Privacy Policy

Last updated: 10 August 2026

The Sanctuary & Beyond respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information I collect, how I use it, how I protect it, and your rights in relation to your personal data when you use The Sanctuary & Beyond website, contact me, submit an enquiry, make a purchase or request an aromatherapy consultation.

By using this website or providing your personal information, you acknowledge the practices described in this policy.

1. Who I am

The Sanctuary & Beyond is the business responsible for your personal information collected through this website.

If you have any questions about this Privacy Policy or how your information is handled, please contact me through the Contact page on this website.

2. What information I may collect

Depending on how you interact with The Sanctuary & Beyond, I may collect:

Information you provide directly

This may include:

  • Your name

  • Email address

  • Telephone number

  • Postal and delivery address

  • Information contained in messages or enquiries

  • Information relating to your purchases

  • Information you provide when requesting an aromatherapy consultation

  • Any other information you choose to provide when contacting me

Consultation and wellbeing information

If you choose to enquire about or arrange an aromatherapy consultation, you may provide information about your wellbeing, lifestyle, sensitivities, medications or health concerns.

Some of this information may constitute special category health data under UK data protection law. I only ask for information that is relevant to understanding your individual aromatherapy requirements, and I will treat it with particular care.

You are not required to complete the consultation enquiry form in order to contact me.

3. How I use your information

I may use your personal information to:

  • Respond to enquiries and messages

  • Arrange and communicate with you about consultations

  • Understand your individual aromatherapy requirements

  • Prepare personalised aromatherapy recommendations or blends

  • Process and fulfil orders

  • Arrange delivery of products

  • Deal with payments and transactions

  • Provide customer service and after-sales support

  • Respond to questions, problems or complaints

  • Maintain appropriate business and financial records

  • Meet legal, regulatory and accounting requirements

  • Protect the security and integrity of the website and business

I will only use your information for purposes that are relevant to your interaction with The Sanctuary & Beyond.

4. Health and wellbeing information

If you provide information about your physical or mental wellbeing as part of an aromatherapy enquiry or consultation, I will only use that information for the specific purpose for which you provide it, such as understanding your requirements and preparing appropriate aromatherapy guidance.

Health information is treated as special category personal data under the UK GDPR and requires additional protection.

Where I ask you to provide health information through the consultation form, I ask for your explicit consent to collect and use that information for the purposes explained on the form. Explicit consent is one of the lawful conditions available for processing special category data.

You may withdraw your consent at any time. Please be aware that withdrawing consent may mean that I am unable to provide certain consultation or personalised aromatherapy services where that information is necessary.

Please do not provide information that is not relevant to your enquiry or consultation.

5. How I protect your information

I take reasonable steps to protect your personal information from:

  • Unauthorised access

  • Loss

  • Misuse

  • Alteration

  • Disclosure

The website is provided through Webador, which provides security measures including HTTPS/SSL for websites.

Information submitted through website forms may be stored within Webador's systems and may also be sent to me by email so that I can respond to your enquiry.

I will only retain personal information for as long as it is reasonably necessary for the purpose for which it was collected, including any legal, accounting or record-keeping requirements.

6. Sharing your information

I do not sell or rent your personal information.

I may need to share relevant information with trusted third parties where this is necessary to operate the business or fulfil your request.

These may include:

  • Webador, as the website and online-store provider

  • Payment providers, where required to process a transaction

  • Delivery and postal services, where necessary to fulfil an order

  • Professional advisers, such as accountants, where necessary for legitimate business or legal purposes

  • Government, regulatory or law-enforcement bodies where I am legally required to do so

Where third parties process information on my behalf, I take reasonable steps to ensure that appropriate privacy and security arrangements are in place.

7. Payments

When you purchase something from The Sanctuary & Beyond, payment information is processed through the relevant payment provider.

I do not intend to store your full payment card details myself.

Payment providers may have their own privacy policies and terms explaining how they process your information.

8. Cookies

This website uses cookies and similar technologies to help the website function properly and to provide certain website features.

Some cookies are strictly necessary for the operation and security of the website or online shop. For example, cookies may be required to support functions such as maintaining your shopping basket or enabling essential website functionality.

The website also uses Webador's own website functionality and analytics. Google Analytics is not currently connected to this website through my Webador settings.

The website's cookie notice is enabled through Webador.

Where cookies or similar technologies are not strictly necessary, the relevant consent requirements will apply. UK rules require websites to provide clear information about cookies and, where required, obtain appropriate consent before setting non-essential cookies.

You can manage cookies through your browser settings. Blocking some cookies may affect how certain parts of the website or online shop function.

9. Email and marketing

If you contact me by email or through a website form, I will use your contact details to respond to your enquiry.

I will not add you to a marketing mailing list simply because you have made an enquiry or purchase.

If I introduce email marketing in the future, I will provide an appropriate opportunity to opt in where required and will provide a straightforward way to unsubscribe.

10. How long I keep your information

I will not keep personal information for longer than reasonably necessary.

The length of time information is retained will depend on why it was collected.

For example:

  • Enquiry information may be retained for as long as reasonably necessary to deal with the enquiry and any resulting relationship.

  • Consultation information will be retained only for as long as necessary to provide the service, maintain appropriate records and meet any relevant legal or business requirements.

  • Order and financial records may need to be retained for longer to comply with accounting, tax and other legal obligations.

Where information is no longer required, I will take reasonable steps to securely delete or dispose of it.

11. Your rights

Under UK data protection law, you may have rights including:

  • The right to be informed about how your personal information is used

  • The right of access to the personal information I hold about you

  • The right to rectification if information is inaccurate or incomplete

  • The right to erasure in certain circumstances

  • The right to restrict processing in certain circumstances

  • The right to object to certain types of processing

  • The right to data portability in certain circumstances

  • The right to withdraw consent where processing is based on consent

These rights are subject to certain legal conditions and exemptions.

If you would like to exercise any of these rights, please contact me through the website's Contact page.

12. Withdrawing consent

Where I rely on your consent to process your information, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that took place before you withdrew your consent.

If you withdraw consent to the processing of health information required for an aromatherapy consultation, I may not be able to continue providing that particular service.

13. Children's privacy

The Sanctuary & Beyond website is not specifically directed towards children.

I do not knowingly collect personal information from children without appropriate involvement or consent from a parent or guardian.

14. External websites

This website may contain links to other websites or services.

Once you leave The Sanctuary & Beyond website, those websites operate under their own privacy policies and terms. I am not responsible for the privacy practices or content of external websites.

I recommend checking the privacy policy of any external website before providing personal information.

15. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to the website, the services I provide, legal requirements or the way personal information is handled.

The latest version will always be published on this page, together with the date it was last updated.

16. Contact

If you have any questions about this Privacy Policy, your personal information or how your data is handled, please contact me through the Contact page on The Sanctuary & Beyond website.

If you are unhappy with how your personal information has been handled, I would appreciate the opportunity to address your concerns first.