Privacy Policy

Last updated: August 2026

At The Hallowed Nook, your privacy matters. We collect only the personal information needed to respond to enquiries, manage bookings and orders, provide our services and send updates where you have chosen to receive them.
We do not sell or trade your personal information. This policy explains what we collect, why we use it, how long we keep it and the rights you have over your information.

The Hallowed Nook is an independent UK practice offering sessions, readings, complementary practices, workshops and teaching.
For data-protection purposes, The Hallowed Nook is responsible for deciding how and why your personal information is used.
For questions about this policy or your personal information, contact:
[email protected]

Depending on how you interact with The Hallowed Nook, we may collect:

• Contact details, such as your name and email address, when you make an enquiry, booking or purchase.

• Enquiry and booking information, Including the service or event you are interested in and any relevant practical or accessibility information you provide.

• Order and transaction details, such as billing or delivery information and records of payments. Payments are processed through a third-party payment providers; The Hallowed Nook does not receive or store your full card details.

• Consultation information, including relevant health or wellbeing information you choose to provide when it is necessary for a complementary practice or service.

• Email addresses, when you choose to subscribe to updates from The Hallowed Nook.

• Website and device information, such as IP address, browser type and cookie information, where collected through the website and permitted by your cookie choices.

The Hallowed Nook's services and bookings are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18.

We use personal information only where necessary to:

• Respond to enquiries and communicate with you.

• Manage bookings, appointments, events, orders and payments.

• Provide the session, service, treatment, workshop or teaching you have requested.

• Consider relevant health, wellbeing, accessibility or practical information when providing a service.

• Send occasional updates where you have chosen to receive them.

• Operate, secure and improve the website.

• Maintain appropriate business, financial and service records.

• Meet our legal and regulatory responsibilities.

We do not sell your personal information or use it for unrelated marketing.

Under UK data-protection law, we rely on one or more of the following lawful bases:

• Contract: when we need your information to arrange or provide a booking, service, event or order, or to take steps at your request before a booking is confirmed.

• Consent: when you choose to receive email updates or accept optional cookies. You may withdraw your consent at any time.

• Legitimate interests: when reasonably necessary to respond to enquiries, administer the business, maintain security and understand or improve the website, provided that your rights and interests do not override ours.

• Legal obligation: when information must be used or retained to meet legal, tax, accounting or insurance requirements.

Where we need to use health information or other special-category information, we will ordinarily do so with your explicit consent and only for the relevant service.

The website uses essential cookies needed for it to function properly.

It may also use optional analytics cookies to help us understand how visitors use the website and identify where it can be improved. Optional cookies will be used only where they are enabled and you have given the required permission.

You can accept or reject optional cookies through the website's cookie controls. You can also manage cookies through your browser settings, although disabling essential cookies may affect how the website works.

Further information about the cookies used on this website is available in our Cookie Policy.

We share personal information only where it is necessary to operate the website, manage bookings or orders, process payments, provide a requested service or meet a legal obligation.

This may include trusted providers supporting our website, forms, email, bookings, payments and business administration. We may also disclose information to professional advisors or public authorities where legally required.

These organisations receive only the information needed for their role and must handle it in accordance with applicable data-protection law.

We do not sell or trade your personal information.

When you book certain complementary practices or services, we may ask for relevant health, wellbeing, accessibility or practical information. We collect only what is reasonably necessary to understand your needs and provide the requested service appropriately.

Health information is special-category personal information under UK data-protection law. Where we rely on explicit consent to use this information, you may withdraw that consent at any time by contacting us.

Consultation and service records are kept securely, with access limited to those who genuinely need it. They will not be shared except with your permission or where disclosure is required or permitted by law.

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including any legal, accounting or insurance requirements.
Generally:

• Enquiry messages are kept for up to 12 months after our last contact, unless they lead to a booking or an ongoing working relationship.

• Booking, order, payment and financial records may be kept for up to six years for tax, accounting, insurance and legal purposes.

• Consultation and service records are kept for the period reasonably required by applicable insurance, professional or legal obligations.

• Email subscription details are kept until you unsubscribe or the mailing list is discontinued.

• Website and analytics information is retained according to the relevant cookie settings and service-provider retention periods.

When information is no longer required, it will be securely deleted, destroyed or anonymised.

Depending on the circumstances and the lawful basis being used, you may have the right to:

• Ask for a copy of the personal information we hold about you.

• Ask us to correct information that is inaccurate or incomplete.

• Ask us to delete your personal information.

• Ask us to restrict how your information is used.

• Object to certain uses of your information.

• Receive certain information in a portable format.

• Withdraw your consent at any time where processing is based on consent.

These rights are not absolute and may not apply in every situation. We may need to retain some information where there is a legal, accounting, insurance or other lawful reason to do so.

To exercise your rights, contact [email protected]

You also have the right to raise a concern with the Information Commissioner's Office at www.ico.org.uk

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Access to personal information is limited to those who genuinely need it. Electronic information is protected using appropriate account, device and access controls, and any physical records are stored securely.

Where external service providers process personal information, we take reasonable steps to use reputable providers with appropriate data-protection and security arrangements.

We may update this Privacy Policy when our services, website practices or legal obligations change.

The current version will always be published on this page, with the date of the latest update shown at the top. Where a significant change affects how we use personal information, we will take reasonable steps to bring it to the attention of those affected.

For questions about this Privacy Policy, concerns about how your information is handled or requests relating to your data-protection rights, please contact:

[email protected]

Data controller: Rowan Wynter, trading as The Hallowed Nook