Privacy Policy

Last updated: 21.11.2025

Wonky Witchy Wellness is committed to protecting your personal information and respecting your privacy. This Privacy Policy outlines how I collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR).

1. Who I Am

Wonky Witchy Wellness is a sole trader business based in England, UK. I offer tarot and oracle readings and aromatherapy treatments, both online and in person. I am registered with the Information Commissioner’s Office (ICO) for data protection.

Contact email: wonkywitchywellness@gmail.com
Website: www.wonkywitchywellness.co.uk

2. What Information I Collect

I may collect and process the following personal data:

Full name
Contact details (email, phone number, social media handles)
Home address (where relevant for treatments or communications)
Health information (required legally for aromatherapy treatments)
Any other information you voluntarily provide via contact forms, bookings, or session communications

3. How I Collect Your Information

I collect personal data when you:

Submit a contact form through my website
Book a treatment or reading
Complete a health and safety form
Communicate with me via email, social media, or phone

Cookies may also collect non-personal usage data when you visit my website (see section 9).

4. Why I Collect Your Information

I process your data for the following reasons:

To respond to enquiries or bookings
To provide services you request (e.g., treatments, readings)
To ensure your safety during aromatherapy treatments (health data)
To comply with legal or professional obligations (e.g., record keeping, safeguarding)
To maintain communication regarding sessions or follow-up support

The lawful bases I rely on are:

Consent (especially for health-related or sensitive data)
Contract (to provide a service you've requested)
Legal obligation (e.g. tax, health and safety)
Legitimate interest (for client communication and business administration)

5. How I Store Your Information

I am committed to storing your information securely and in line with GDPR requirements.

Aromatherapy Treatments (Health + Consent Forms):

All health forms, consent forms, and treatment notes are stored physically in a locked, secure filing cabinet that only I have access to.
These records are kept solely for safety, legal compliance, and to provide appropriate and informed treatments.

Tarot & Oracle Sessions:

I do not take formal written notes during tarot or oracle readings.
Any personal information you provide for booking (such as your name, contact details, and session preferences) is stored only on the platform you submitted it through (e.g., my website, email, social media).

Digital Contact Data:

Any personal data submitted through my website (Wix), social media (WhatsApp, Instagram, TikTok, Facebook), or email remains securely within those platforms, which are GDPR-compliant.
I do not download or store your personal information elsewhere unless required to respond to your enquiry.

No Third-Party Storage (Currently):

I am not currently using Cliniko or any external client-management system.
If I reinstate Cliniko in the future, this Privacy Policy will be updated before any of your data is transferred to that system.

I always ensure your information is handled lawfully, kept confidential, and never shared without your explicit consent unless legally required.

6. How Long I Keep Your Information

Client records are kept for up to one year from your last session, unless we continue to work together—then they are retained for the duration of our working relationship.
Communication records (emails, messages, forms) are periodically reviewed and securely deleted when no longer needed.

7. Sharing Your Data

Your personal data is treated as strictly confidential. I do not sell or share your information with third parties for marketing.

I may only share data:

With health professionals in the event of a serious concern or emergency
If legally required to do so (e.g., safeguarding, criminal investigations)

All third-party platforms used (e.g., Wix, WhatsApp, Instagram & Facebook) are GDPR-compliant and process data on my behalf securely.

8. Your Rights

You have the right to:

Access your personal data
Correct inaccurate information
Request deletion of your data (where legally allowed)
Withdraw consent at any time
Object to processing in certain situations
Lodge a complaint with the ICO (www.ico.org.uk)

To exercise any of these rights, email: wonkywitchywellness@gmail.com

9. Cookies and Website Analytics

My website (hosted by Wix) uses cookies to enhance your experience and collect anonymised analytics. You’ll see a cookie banner when visiting the site—you can choose to accept or manage your preferences.

You can also manage cookies through your browser settings.

10. Changes to This Policy

I may update this policy from time to time to reflect changes in my services, practices, or legal requirements. The updated version will always be posted on this page with the revised date.

Still Have Questions?

If you’re unsure about how your data is being used, or want more information, don’t hesitate to reach out:
📧 wonkywitchywellness@gmail.com