Energy Path Care ("we", "our", or "us") is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, store, and protect your information when you use our services or interact with our website.

By using our website or services, you agree to the collection and use of information in accordance with this policy. We comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

We may collect the following types of information:

Personal Information

• Contact details (name, email address, phone number)
• Demographic information (age, gender)
• Health information relevant to your treatment
• Payment information for session bookings
• Communication preferences

Technical Information

• IP address and browser type
• Pages visited and time spent on our website
• Referring website details
• Cookies and tracking data (see our Cookies Policy)

We use your information for the following purposes:

We will never sell your personal information to third parties. Your health information is treated with the utmost confidentiality and is only accessed by authorized personnel involved in your care.

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you explicitly agree to us processing your data for specific purposes
• Contractual necessity: To fulfill our obligations in providing therapy services
• Legal obligation: To comply with healthcare regulations and record-keeping requirements
• Legitimate interests: For business operations while respecting your privacy rights

We may share your information with third parties only in the following circumstances:

• Healthcare professionals: With your explicit consent, we may share relevant information with other practitioners involved in your care
• Service providers: With trusted partners who assist us in operating our website and business (e.g., payment processors)
• Legal requirements: When required by law or to protect our rights, safety, or property
• Business transfers: In connection with a merger, acquisition, or sale of assets

All third parties are required to maintain the confidentiality and security of your information and are prohibited from using it for any other purpose.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

As a data subject, you have the following rights regarding your personal information:

To exercise any of these rights, please contact us using the details provided in Section 10. We will respond to your request within 30 days.

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Client records are retained for 7 years from the last treatment date, in accordance with UK healthcare regulations
• Website analytics data is retained for 26 months
• Marketing consent records are retained for 5 years after the consent is withdrawn

After the retention period expires, we will securely delete or anonymize your personal information.

Your information is primarily processed within the UK and European Economic Area (EEA). If we need to transfer your data outside the EEA, we will ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard contractual clauses approved by the European Commission
• Binding corporate rules for intra-group transfers
• Certification under the EU-US Privacy Shield (where applicable)

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.