Privacy Policy (GDPR Compliant)

Last Updated: October 2025

Your privacy is important to Pavandeep Saras-Shakti, trading as InnereSource. We are committed to safeguarding the privacy of our website visitors; this privacy statement sets out how we will treat your personal information and complies with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Personal Data Collection

Pavandeep Saras-Shakti, trading as InnereSource may collect, store and use the following kinds of personal information:

Information about your computer and about your visits to and use of this website, including technical data (which may include your IP address, geographical location, browser type and version, referral source, entry page, exit page, length of visit, number of page views, route taken through this website, and similar information);
Information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our goods or services;
Sensitive Personal Data relating to your health, emotional well-being, and personal history provided through our client application/consultation forms, session preparation questionnaires, and private session notes. We process this sensitive data strictly to provide you with a tailored bespoke healing service, based on your explicit consent.
Information that you provide to us for the purpose of registering with us;
Information that you provide to us for the purpose of subscribing to our website services, email notifications and/or newsletters; and
Any other information that you choose to send to us.

Lawful Basis for Processing

We only process your personal data when we have a legal basis to do so under GDPR. The primary legal bases we rely on are:

Contractual Necessity: Processing is required to enter into or fulfill a contract with you (e.g., processing payment, delivering the service).
Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to the newsletter).
Explicit Consent (for Sensitive Data): Where you provide data concerning your health or well-being through application forms, we process this only on the basis of your explicit consent to deliver the requested bespoke healing services (as this is a special category of data).

Disclosures and Sharing of Data

We will treat all personal information as strictly confidential. We may disclose your data to the following third parties, but only insofar as is strictly necessary to carry out our professional services:

Service Providers & Suppliers: We use third-party tools to manage our business, such as secure payment processors, scheduling software, and email providers.
Legal Obligation: We will disclose your information where we are required to do so by law.

Crucially, your sensitive health and well-being data (as defined above) will NEVER be shared with any third party, except where required by law or where you have provided us with explicit written consent.

Your GDPR Rights

Under GDPR, you have the following rights over your personal data:

Right of Access (get a copy of their data).
Right to Rectification (correct inaccurate data).
Right to Erasure (have their data deleted/Right to be Forgotten).
Right to Restrict Processing.
Right to Data Portability.
Right to Withdraw Consent: Where we rely on your consent, including explicit consent for sensitive data, you have the right to withdraw that consent at any time.
Right to Object to processing.

Contact Us (Data Controller)

The Data Controller responsible for your personal data is Pavandeep Saras-Shakti, trading as InnereSource.

If you have any questions about this privacy statement or our treatment of your personal information, please write to us by email to [email protected] or by post to 124 City Road, London. UK, EC1V 2NX.