Privacy Policy (Path to Practice)

This Privacy Policy explains how Path to Practice (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you use our website, contact us, sign up to our emails or use any connected forms and marketing systems.

We are committed to handling personal data with care, transparency and respect.

1) Who we are (Data Controller)

Business name: Path to Practice
Website: https://www.pathtopractice.com
Email: hello@pathtopractice.com

We do not publish our postal address on this website. If you need a postal address for formal correspondence, please email hello@pathtopractice.com and we will provide the appropriate details.

ICO registration: Path to Practice is registered with the UK Information Commissioner’s Office (ICO).
Registration number: ZA746504

2) The platforms we use (GoDaddy and FEA Create)

We use third party suppliers (known as “processors”) to run parts of our website and online services:

• GoDaddy: used for website hosting and/or domain services and (if enabled) checkout or booking processes.
• FEA Create: used for online forms, lead generation, email marketing, funnels and (if enabled) checkout or booking processes.

These suppliers may process personal data on our behalf to provide their services. We only use suppliers where we believe appropriate safeguards are in place.

3) Personal data we collect

We may collect:

Information you give us

• Name and contact details (such as email address and phone number)
• Information you submit via forms (enquiries, sign-ups, applications or requests)
• Preferences you choose to share (for example accessibility requirements)

Information collected automatically

• IP address
• Device and browser information
• Usage data (pages visited, links clicked, time spent on pages)
• Basic security and diagnostic logs
• 
  

4) How we use your data and our lawful bases

We use your personal data for the following purposes under the UK GDPR:

A) To respond to enquiries and messages

• Lawful basis: Legitimate interests and/or taking steps at your request before entering a contract

B) To provide services or information you request

• Lawful basis: Contract (where applicable) and/or taking steps before a contract

C) To send marketing emails when you opt in

• Lawful basis: Consent (you can unsubscribe at any time)

D) To keep our website and systems secure and working properly

•  • Lawful basis: Legitimate interests (security, fraud prevention, system administration)

5) Special category data (health or wellbeing information)

If you choose to share information that could be considered special category data (for example health or wellbeing details) we will handle it with additional care and only use it where there is a clear lawful reason.

If you become an ongoing therapy or supervision client, you may receive a separate Client Privacy Notice that explains how client records are handled in more detail and specific GDPR regarding that.

6) Marketing and newsletters

If you sign up to receive emails from us, we may send newsletters, reflective resources, CPD updates and service announcements.

• You can unsubscribe at any time via the link in our emails.
• If you unsubscribe, we may keep a minimal record of your request not to receive marketing so we can respect your preferences.

7) Cookies

Cookies are small files stored on your device that help websites function.

We may use:

• Essential cookies needed for the site to work
• Optional cookies (for example analytics) if enabled

You can manage cookies through your browser settings. Some parts of the site may not work properly if you block essential cookies.

8) Who we share your data with

We do not sell your personal data.

We may share personal data with:

• GoDaddy (hosting and domain related services)
• FEA Create (forms, email marketing, funnels and related services)
• Professional advisers where necessary (for example accountant, insurer or legal adviser)
• Regulators or law enforcement where we are legally required to do so

Payments (if applicable): If you pay for anything via an online checkout, payments are processed by a third party payment provider. We do not receive your full card details.

9) International transfers

Some suppliers may store or process data outside the UK.

Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are used such as approved contractual protections.

10) How long we keep your data

We keep personal data only for as long as necessary for the purpose it was collected.

Typical retention periods:

• Website enquiries: up to 12 months after the last contact
• Newsletter subscribers: until you unsubscribe
• Security and technical logs: for a limited period in line with supplier settings and security needs

If you become a client, separate retention periods may apply and will be explained in your client paperwork.

11) Your rights

You have rights under UK GDPR including:

• Access to your personal data
• Correction of inaccurate data
• Deletion in certain circumstances
• Restriction of processing in certain circumstances
• Objection to processing in certain circumstances
• Data portability in certain circumstances
• Withdrawal of consent where we rely on consent

To exercise your rights, contact: hello@pathtopractice.com

12) Security

We take reasonable and appropriate measures to protect your personal data including access controls and secure systems. No online system is completely risk free but we take steps to reduce risks and respond appropriately to concerns.

13) Complaints

If you have concerns, please contact us first: hello@pathtopractice.com

You can also complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.

14) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the updated date at the top.