Privacy Policy

Last Updated: 25 June 2026

WhiteOak Healing Pathways is committed to protecting your privacy and handling your personal information transparently and responsibly.

1. Who We Are

WhiteOak Healing Pathways

Email: whiteoakhypnotherapy@gmail.com

Website: www.whiteoakhealingpathways.co.uk

For the purposes of UK data protection law, WhiteOak Healing Pathways is the Data Controller responsible for your personal information.

2. Information We Collect

We may collect:

Name
Email address
Telephone number
Billing information
Booking information
Health history
Information you voluntarily provide during enquiries or sessions
Website usage information through cookies and analytics

This could be through Calendly, Stripe, PayPal, Sumup, Google Analytics, Wix or Jotform.

3. How We Use Your Information

We use your information to:

Respond to enquiries
Deliver booked services
Process payments
Send appointment confirmations
Provide customer support
Improve website performance
Send newsletters or marketing communications where consent has been given

4. Lawful Basis for Processing

Under UK/IOM GDPR, we process your personal information on the basis of:

Consent
Contract performance
Legitimate interests
Compliance with legal obligations

5. Special Category Data

Clients may voluntarily disclose sensitive personal information during sessions.

Such information is only processed where necessary for the provision of requested services and is treated confidentially.

6. Marketing Communications

You will only receive marketing emails where:

You have provided consent; or
Applicable law otherwise permits communication.

You may unsubscribe at any time using the unsubscribe link or by contacting us.

7. Data Sharing

Your information will never be sold.

Information may be shared with trusted service providers who assist in operating the business, including:

Website hosting providers
Booking systems
Payment processors
Email marketing providers

These providers are required to protect your information appropriately.

8. International Transfers

As services are offered internationally, some data may be processed outside the UK.

Where this occurs, appropriate safeguards are implemented in accordance with UK GDPR requirements.

9. Data Retention

Personal information is retained only as long as necessary to:

Provide services
Meet legal obligations
Resolve disputes
Maintain business records and for insurance purposes.

When no longer required, information will be securely deleted.

10. Your Rights

You have the right to:

Access your data
Correct inaccurate information
Request deletion of your data
Restrict processing
Object to processing
Withdraw consent
Request data portability

Requests may be submitted using the contact details below.

11. Security

Reasonable technical and organisational measures are used to protect personal information from unauthorised access, loss, misuse, or disclosure.

12. Complaints

If you are dissatisfied with how your data is handled, you may contact us directly.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

13. Contact