Privacy policy

Who is responsible for your information

Luke Streamer, trading as Lighthouse, is the controller responsible for deciding how personal information is used for the Lighthouse service.

Privacy questions or requests can be sent to hello@lighthouseco.uk.

Information Lighthouse may collect

• Your name, email address and contact details.
• Booking details, including the service, date, time, time zone and meeting information.
• Answers and acknowledgements you submit through the Cal.com booking form.
• Emails, messages and information you voluntarily disclose before, during or after a conversation.
• Limited operational or working notes, if Luke makes them, where reasonably necessary for continuity, agreed actions, administration, safety or legal obligations.
• Payment status, amount and transaction references supplied by Cal.com or Stripe.
• Basic technical and security information generated by website and service providers, such as IP address, browser/device information and request logs.

Lighthouse does not receive or store your full payment-card details. Stripe handles those details within the Cal.com payment process.

Please only share what is reasonably necessary before the conversation. More personal detail can usually wait until we speak.

Why information is used

Personal information is used only where it is needed to:

• arrange, administer and provide a booked conversation;
• confirm eligibility for the Opening Conversation;
• respond to an enquiry or privacy request;
• manage payment, rescheduling, cancellation or a refund;
• maintain appropriate service, financial and legal records;
• protect the safety, rights and legitimate interests of clients, Lighthouse or others; and
• meet legal, regulatory or safeguarding obligations where they apply.

Lawful basis

Lighthouse uses the lawful basis that fits the particular purpose. Contract is used where information is needed to take booking steps at your request or provide and administer the service you booked. Legal obligation is used for records or disclosures the law requires. Legitimate interests may be used to operate and secure the service, keep proportionate records, answer complaints, protect legal rights and manage safety or misuse, where those interests are not overridden by your rights. Consent is used only where it is specifically requested and is genuinely the appropriate basis; it is not the blanket basis for all processing.

Some booking information is needed to make and provide the contract. If required contact, scheduling, payment or eligibility information is not provided, Lighthouse may be unable to accept or deliver the booking.

Sensitive and criminal-offence information

A Lighthouse conversation may naturally involve information that data-protection law treats as particularly sensitive, such as information about health or mental health, racial or ethnic origin, religion or beliefs, sexuality or sex life. You may also choose to mention allegations, convictions, prison history or other criminal-offence information.

Lighthouse does not use this information to diagnose you or build clinical or criminal-history profiles. It will be handled only where there is a valid legal basis and additional condition, and only so far as reasonably necessary to provide the service, manage safety, establish or protect legal rights, or meet a legal obligation. Unnecessary detail should not be recorded or retained.

Booking, payment and service providers

Lighthouse uses a small number of providers to operate the service:

• Vercel hosts and secures the website.
• Cal.com handles booking, scheduling and booking-form information.
• Stripe processes payment through Cal.com.
• Google, including Google Meet and calendar services, supports online meetings and scheduling where used.
• Resend may deliver Lighthouse system email where used; Lighthouse's mailbox and email providers also process messages sent to and from the public email address.

These providers may act as processors for Lighthouse or handle some information under their own responsibilities and privacy notices. Lighthouse remains responsible for its own use of your information and shares only what is reasonably necessary for the relevant service.

Website data and cookies

This website does not currently use analytics, advertising trackers or non-essential cookies. It does not embed the Cal.com booking interface. Following a booking link takes you to Cal.com, where Cal.com's and Stripe's own technologies and notices apply. Vercel may process basic request information and logs to deliver and secure this website.

Free Bearings do not require an account, email address or payment. The Lighthouse website does not ask you to submit a personal account of your situation through the Bearings library.

Notes, retention and deletion

The website does not contain an account, client database or clinical record system. Luke may keep limited manual operational or working notes only where reasonably useful or necessary. Notes should be proportionate, secure and should not become unnecessary sensitive dossiers.

Booking, payment and transaction records may be retained for the periods needed for legal, accounting and tax purposes. Enquiries and correspondence are retained only while reasonably needed to respond, provide the service, manage a complaint or protect legal rights. Any working notes are reviewed and deleted or anonymised when they are no longer useful or required. Legal, safeguarding or dispute-related obligations may require some information to be retained longer.

Reasonable organisational and technical steps are used to protect personal information. No method of storage or communication can be guaranteed to be completely secure.

International processing

Some service providers may process information outside the UK. Where this happens, Lighthouse uses the provider's relevant transfer arrangements and other appropriate safeguards where required by data-protection law. The exact safeguard can depend on the provider, location and processing involved.

Sharing and confidentiality

Lighthouse treats what you share as private, but does not promise absolute confidentiality, therapist-client privilege or legal privilege. Information may be available to the providers needed to run booking, payment, meetings, hosting and email.

Information is not sold. It may be disclosed where required by law, to obtain professional advice, establish or protect legal rights, respond lawfully to crime, fraud or legal process, or where reasonably necessary in response to a serious and immediate safety or safeguarding concern.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; receive certain information in a portable format where applicable; and withdraw consent where consent is the basis used. These rights depend on the circumstances, and a deletion request may not override information Lighthouse must retain by law. Contact hello@lighthouseco.uk.

You can also raise a concern with the UK Information Commissioner's Office through the ICO complaints service.

Changes to this policy

This policy may be updated when the service, providers or legal requirements change. The date at the top of the page will show when it was last updated.