Privacy Policy
Effective date: 13 August 2025
Who we are
Horizon EMDR ("we", "us") operates this marketing website and provides the Horizon EMDR platform. For personal data collected via this website, we act as the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
How to contact us
For privacy enquiries, please use the contact form on this website (see Contact). We will respond without undue delay.
What data we collect
- Contact details you provide via the website form (e.g., name, email, company, message).
- Transactional information if you proceed to checkout with our payment partner Lemon Squeezy (they act as an independent controller for payment data and tax/VAT compliance).
- Technical data such as basic server logs and security events needed to operate and secure the site.
This marketing website is not designed to collect health information. Please do not include special category data (e.g., information about health) in free‑text fields.
Horizon EMDR app
The Horizon EMDR platform is designed with a privacy‑first approach: we do not offer session recording or client progress tracking features. Any client information used during a therapy session remains under the therapist’s control. Where we process data to provide the service, we do so with data minimisation and appropriate safeguards.
Why we process your data (lawful bases)
- Legitimate interests: to respond to your enquiries, operate and secure the website, prevent abuse, and understand aggregate interest in our services.
- Contract: to provide you with services you request and to manage your subscription.
- Consent: for optional marketing communications (you can withdraw consent at any time).
- Legal obligation: to meet tax, accounting, and compliance requirements associated with sales.
Cookies and tracking
We use essential cookies to operate this site and facilitate checkout. With your consent, we use privacy‑friendly analytics (Google Analytics with IP anonymisation) to understand aggregate traffic and improve the website. Analytics will only load after you click Accept on the cookie banner. You can change your choice at any time via Cookie settings. We do not use advertising cookies.
Who we share data with
- Netlify (Forms): when you submit the contact form, your submission is processed and stored to deliver it to us.
- Lemon Squeezy: manages checkout and payment processing as seller/merchant of record. They collect payment details and tax information directly.
- Service providers: trusted vendors for hosting, email delivery, and security. Access is limited to what’s needed to provide their service.
We do not sell your personal data.
International transfers
Where personal data is transferred outside the UK (for example, to service providers), we implement appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or other lawful transfer mechanisms.
How long we keep data
We retain contact form submissions for up to 24 months for customer service and audit purposes, unless you request deletion sooner. Transaction records are kept as required by law. We apply data minimisation and delete data when it is no longer needed.
Your rights (UK)
Under UK GDPR you have rights to access, rectify, erase, restrict, or object to processing, and to data portability where applicable. You also have the right to withdraw consent where processing is based on consent.
To exercise your rights, contact us via the Contact form. We may need to verify your identity before responding.
Complaints
If you have concerns about our data handling, you can contact us first and we will try to resolve your concerns. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.
Security
We use appropriate technical and organisational measures to protect personal data. No method of transmission or storage is 100% secure; we continually work to protect your information.
Changes to this policy
We may update this policy from time to time to reflect changes to our practices or the law. The effective date will always be shown at the top of this page.