Privacy & Cookie Policy

How The Confluencers looks after your information · Last updated: October 2026

This explains how The Confluencers looks after your personal information, and the rights you have. We are responsible for your information (in legal terms, we are its "controller").

Who we are

The Confluencers is run by Anna Bruni Sabhaney, Anna Bruni

7 Bell Yard

London

WC2A2JR. You can reach us about your information at chat@theconfluencers.com.

What we collect

Contact details — your name, email and phone number, and an emergency contact if you give us one;

Health information you give us — for example, in our health questionnaire — so we can keep sessions safe and suitable for you;
Session information — your bookings, attendance, and the notes we make about our sessions;
Payment information — handled by our payment provider, Stripe; we don't see or store your full card details;
Messages — any correspondence between us;
Your choices — for example, whether you've agreed to hear about our news and events, and when.

Why we use it, and our lawful basis

To provide your sessions and manage our relationship with you — because it's necessary for our contract with you;
To keep proper records and meet our legal, professional and insurance obligations — because the law requires it, or because we have a legitimate interest in keeping accurate records and being able to deal with any complaint or claim;
To send you appointment emails and texts — because it's necessary for our contract with you;
To send you our news and events — only with your consent, which you can withdraw at any time.

About your health information

Health information is given extra protection by law. We collect only what we need to keep your sessions safe and suitable and to work with you well, and we keep it confidential.

We hold and use your health information with your explicit consent (UK GDPR Article 9(2)(a)). You can withdraw your consent at any time by telling us. If you do, we'll stop using it for future sessions — which may mean we can't safely offer some sessions — but we may keep the records we've already made where we need them to establish or defend a legal claim (Article 9(2)(f)).

If we believe you or someone else is at serious risk of harm, we may share relevant information with emergency services or safeguarding bodies without your consent, where the law allows this.

Who we share it with

We never sell your information. We use a small number of trusted providers to run the practice:

Holder — the practice software we use to keep records and manage bookings, payments, messages and online sessions. Holder handles your information only on our instructions, and uses carefully chosen providers of its own for hosting, email and text messages, video and backups. They are listed at holder.cloud/dpa.
Stripe — to take payments. Stripe also uses some payment information for its own purposes, such as preventing fraud, under its own privacy policy.
AI features — we use AI features in our practice software to help with tidying session notes, preparing a brief before each day’s sessions and making a first read of new enquiries. The information is processed by Holder's AI provider only to produce the result, is never used to train AI models, and is deleted within 30 days (other than in narrow cases such as a legal hold). A person — us — always checks the result; no decision about you is made automatically.

We may also share information where the law requires it, or to protect someone from serious harm.

Our emails and texts

We'll email and text you about your bookings — confirmations, reminders and receipts. We only text you about appointments, never with marketing.

We'll only send you our news, offers and events if you've said yes. We never pre-tick that box, and we keep a record of what you agreed to and when. Every mailout has an unsubscribe link, and you can also just tell us.

Cookies on our booking pages

Our booking pages use only the cookies needed to make them work and keep them secure. We don't use analytics, advertising or tracking cookies on them, so there's no cookie banner. The check that protects our public forms from automated abuse uses no cookies: your browser solves a short calculation, and the result is sent only to Holder. Where a booking includes a step run by another company, such as card payment by Stripe or the video room for an online session, that company may set its own cookies needed for that step.

Where your information is stored

Your information is stored on secure servers in the EU (Ireland) by our practice software provider, Holder, which is based in the UK. Online sessions run through a video service in the UK (London). The UK and the EU each recognise the other as protecting personal information adequately, so it stays protected as it moves between them. If any provider handles information outside the UK and EEA — for example, Holder's AI provider — it's covered by an approved legal safeguard, such as standard contractual clauses.

How long we keep it

We keep your records for 7 years after your last session, in line with our professional and insurance obligations, and then delete them securely or anonymise them.

If you are on our mailing list, we keep your contact details until you unsubscribe.

If you withdraw your consent or ask us to delete your information, we'll stop using it and delete what we can, but we may need to keep our session records for that period where the law requires it or to deal with any legal claim, and we'll tell you if so.

Your rights

You can ask for a copy of your information, and ask us to correct it, delete it, limit how we use it, or give it to you in a portable format. You can object to how we use it, and you can withdraw any consent at any time (this doesn't affect what we did before you withdrew).

To use any of these rights, or if you're unhappy with how we've handled your information, contact us at chat@theconfluencers.com. We'll respond within the time the law allows (usually one month) and won't charge you.

If you're unhappy with how we've dealt with your concern, you can complain to the Information Commissioner's Office (ico.org.uk). We'd rather you came to us first, and we'll acknowledge any complaint within 30 days.

Automated decisions

We don't make decisions about you by automated means alone.

Third-party links

Our website may link to other websites. We are not responsible for their content or privacy practices — please read their own privacy notices.

Children

Our services are for adults (18+). We do not knowingly collect data from children under 18.

Security and changes

We protect your information with secure practice software (encrypted, with strict access controls), and with care in how we handle it. We may update this policy from time to time, and we'll show the date of the latest version at the top.

Contact: chat@theconfluencers.com