​

Effective Date: 29.08.2025

At Energy Within, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website, contact us, or book a service.

1. Who We Are

EnergyWithin is a wellness centre based near Ledbury, offering SyncWave light therapy and holistic treatments. For the purpose of UK data protection law (including GDPR), EnergyWithin is the “data controller” of your personal data.

2. Information We Collect

We may collect the following personal information:

• Name, email address, phone number, and postal address (when you contact us or book a session).

• Health information (via our Client Intake & Health Questionnaire forms) to ensure your safety and suitability for our services.

• Payment information (processed securely through our booking/payment providers – we do not store card details).

• Technical data such as IP address, browser type, and pages visited on our website (collected via cookies – see Section 7).

3. How We Use Your Information

We use your personal data for the following purposes:

• To process bookings and provide our services.

• To communicate with you about appointments, inquiries, or updates.

• To maintain health and safety records.

• To improve our website and services.

• To send marketing emails or newsletters (only with your consent, which you can withdraw at any time).

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract: To fulfil your booking or service request.

• Consent: For sending marketing emails or using optional cookies.

• Legal obligation: To comply with health and safety or regulatory requirements.

• Legitimate interests: To improve our services and ensure security.

5. Sharing Your Information

We will never sell your data. We may share your information only with:

• Service providers (e.g., booking platforms, payment processors) to deliver our services.

• Professional practitioners working within EnergyWithin, if relevant to your booking.

• Authorities if required by law.

6. Data Retention

• Booking and contact information: retained for up to 6 years for business records.

• Health questionnaires and intake forms: securely stored and retained for as long as necessary to provide services, then securely destroyed.

• Marketing consent: retained until you unsubscribe or withdraw consent.

7. Cookies

Our website uses cookies to improve your browsing experience, analyse traffic, and understand visitor behaviour. You can control cookie preferences through your browser settings.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.

• Request corrections to inaccurate or incomplete data.

• Request deletion of your data where applicable.

• Restrict or object to the processing of your data.

• Withdraw consent to marketing communications at any time.

• Data portability (receive a copy of your data in a portable format).

To exercise your rights, please contact us using the details below.

9. Data Security

We take appropriate technical and organisational measures to safeguard your information against loss, misuse, or unauthorised access.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact:

Energy Within
📍 Ledbury, Herefordshire
📧 energywithinenquires@gmail.com
📞 07828 925827

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.