Privacy Policy


Katie Arnold (trading as ‘Wholeheartedly You’) understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website: (“the Site”) and our Clients and Customers, and will only collect and use personal data in ways that are described here, and in a manner that is consistent with Our obligations and your rights under the law.

Please read this Privacy Notice carefully and ensure that you understand it. Your acceptance of Our Privacy Notice is deemed to occur upon your first use of Our Site. If you do not accept and agree with this Privacy Notice, you must stop using Our Site immediately.

Katie Arnold will never sell your data to anyone and strictly complies with EU law.

Katie Arnold does not store or transfer any data outside of the EEA.

1. Definitions and Interpretations

In this Privacy Notice, the following terms shall have the following meanings for your understanding:

“Cookie”means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or when you use certain features of Our Site. Details of the Cookies used by Our Site are set out in section 13, below;
“Cookie Law”means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003;
“personal data”means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Us via Our Site. This definition shall, where applicable, incorporate the definitions provided in the EU Regulation 2016/679 – the General Data Protection Regulation (“GDPR”); and
“I/Me/My”means Katie Arnold trading as Wholeheartedly You of 68a Uxbridge Road, London W12 8LP

2. Information About me

My Site is owned and operated by Katie Arnold of 68a Uxbridge Road, London W12 8LP.

Type of Business: Sole Proprietorship Business

Registered address: 68a Uxbridge Road,London W12 8LP

Main Trading Address: 68a Uxbridge Road, London W12 8LP

Email address:

Postal Address: 68a Uxbridge Road, London W12 8LP

3. What does this policy cover?

This Privacy Notice explains how I use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.

This Privacy Notice applies only to your use of My Site. My Site may contain links to other websites. Please note that I have no control over how your data is collected, stored, or used by other websites and I advise you to check the privacy notices of any such websites before providing any data to them.

4. What is personal data?

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

The personal data that I use is set out in Part 6, below.

5. What are your rights?

5.1 As a data subject, you have the following rights under the GDPR, which this Policy and My use of personal data have been designed to uphold:

5.1.1 The right to be informed about My collection and use of personal data;

5.1.2 The right of access to the personal data I hold about you (see section 13);

5.1.3 The right to rectification of any personal data I hold about you is inaccurate or incomplete (please contact Me using the details in section 17);

5.1.4 The right to be forgotten – i.e. the right to ask Me to delete any personal data I hold about you (I only hold your personal data for a limited time, as explained in section 7 but if you would like Me to delete it sooner, please contact Me using the details in section 17);

5.1.5 The right to restrict (i.e. prevent) the processing of your personal data;

5.1.6 The right to data portability. This means that, if you have provided personal data to Me directly, I am using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask me for a copy of that personal data to re-use with another service or business in many cases;

5.1.7 The right to object to Me using your personal data for particular purposes; and

5.1.8 Rights with respect to automated decision making and profiling.

5.2 If you have any cause for complaint about My use of your personal data, please contact Me using the details provided in section 17 and I will do Our best to solve the problem for you. If I am unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.

5.3 For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

6. What data do I collect?

I may collect some or all of the following personal data (this may vary according to your relationship with Me outlined below):

When you visit I collect the following data with your consent;

  • Browser Location;
  • IP Address;
  • How long your session lasted;
  • Which pages you visited during your session.

When you visit and use the contact form to get in touch or sign up to My Newsletter I collect the further following data with your consent or based on a legitimate interest;

  • Name;
  • Email Address;
  • Contact number.

When you contact Me using Social Media messaging apps ( for e.g; Facebook Messenger) I collect the following data;

  • Social Media URL(s)
  • Name

When you demonstrate an interest in using My services or purchase one of the services provided by Me, I request to collect some or all of the following data;

  • Name;
  • Address;
  • Email address;
  • Telephone number;
  • Date of birth
  • Payment information;
  • Information relating to your medical history, treatment, medications, occupation, current concerns, previous experience of reiki or other complementary therapies, and any additional information you may like us to know. 

7. How do I use your data?

7.1 All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. I will comply with My obligations and safeguard your rights under the GDPR at all times. For more details on security see section 8, below.

7.2 My use of your personal data will always have a lawful basis, either because it is necessary for My performance of a service for you, because you have consented to My use of your personal data, or because it is in My legitimate interests.

Specifically, I may use your data for the following purposes:

7.2.1 Providing and managing your access to My Site;

7.2.2 Personalising and tailoring your experience on My Site;

7.2.3 Supplying My services to you

7.2.5 Personalising and tailoring My services for you;

7.2.6 Replying to emails and messages from you;

7.2.7 Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by clicking on the ‘unsubscribe’ link at the  bottom of My emails);

7.2.8 Market research;

7.2.9 Analysing your use of My Site and gathering feedback to enable Me to continually improve My Site and your user experience;

7.2..10 Responding and communicating with you on particular social media platforms or apps you contact Me through first.

7.2.11 To gain a thorough understanding of your situation for the purpose of delivering a safe and effective service to you. 

7.3 With your permission and/or where permitted by law, I may also use your data for marketing purposes which may include contacting you by email, telephone, text message, or post with information, news and offers on Our products and services. I will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that I fully protect your rights and comply with My obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

7.4 Third parties whose content appears on My Site may use third party Cookies, as detailed below in section 14. Please refer to section 14 for more information on controlling Cookies. Please note that I do not control the activities of such third parties, nor the data they collect and use and advise you to check the privacy notices of any such third parties.

7.5 You have the right to withdraw your consent to Me using your personal data at any time, and to request that I delete it.

7.6 I do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Data will therefore be retained for the following periods (or its retention will be determined on the following bases):

7.6.1 Information obtained via opt-in forms (with added newsletter opt-in) will be retained for 12 months from last engagement (email open);

7.6.2 Information obtained via contact forms will be retained for 12 months from last correspondence;

7.6.3 Information obtained via Cookies used for Analytics will be retained for 60 days following your last visit to My website;

7.6.4 Information obtained via social media messaging services and apps ( for e.g; Facebook Messenger ) will be retained for 90 days following last correspondence;

7.6.5 Information obtained via Cookies used for marketing and advertising will be retained for 90 days following your last visit to My website;

7.6.6 Information obtained for the purposes of effectively delivery My services to you, to include information relating to your medical history, treatment, medications, occupation, current concerns, previous experience of reiki or other complementary therapies, and any additional information you may like Me to know, will be retained in strict confidence for eight years from the time of the last consultation (in line with GDPR guidelines and the UK Reiki Federation’s Code of Ethics & Professional Practice).

8. How and where do I store your data?

8.1 I only keep your personal data for as long as I need to in order to use it as described above in section 6, and/or for as long as I have your permission to keep it.

8.2 Your data will only be stored in the UK.

8.3 Data security is very important to Me, and to protect your data I have taken suitable measures to safeguard and secure data collected through My Site.

8.4 Steps I take to secure and protect your data include:

8.4.1 My website contact forms are powered by third-party provider, Contact Form 7 and store no personal data. For more information, please see see Contact Form 7’s privacy notice.

8.4.2 I use Transport Layer Security (TLS) to encrypt and protect all direct email traffic in line with government. If your email service does not support TLS, you should be aware that any emails I send or receive may not be protected in transit. I will also monitor any emails sent to Me, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

8.4.3 I use a third party provider, MailChimp, to deliver My e-newsletters, content updates and offers. I gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see Mailchimp’s Privacy Policy.

8.4.4 My website is built on the framework, but also uses some plugins and services hosted at, which is run by Automattic Inc. WordPress requires visitors that want to post a comment to enter a name and email address. For more information about how WordPress processes data, please see Automattic’s privacy notice.

9. Do I share your data?

9.1 I will never disclose your information to any organisation, (digital or real) anywhere,  nor will I disclose your information or identity to any persons whatsoever, unless doing so may prevent serious harm coming to you, or others. In such circumstances, I will always endeavour to seek your consent to break confidentiality, however, in the event that I cannot obtain your consent, and you or others are still deemed to be at serious risk, then I am legally obligated to break your confidentiality and seek help. In such circumstances, the minimum of information will be shared and only what is necessary to seek the help that may be required for you or others also deemed at risk of harm.


11.1 In addition to your rights under the GDPR, set out in section 5, when you submit personal data via My Site, you may be given options to restrict Our use of your data. In particular, I aim to give you strong controls on My use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from Me which you may do by unsubscribing using the links provided in My emails and at the point of providing your details).

11.2 You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.


12.1 You may access certain areas of My Site without providing any data at all. However, to use all features and functions available on My Site you may be required to submit or allow for the collection of certain data.


You have the right to ask for a copy of any of your personal data held by Me (where such data is held). Under the GDPR, no fee is payable and I will provide any and all information in response to your request free of charge. Please contact Me for more details at, or using the contact details below in section 17.


14.1 Cookies are used on this website to make the site easier to use and to track the traffic patterns of visitors. I am operating an ‘implied consent’ policy which means that I assume you are happy with this usage. If you are not happy with this, then you should adjust your web browser settings to disallow cookies.


This privacy notice does not cover the links within this site linking to other websites. I encourage you to read the privacy statements on the other websites you visit.


I may change this Privacy Notice from time to time (for example, if the law changes). Any changes will be immediately posted on My Site and you will be deemed to have accepted the terms of the Privacy Notice on your first use of My Site following the alterations. I recommend that you check this page regularly to keep up-to-date.

This Privacy Notice was last updated December 2021.


If you have any questions about My Site or this Privacy Policy, please contact me by email at,  or by post at 68a Uxbridge Road, London W12 8LP. Please ensure that your query is clear, particularly if it is a request for information about the data I hold about you.

Please allow up to 72 hours for a response.