Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Living Highly Sensitive, operated by Kavita Sodha, collects, uses and protects your personal information. Your privacy is important to us and we are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Living Highly Sensitive is a private therapy practice operated by Kavita Sodha, BABCP-accredited CBT Therapist. You can contact us at:

Email: [email protected]
Website: livinghighlysensitive.com

What information we collect

We may collect the following personal information:

• Your name and email address when you join the courses waitlist, take the quiz or submit a contact form
• Your name, email address and phone number when you book a consultation or therapy session
• Payment information when you purchase a service (processed securely by Stripe — we do not store card details)
• Information you share in communications with us by email or through the website
• Anonymous usage data collected through website analytics

How we use your information

We use your personal information to:

• Provide therapy services and manage your bookings
• Send appointment confirmations, reminders and follow up communications
• Send you information about courses, resources and updates if you have opted in
• Respond to enquiries and provide support
• Comply with our legal and professional obligations

Confidentiality and therapy records

All information shared within therapy sessions is treated as strictly confidential in accordance with BABCP ethical guidelines. Notes and records relating to therapy are stored securely and separately from general business data. Confidentiality will only be broken in exceptional circumstances where there is a serious risk to your safety or the safety of others, or where required by law. This would always be discussed with you wherever possible.

Legal basis for processing

We process your personal data on the following legal bases:

• Contract — to fulfil our agreement to provide therapy services to you
• Consent — for marketing communications and the courses waitlist
• Legitimate interests — for general business communications and website analytics
• Legal obligation — where required by law or professional regulatory bodies

How we store your data

Your data is stored securely using GoHighLevel, a GDPR-compliant CRM platform, and Stripe for payment processing. We retain client records for a minimum of seven years in line with professional practice guidelines. Waitlist and marketing data is retained until you unsubscribe or request deletion.

Sharing your data

We do not sell or share your personal data with third parties for marketing purposes. We may share data with trusted service providers who assist in operating our business, including GoHighLevel and Stripe, who are bound by their own privacy policies and GDPR obligations. We may also share data where required by law.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent for marketing at any time
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights please contact us at [email protected].

Cookies

Our website uses cookies to analyse traffic and improve your experience. By continuing to use the website you consent to our use of cookies. You can disable cookies in your browser settings at any time.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

Contact us

If you have any questions about this Privacy Policy please contact us at [email protected].