Privacy Policy 
Infinite Dimensions Wellbeing Last updated: June 2026

Who we are and how to contact us 
This privacy policy explains how Charlotte Pardy, trading as Infinite Dimensions Wellbeing (“we”, “us”, “our”, “I”), collects, uses and protects your personal information. I am a sole trader and a BACP-registered psychotherapist and supervisor. I am the data controller responsible for your personal information. This policy covers all parts of my work, including my psychotherapy and supervision practice, the Rooted and Wild Collective, the Blooming Wild mentoring programme, my book Breaking Free, Blooming Wild and my Daughters of The Roses Membership.

Contact: If you have any questions about this policy or about how your information is handled, or if you wish to exercise any of your rights, you can contact me at Charlotte@motherwoundwhisperer.com 

ICO registration 
I am registered with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. My registration reference is Z3249694  

What information I collect 
Depending on how you interact with me, I may collect the following types of personal information:

•Identity and contact details: such as your name, email address, postal address, phone number and the details you give me when you enquire or book. •Account and membership data: such as your username and the content you post if you join the Rooted and Wild Collective or purchase a course. •Payment information: payments are handled by my payment providers (for example Stripe, or the payment processor used by Substack or my course platform). I do not store your full card details.
•Communication data: the content of emails, messages, contact-form submissions and social media messages you send me, and my replies.
•Appointment data: the information you give when booking a call or session, including your reasons for getting in touch.
•Technical and usage data: limited information about how you use my website and online spaces, such as pages viewed, gathered through the platforms I use and any cookies (see Cookies, below).
•Marketing preferences: your choices about receiving emails and updates from me.

Special category (sensitive) information 
Because of the nature of my work, I do collect special category data, information that needs extra protection under data protection law. Specifically:

•Health information, including information about your mental and emotional wellbeing, when you enquire about, book or take part in therapy, supervision, mentoring or the Rooted and Wild Collective.
•Information that may reveal religious or philosophical beliefs.

I treat this information with particular care. My detailed therapy and supervision client notes are kept on paper in a locked filing cabinet, separate from my online systems.

My lawful basis for processing special category data is normally your explicit consent, and, for the provision of therapy and supervision, the condition relating to the provision of health or social care and treatment (Article 9(2)(h) of the UK GDPR), carried out by, or under the responsibility of, a professional bound by a duty of confidentiality. You can withdraw your consent at any time, although this will not affect processing already carried out, and there may be records I am required to keep for professional, insurance or legal reasons.

How and why I use your information 
I only use your personal information when the law allows me to. The main lawful bases I rely on are: performance of a contract with you; my legitimate interests (where these are not overridden by your rights); compliance with a legal obligation; and your consent. The list below explains the main ways I use your information.

To respond to enquiries and provide therapy, supervision, mentoring, membership or courses you have requested 
Lawful basis: Performance of a contract with you (or steps to enter one); for health-related details, your explicit consent and the health/social care condition
 
To take payment and keep financial and transaction records
Lawful basis: Performance of a contract; legal obligation (tax and accounting)

To run and administer my online communities and website, and keep them secure 
Lawful basis: Legitimate interests (to operate and protect my business)

To send you newsletters, updates and marketing you have asked for 
Lawful basis: Your consent (you can opt out at any time); or legitimate interests where the law allows

To keep records and to establish, exercise or defend legal claims 
Lawful basis: Legitimate interests; legal obligation where applicable

Marketing 
I will only send you marketing emails or updates where you have signed up to receive them, or where the law otherwise allows. You can opt out at any time by using the unsubscribe link in any email, by adjusting your preferences on the relevant platform, or by contacting me. Opting out of marketing does not stop me sending you messages that relate to a service or purchase, such as confirming a booking or sending you something you have bought.

Who I share your information with 
I do not sell your personal information. I share it only where necessary, with:

•Service providers (processors) who help me run my business. These currently include Substack (community and newsletters), my course platform Zenler, Zoom (video calls), Microsoft 365 (email and files), Calendar Hero (appointment booking), Stripe (payment processing), and Xero (invoicing and accounting). I also receive enquiries through the Counselling Directory.

•My professional advisers, such as an accountant, insurer or, if needed, a legal adviser.

•Regulators, authorities or other bodies where I am required to share information by law, or where there is a safeguarding or safety reason that overrides confidentiality (in line with my BACP professional and ethical obligations). I put appropriate agreements in place with my service providers and require them to keep your information secure and use it only as instructed.

Social media 
I have a presence on Facebook, Instagram and LinkedIn. If you contact me through these platforms, the platform will also process your information under its own privacy policy, which I do not control. Social media is not a secure way to share personal or sensitive information, so if your message is personal I will usually ask you to continue by email instead.

Storing and transferring your information 
Some of my service providers are based outside the UK, which means your information may be transferred to and stored in another country. Where this happens, I take steps to ensure your information receives a level of protection equivalent to that under UK law, for example by relying on UK ‘adequacy’ regulations for that country, or by putting in place an approved transfer mechanism such as the UK International Data Transfer Agreement or the UK Extension to the EU–US Data Privacy Framework. You can contact me for more information about the safeguards used.

How I keep your information secure 
I take appropriate measures to protect your personal information against loss, misuse and unauthorised access. Paper client records are kept in a locked filing cabinet. Digital information is held in password-protected, reputable systems. I keep access limited to what is necessary and I have a process for dealing with any suspected data breach, including notifying you and the ICO where I am required to do so.

How long I keep your information 
I keep your personal information only for as long as I need it for the purposes I collected it for, including to meet legal, professional, insurance and accounting requirements. For example, I am required to keep basic financial records for six years. Therapy and supervision records are retained in line with my professional and insurance obligations under BACP guidance. When information is no longer needed, I securely delete or destroy it.

Your rights Under data protection law 
You have the following rights, which you can exercise free of charge in most circumstances:

•To be informed about how your information is used (this policy).
•To access a copy of the information I hold about you.
•To have inaccurate information corrected.
•To ask me to erase your information in certain circumstances.
•To object to, or ask me to restrict, certain processing.
•To ask me to transfer your information to another organisation in certain circumstances.
•To withdraw your consent at any time, where I rely on consent.

To exercise any of these rights, please contact me at Charlotte@motherwoundwhisperer.com. I may need to confirm your identity before I respond, but I will not ask for more information than I need. I will respond without undue delay, and within one month at the latest. If your request is complex I may extend this, and I will let you know if so.

How to make a complaint 
If you are unhappy with how I have handled your personal information, you have the right to complain. I would be grateful if you would contact me first so that I can try to put things right. You can make a data protection complaint to me by email at Charlotte@motherwoundwhisperer.com When I receive a complaint, I will:

•acknowledge it within 30 days of receiving it;
•look into it and make appropriate enquiries, keeping you informed of progress; and
•tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO) at any time. You can find out how at ico.org.uk/make-a-complaint, or call the ICO helpline on 0303 123 1113. I would still appreciate the chance to resolve your concern first.

Cookies 
My website and online platforms may use cookies and similar technologies to help them function and to understand how they are used. You can set your browser to refuse some or all cookies, though parts of a site may not work properly if you do. Please see my separate cookie information for more detail.

Children 
My services are intended for adults. I do not knowingly collect information from children. If you believe a child has provided me with their information, please contact me so I can deal with it appropriately.

Changes to this policy 
I may update this policy from time to time. The date at the top shows when it was last changed. Where changes are significant, I will take reasonable steps to let you know.