Privacy policy
Last updated 22 October 2026.
This policy explains what Path of Calm does with your personal information. Path of Calm is Renate Wimborne, a holistic therapist based in Bare, Morecambe, Lancashire, and she is the data controller for anything collected through this website.
If you have a question about any of this, email renatewimborne@gmail.com.
What this website collects
When you use a form. The enquiry and discovery call forms ask for your name and email address, and optionally your phone number, what you would like help with, whether you would prefer the call by phone or video, when you are usually free, and anything you choose to write in the message box. The form also sends the website you arrived from, such as a search engine or social network, and the first page you visited, so Renate knows how people find her.
Visitor statistics. Visitor numbers are counted using Cloudflare Web Analytics, which is cookieless and does not identify individuals. If you click “Accept” on the cookie message, Google Analytics also records which pages you view, roughly where you are (to town level), the kind of device you use and how you found the site, so Renate can see which pages people find useful. If you click “No thanks”, or do nothing, Google Analytics does not run at all.
Nothing else. This site has no advertising, no social media pixels, and does not build a profile of you.
A note about health information
The forms deliberately ask what you would like help with, not for your medical history. Please do not send detailed health information by email or through this form. Email is not a secure channel, and there will be time to talk properly on the call.
Anything you do share about your health is special category data under UK GDPR. Renate relies on your explicit consent to hold it, which is the consent box on the form and which you can withdraw at any time.
What it is used for
Your details are used to reply to you, arrange and carry out your session, and keep the notes a therapist needs to work safely and responsibly. They are never sold, never shared for marketing, and never passed to anyone else except in the rare case where there is a serious risk to your safety or someone else’s, which Renate would always try to discuss with you first.
The lawful bases are your consent for the enquiry itself, and legitimate interests for running the practice and keeping proper records.
Who processes your data
- Google (Gmail) hosts the email account the messages arrive in.
- WhatsApp, if you choose to message Renate that way. The WhatsApp links on this site open WhatsApp itself, and what you send there is handled under WhatsApp’s privacy policy.
- Cloudflare hosts this website, delivers the contact forms to Renate’s inbox, checks each form for spam with Cloudflare Turnstile, and provides the cookieless visitor analytics. Their privacy policy is at cloudflare.com/privacypolicy.
- Google Analytics, only if you accept analytics cookies. Google’s privacy policy is at policies.google.com/privacy.
Each of these is a processor acting on Renate’s instructions, and each may store data outside the UK under the safeguards required by UK GDPR.
How long it is kept
Enquiries that do not become bookings are deleted within twelve months. Client records are kept for seven years after your last session, which is the period professional indemnity insurers generally require. After that they are deleted.
Your rights
Under UK GDPR you can ask to see the information held about you, have it corrected, have it deleted, restrict or object to how it is used, receive a copy in a portable format, or withdraw consent at any time. Withdrawing consent does not affect anything done before you withdrew it.
To exercise any of these, email renatewimborne@gmail.com. There is no charge and you will get a response within one month.
If you are not happy with how a request has been handled, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Cookies
This website asks before setting any analytics cookies. If you accept, Google Analytics sets
cookies whose names start with _ga, which last up to two years. Your choice is remembered in
your browser, and you can change it at any time with the “Cookie settings” link at the bottom of
every page. Choosing “No thanks” there also deletes the Google Analytics cookies.
The spam check on the contact forms and the map on the contact page are provided by third parties (Cloudflare Turnstile and Google Maps) and may set cookies of their own when those features load. The map only loads if you click “Show the map”. Google’s cookies are covered by Google’s privacy policy. Nothing on this site is used for advertising or cross-site tracking.
Changes
If this policy changes, the revised version will appear on this page with a new date at the top.