Privacy Policy
Last Updated: July 20261. Data Controller
InnereSource™ is the data controller responsible for your personal information.
Owner: Pavandeep Saras-Shakti, trading as InnereSource™.
Address: 124 City Road, London, EC1V 2NX, United Kingdom.
Email: [email protected]
2. Sensitive Data & Somatic Context
To provide bespoke somatic journeys, we may collect sensitive information regarding your physical health, emotional well-being, and personal history — via consultation and intake forms, and through session notes. Under GDPR, this is classified as "Special Category Data."
We process this information strictly on the basis of your explicit consent, and use it only to tailor your somatic resolution sessions and ensure the safety of your energetic integration. We do not share this data with third parties unless required by law or to prevent immediate harm to life.
3. Information We Collect
- Identity & Contact Data: Name, email address, and billing address.
- Transaction Data: Details about payments for containers and services, processed securely via our payment and checkout providers; we do not store full credit card numbers.
- Intake & Session Data: Information provided in application forms, intake questionnaires, and brief session notes used for tracking your somatic progress.
- Scheduling Data: Booking details processed via our scheduling software when arranging 1:1 sessions.
- Communications Data: Email addresses and engagement data processed via our email marketing platform if you're subscribed to our updates.
- Technical Data: IP addresses and browser information used to optimize your experience on our website and portal.
4. How We Use Your Data
We use your data to deliver bespoke services, manage your account, process payments, arrange scheduling, and ensure the safety and efficacy of our somatic work. If you have opted in to our newsletter, we may send you occasional updates, from which you can unsubscribe at any time.
5. International Data Transfers
Some of the third-party platforms we use to run InnereSource™ — including payment, checkout, scheduling, and email service providers — may store or process data outside the UK or EEA. Where this happens, we take reasonable steps to ensure your data continues to receive an equivalent level of protection, such as through Standard Contractual Clauses or an equivalent safeguard recognised under UK data protection law.
6. Data Security & Retention
We use industry-standard encryption and secure third-party platforms to protect your personal data from being accidentally lost, used, or accessed in an unauthorized way. Intake forms and session notes are stored within secure, encrypted environments accessible only by the practitioner. We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.
7. Your Legal Rights (GDPR)
As a UK or EU resident, you have the following rights over your personal data:
- Right to Access: You can request copies of the data we hold on you.
- Right to Rectification: You can ask us to correct inaccurate information.
- Right to Erasure: You can request that we delete your data (the "Right to be Forgotten").
- Right to Restriction: You can ask us to limit how we use your data.
- Right to Portability: You can request that we transfer your data to another organization.
- Right to Object: You can object to certain kinds of processing, including direct marketing.
- Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.
To exercise any of these rights, please contact us via email below.
8. Contact, Data Requests & Complaints
If you have any questions regarding this policy, or wish to exercise any of the rights above, please contact: [email protected].
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, if you have concerns about how we handle your data.