top of page

Privacy Statement

Who we are
Wild Heather Wellness is run by Heather Grant (the “Data Controller”). You can contact me at wildheatherwellness@gmail.com.

​

What personal data I collect
Depending on how you interact with me, I may process:

  • Contact details: name, email address, phone number

  • Booking/communications: your messages, session bookings, feedback

  • Health information (special category data): PAR-Q responses and any information you choose to share about injuries, medical conditions, or exercise readiness

  • Website usage data: analytics about pages viewed, time on page, clicks and navigation (see Analytics & Cookies below)
     

Why I collect your data (lawful basis)

  • To deliver my services and communicate with you (e.g., class/event bookings, updates): Legitimate interests or Contract (UK GDPR Art. 6(1)(b)/(f))

  • To assess suitability and safety for participation (PAR-Q/health data): Explicit consent (UK GDPR Art. 9(2)(a))

  • Marketing emails (only if you opt in): Consent (Art. 6(1)(a)) . You can unsubscribe anytime
     

Special Category (Health) Data & Explicit Consent
I only collect health information that is relevant to participation in classes, events, or forest therapy sessions. You’ll be asked to tick an explicit consent box before submitting any PAR-Q or health details. You can withdraw consent at any time by emailing wildheatherwellness@gmail.com. If you do, I’ll stop using your health data and, unless I must retain it for legal or safeguarding reasons, delete it securely.

​

Where your data is stored
I use reputable service providers to run my website and forms. Your data may be stored in:

These providers may store data on servers outside the UK/EEA. They use appropriate safeguards (such as Standard Contractual Clauses) to protect your information.
 

Who can see your data
Access is limited to me (and trusted helpers only where absolutely necessary, under confidentiality). I never sell your data or share it with third parties for marketing. How long I keep your data (retention)

  • PAR-Q/health information: kept for up to 1 months after the event/ your last session, unless required longer for safety, safeguarding, or legal reasons.

  • Contact and booking data: kept as long as needed for admin, tax, or regulatory purposes, then securely deleted.
    You can request deletion of your personal data at any time (see Your Rights below).
     

Your rights
You have the right to:

  • access your personal data;

  • correct inaccurate data;

  • request deletion;

  • restrict or object to processing;

  • withdraw consent (for processing based on consent, including health data and marketing);

  • request data portability (in certain cases).

To exercise any of these rights, contact wildheatherwellness@gmail.com.

​

Analytics & Cookies
I use Wix Analytics (and similar tools) to understand how visitors use the site and improve your experience. These tools may collect anonymised information such as: page views, time on page, clicks, scrolls, navigation paths, referring sources, and technical performance (e.g., page load times, errors). You can manage cookies through your browser settings.
 

Links to other websites
My site may include links to third-party websites I do not control. Please check their privacy policies before submitting any personal data. I am not responsible for their practices.
 

Information Commissioner’s Office (ICO)
I am registered with the UK Information Commissioner’s Office (ICO) and pay the annual data protection fee. ICO Registration Number: C1817579. If you have concerns, please contact me first. You also have the right to complain directly to the ICO: https://ico.org.uk/make-a-complaint/
 

Updates to this notice
This notice may be updated from time to time to reflect changes in services or legal requirements.

bottom of page