click, helping me understand what readers find useful and improve future emails.

This website uses cookies and similar technologies to support essential functions, such as security, booking and payment processing.

With your consent, Squarespace also uses analytics cookies to help me understand how visitors use the website and improve it. These optional cookies remain blocked unless you accept them through the cookie banner.

You can accept, reject or manage optional cookies through the banner and change or withdraw your consent at any time using the website’s cookie preferences. Rejecting optional cookies does not prevent you from using the website’s essential features.

Necessary cookies do not require consent where they are strictly required to provide a service you request.

Information is shared only where needed with relevant service providers, including Squarespace/Acuity, Google Workspace, Stripe, PayPal and messaging providers you choose to use. It may also be shared with professional advisers or authorities where necessary and lawful.

Some providers process information outside the European Economic Area. Where required, transfers must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. You can contact me for information about the safeguards relevant to your data.

I do not sell your personal information.

Subject to the applicable legal conditions, you can request access to, correction or deletion of your information, restriction of processing or data portability.

You may object to processing based on legitimate interests for reasons relating to your situation. You may object to direct marketing at any time.

Contact hello@thesethreespoons.com to exercise your rights.

You may also complain to a data protection authority, including the authority where you live or work. For my business in Bavaria, the relevant authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

Providing information is generally voluntary. However, without necessary booking, contact or payment details, I may be unable to arrange or provide a service.

I do not use your information for automated decision-making that produces legal or similarly significant effects.

I will update this policy when my services, systems or data-handling practices change. The date above shows the latest revision.