
Privacy Policy
Your privacy matters. This page explains how your personal information is collected, used, stored, and protected when you visit janemacdonald.co.uk, book a session, join a course, or connect with Jane Macdonald Holistic Wellness.
A Clear and Respectful Approach to Your Data
When you share your information, you deserve to know exactly how it is handled. This Privacy Policy is here to help you understand what data may be collected, why it is used, who it may be shared with, and the rights you have under UK GDPR.
Whether you are joining a course, booking a session, subscribing to updates, or simply browsing the website, Jane aims to keep everything transparent, respectful, and easy to understand.

What This Policy Covers
This policy outlines the key areas you may want to understand before sharing your information, including what is collected, why it is used, how long it is kept, and the rights available to you.
What Data Is Collected
Information you provide directly, technical website data, payment processing details, and any wellbeing notes you choose to share.
How It Is Used
To deliver services, manage bookings, send updates you have agreed to receive, improve the website, and meet legal or professional obligations.
Your Rights and Choices
You have rights under UK GDPR, including access, correction, deletion, withdrawal of consent, and the ability to raise a concern with the ICO.
Full Privacy Policy
Last updated: 17 March 2026 — Jane Macdonald Holistic Wellness
Privacy Policy
This Privacy Policy explains how your personal information is collected, used, and protected when you visit janemacdonald.co.uk, join my courses, book a session, or connect with my community. I aim to keep everything transparent, respectful, and easy to understand.
1. Who I Am (Data Controller)
Jane MacDonald Reiki Teacher, Meditation Educator & Digital Course Creator
Email: wellbeing@janemacdonald.co.uk
Website: janemacdonald.co.uk
Under the UK General Data Protection Regulation (UK GDPR), I am the data controller responsible for deciding how your personal information is used.
2. What Personal Data I Collect
I collect information in the following ways:
- Information you provide directly — name, email address, phone number, booking details, course enrolment information, and any notes you choose to share.
- Payment information — processed securely by third party providers (e.g., Stripe, PayPal). I do not store card details.
- Technical data — IP address, browser type, device information, pages visited, and cookies.
- Wellbeing related notes — only if you choose to share them during sessions or check ins. These are treated with heightened confidentiality.
3. Why I Use Your Data (Purposes & Lawful Bases)
UK GDPR requires me to explain both why I use your data and the lawful basis for doing so. My purposes and lawful bases include:
- Providing services you request (Lawful basis: Contract) Bookings, courses, digital content, and session delivery.
- Email updates, newsletters, and community messages (Lawful basis: Consent) You can withdraw consent at any time.
- Improving the website and learning experience (Lawful basis: Legitimate interests) This includes analytics and site performance.
- Professional, accreditation, or regulatory obligations (Lawful basis: Legal obligation) For example, maintaining financial records or practitioner notes.
4. Who I Share Your Data With
I only share your information with trusted service providers who help me run my business:
- AttractWell (course hosting, email communication)
- Jotform (forms and submissions)
- Stripe or PayPal (payments)
- Google Workspace or similar tools (email and admin)
These providers act as data processors and must follow UK GDPR requirements.
I do not sell your data or share it for third party marketing.
5. International Transfers
Some of the tools I use may store data outside the UK. When this happens, I ensure appropriate safeguards are in place, such as:
- UK approved adequacy decisions
- Standard Contractual Clauses (SCCs)
- Additional security measures
6. How Long I Keep Your Data
UK GDPR requires clear retention periods. I keep data only as long as necessary:
- Email list: until you unsubscribe
- Course records: up to 7 years (professional standards)
- Financial records: 6 years (legal requirement)
- Session notes: up to 7 years (professional practice guidelines)
You may request deletion unless I am legally required to retain something.
7. How Your Data Is Protected
I use secure platforms and take appropriate technical and organisational measures to protect your information, including:
- Encrypted systems
- Password protected accounts
- Limited access to authorised personnel only
- Secure third party processors
8. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Withdraw consent
- Object to certain processing
- Request data portability
- Lodge a complaint with the ICO
To exercise these rights, email me at wellbeing@janemacdonald.co.uk
9. Cookies
This website uses essential and analytical cookies to help it function and understand visitor behaviour. You can manage cookies through your browser settings.
10. Marketing Communications
I only send marketing emails when you have given clear consent. You can unsubscribe at any time by clicking the link in any email.
11. Children’s Privacy
My services are intended for adults. I do not knowingly collect data from anyone under 16 without parental consent.
12. Changes to This Policy
I may update this policy from time to time. The latest version will always be available on this page.
13. Contact
If you have any questions about this policy or how your information is handled:
Email: wellbeing@janemacdonald.co.uk
Website: janemacdonald.co.uk

Questions About Your Privacy?
If you would like clarification about how your information is collected, used, or stored, you are always welcome to get in touch. Jane is committed to handling your data with care, transparency, and respect.



