Privacy Policy

Open Hands Energy Last updated: September 3, 2026

Who I Am

Open Hands Energy is operated by me, Erika Scott, a solo energy healer, life coach, and intuitive guide based in the Netherlands. I offer energy healing sessions, intuitive guidance, Human Design and tarot readings, and coaching.

For any privacy-related questions, please contact me at: 📧 hello@openhandsenergy.com

What Data I Collect and Why

I collect personal data in the following contexts:

1. Human Design Chart Tool

When you use my free Human Design chart tool, I collect:

  • Your first name

  • Your email address

  • Your date, time and place of birth

  • Your Human Design chart results derived from that information

  • Your consent record

This data is collected to calculate and display your Human Design chart, and where you have given consent, to contact you with relevant updates and offerings from Open Hands Energy.

2. Newsletter and Email Marketing

When you sign up for my mailing list — whether through my chart tool, my website or another sign-up form — I collect your name and email address.

I use this to send you updates about my services, promotions and personal communications where relevant. Every marketing email I send will include an option to unsubscribe. You may also unsubscribe at any time by replying to any email with the word "unsubscribe" and I will manually remove you from my list within 10 business days.

I currently manage my mailing list manually. In the future I may use a third-party email marketing platform such as Mailchimp, Flodesk or ActiveCampaign. If and when I do, your data will be stored on that platform and I will update this policy accordingly. Any platform I use will be selected with GDPR compliance in mind.

3. Discovery Call Bookings

When you book a discovery call with me, I collect your name, email address and where provided, your phone number. Bookings are managed through third-party scheduling tools including Cal.com, Calendly or Acuity Scheduling, each of which has its own privacy policy.

AI Meeting Summaries My discovery calls are not recorded. However, I use an AI-powered tool (currently Google Gemini) to generate a written summary of the call for my internal notes. This means your call may be transcribed in real time for summarisation purposes. You will be notified of this in your booking confirmation and verbally at the start of the call. The transcript and summary are used solely for my internal reference and are not shared with any third party. If you prefer not to have your call summarised by an AI tool, please let me know before or at the start of the call and I will disable it.

4. Intake Forms

Following a discovery call or ahead of a session, I may ask you to complete an intake form. For energy healing and intuitive guidance sessions, this is managed via Google Forms. For tarot reading bookings, this is managed via Tally.

These forms may collect:

  • Contact details

  • Health information

  • Information about your spiritual beliefs, practices or intentions

Health information and data relating to spiritual beliefs are classified as Special Category Data under GDPR Article 9 and are given the highest level of care and protection. This data is collected solely to allow me to serve you safely and effectively. It is never shared with third parties. Your explicit consent is required before I collect this type of data.

5. Client Session Notes

Following sessions, I may create written notes to support the continuity and quality of your care. These notes may include:

  • Session observations

  • Health and wellbeing information you have shared

  • Spiritual or intuitive guidance relevant to your sessions

These notes are stored securely in password-protected digital files. I am in the process of transitioning to a GDPR-compliant storage solution and am committed to ensuring Special Category Data is stored with appropriate security controls, including access restrictions and strong password protection.

I do not store sensitive client notes in unprotected applications. If you have concerns about how your session notes are stored, please contact me at hello@openhandsenergy.com.

6. Client Communications

I use WhatsApp as a primary communication channel for enquiries, scheduling and general client communication. WhatsApp messages are end-to-end encrypted in transit. WhatsApp is operated by Meta Platforms Inc., a US company. I do not enable WhatsApp cloud backups.

I advise clients not to share sensitive health information or Special Category Data via WhatsApp. For sensitive matters, please communicate with me directly via email or within your intake form.

In the future I may also offer Signal as a secure communication option. Signal uses end-to-end encryption by default for all messages and calls and does not collect metadata in the way that other messaging platforms do. I'll notify clients if and when this option becomes available.

7. Payments

Payments for my services are processed via Stripe. When you make a payment, Stripe collects your name, email address, payment card details and where applicable, your phone number. I do not store your payment card details myself — these are handled entirely by Stripe in accordance with PCI DSS standards. Stripe is GDPR compliant and operates under the EU-US Data Privacy Framework. Please refer to Stripe's Privacy Policy for full details.

8. Invoicing

I issue invoices for my services. Invoices contain your name and, where you are a business client, your address and VAT number. Invoice records are shared with my accountant solely for the purposes of financial administration and legal compliance. My accountant is bound by professional confidentiality obligations.

I retain invoice records for as long as required by Dutch tax law, which is currently a minimum of 7 years.

9. Website Analytics

My website is built on Squarespace, which automatically collects analytics data including pages visited, time spent on site, device type and general geographic location. This data is aggregated and does not identify you personally. Please refer to Squarespace's Privacy Policy for full details.

Legal Basis for Processing

Under GDPR, I process your personal data on the following legal bases:

  • Consent — for marketing communications and for the collection of Special Category Data

  • Contract — to fulfil my services when you book a session or become a client

  • Legitimate interest — to operate, administer and improve my services

  • Legal obligation — to retain financial records as required by Dutch law

Third-Party Services

The following third-party services may process your data as part of my operations:

Service

Purpose

Human Design Hub API

Chart calculation

Google Maps / Places API

City search and timezone lookup

Google Sheets / Google Forms

Data storage and intake forms

Tally

Tarot booking intake forms

Cal.com / Calendly / Acuity

Appointment scheduling

Google Gemini

AI meeting summarisation

WhatsApp (Meta)

Client communication

Signal (future)

Secure client communication

Stripe

Payment processing

Squarespace

Website hosting and analytics

I don't sell, trade or share your personal data with any third parties for their own marketing purposes.

Data Retention

I retain your data for as long as necessary to provide my services and meet my legal obligations:

  • Chart tool data and mailing list — retained until you request deletion or unsubscribe

  • Booking and intake form data — retained for the duration of our working relationship plus 2 years

  • Session notes — retained for the duration of our working relationship plus 2 years

  • Invoice and financial records — retained for a minimum of 7 years as required by Dutch law

  • Payment data — managed and retained by Stripe in accordance with their own policy

Your Rights Under GDPR

As a resident of the European Union, you have the right to:

  • Access the personal data I hold about you

  • Correct any inaccurate or incomplete data

  • Request deletion of your data (right to be forgotten), where no legal obligation requires me to retain it

  • Restrict or object to processing of your data

  • Data portability — receive your data in a structured, commonly used format

  • Withdraw consent at any time without affecting the lawfulness of prior processing

  • Lodge a complaint with the Dutch data protection authority — the Autoriteit Persoonsgegevens (AP) at autoriteitpersoonsgegevens.nl

To exercise any of these rights, please contact me at hello@openhandsenergy.com. I'll respond within 30 days.

Special Category Data

Where I collect health information or data relating to your spiritual beliefs, I do so only with your explicit consent and only to the extent necessary to provide my services safely and effectively. You have the right to withdraw this consent at any time by contacting me at hello@openhandsenergy.com.

Special Category Data is:

  • Never sold or shared with third parties

  • Stored with the highest level of security controls I'm able to apply

  • Retained only for as long as necessary to support your care

  • Deleted upon your request, except where retention is required by law

If you have any concerns about how your Special Category Data is handled, please contact me directly and I'll address your concerns promptly.

Changes to This Policy

I may update this Privacy Policy from time to time as my services, tools or legal obligations change. The date at the top of this page will always reflect the most recent version. Where changes are significant, I'll make reasonable efforts to notify active clients directly.

Contact

If you have any questions about this Privacy Policy, how I handle your data, or to exercise any of your rights, please contact:

Erika Scott Open Hands Energy 📧 hello@openhandsenergy.com