Website Privacy Notice

‍Last Updated: 01/08/2026‍ ‍

Version: 1.0‍ ‍

Shadowed Path Psychology (“we”, “us”, “our”) is committed to protecting your privacy. This Website Privacy Notice explains how we collect, use, and safeguard personal data when you visit our website, interact with our content, or purchase our services.‍ ‍

By using this website, you agree to the practices described in this notice.‍ ‍

1. Who We Are‍ ‍

Data Controller: Laura Clark, Shadowed Path Psychology ‍ ‍

Email: info@shadowedpathpsychology.co.uk‍ ‍

Address: ‍ ‍

Shadowed Path Psychology‍ ‍

Clyde Offices
2nd Floor
48 West George Street
Glasgow
G2 1BP‍ ‍

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, PECR, and the Data (Use and Access) Act 2025 (DUAA).‍ ‍

2. Data We Collect Through This Website‍ ‍

A. Data You Provide Directly‍ ‍

You may choose to provide personal data when:‍ ‍

  • Signing up for newsletters

  • Downloading resources

  • Purchasing products

  • Registering for events

  • Contacting us via forms or email‍ ‍

This may include:‍ ‍

  • Name

  • Email address

  • Purchase details

  • Marketing preferences

  • Any information you voluntarily include in messages‍ ‍

B. Data Collected Automatically‍ ‍

When you visit our website, certain data is collected automatically through cookies and analytics tools:‍ ‍

  • IP address

  • Device type

  • Browser type

  • Pages visited

  • Time spent on site

  • Referring website‍ ‍

This data helps us improve website performance, security, and user experience.‍ ‍

C. Social Media Interactions‍ ‍

If you interact with us via Instagram or Facebook (e.g., DMs, comments), we may receive:‍ ‍

  • Username

  • Public profile information

  • Message content‍ ‍

This is used solely to respond to enquiries.‍ ‍

3. Cookies & Analytics‍ ‍

We use cookies to:‍ ‍

  • Ensure the website functions correctly

  • Improve performance and security

  • Understand how visitors use the site

  • Support marketing and newsletter sign‑ups‍ ‍

You can manage or disable cookies through your browser settings.‍ ‍

Analytics may be provided by:‍ ‍

  • Squarespace

  • Vimeo

  • Dropbox

These services may collect anonymised or pseudonymised usage data.

4. How We Use Your Data

We use personal data to:

  • Provide products, services, and event access

  • Send newsletters (with consent or soft opt‑in)

  • Deliver digital content

  • Respond to enquiries

  • Improve website functionality

  • Maintain security

  • Comply with legal obligations

We do not sell or share your data with third parties for advertising.

5. Legal Bases for Processing‍ ‍

Depending on the activity, we rely on:

  • Contractual necessity (e.g., purchases, event registration)

  • Consent (e.g., newsletter sign‑ups)

  • Legitimate interests (e.g., responding to DMs, analytics, soft opt‑in marketing)

  • Legal obligation (e.g., HMRC tax records, SAR logs)

6. Email Marketing & Soft Opt‑In‍ ‍

You will only receive marketing emails if:

  • You explicitly opted in, or

  • You previously purchased from us or downloaded a free resource (“soft opt‑in”)

Every email includes an unsubscribe link. You can opt out at any time.

7. Automated Decision‑Making & Profiling (DUAA 2025)‍ ‍

We use automated segmentation within MailerLite and Squarespace to:

  • Tag purchases

  • Track engagement

  • Deliver relevant content

These processes:

  • Do not produce legal or significant effects

  • Are optional

  • Can be opted out of at any time

You may request:

  • A DUAA Access Report

  • Human review of any automated process

  • To opt out of profiling entirely

‍ ‍8. Third‑Party Services‍ ‍

We use trusted third‑party processors to operate this website and deliver services:

  • MailerLite

  • Squarespace

  • Eventbrite

  • Zoom

  • Google Workspace

  • Microsoft Forms

  • Dropbox

  • Vimeo

  • Substack

  • Instagram / Facebook (Meta)

These processors may store data outside the UK. Where they do, we rely on:

  • UK‑US Data Bridge certification, or

  • Standard Contractual Clauses (SCCs) with the UK Addendum

We periodically audit processors for compliance.

9. Data Retention‍ ‍

We retain data only as long as necessary:

  • Transaction records: 6 years (HMRC requirement)

  • Marketing data: until you unsubscribe

  • Event data: deleted 12 months after the event unless you opted in

  • Anonymous feedback: retained indefinitely

  • SAR logs: retained as required by law

10. Your Rights‍ ‍

You have the right to:

  • Access your data

  • Request correction

  • Request deletion

    • Financial records may be retained for HMRC compliance

  • Restrict processing

  • Object to marketing or profiling

  • Withdraw consent

  • Request data portability

  • Request a DUAA Access Report

  • Request human review of automated processes

To exercise your rights, email: info@shadowedpathpsychology.co.uk‍ ‍

11. Security Measures‍ ‍

We protect your data through:

  • Strong, unique passwords

  • Two‑Factor Authentication (where available)

  • Encrypted cloud storage

  • Antivirus and firewall protection

  • Limited access to essential personnel only

We are implementing full‑disk encryption across all devices.

12. Complaints‍ ‍

If you have concerns about how your data is handled: Email: info@shadowedpathpsychology.co.uk‍ ‍

You may also contact the ICO: https://ico.org.uk/make-a-complaint/(Make a complaint | ICO)

13. Updates to This Notice‍ ‍

We may update this notice periodically. The latest version will always be available on our website.

  • ‍ ‍