Last updated: August 2026
I take your privacy seriously and aim to be clear about how information you provide is collected, used and protected.
This Privacy Policy explains how personal information is handled when you visit my website, contact me, book training or events, purchase services or resources, or work with me professionally.
Who is responsible for your information?
For the purposes of UK data protection law, I am the data controller for personal information collected through my independent business activities unless another arrangement has been agreed for a particular research or consultancy project.
Carrie Wilson
Independent Researcher, Consultant, Trainer & Certified Forest Bathing Guide
Email: carrie@carrie-wilson.co.uk
Information I may collect
Depending on how you interact with me, I may collect information such as:
- your name;
- email address and telephone number;
- organisation and job role;
- booking and event information;
- enquiries and correspondence;
- billing and transaction information;
- training or accessibility requirements;
- information you choose to provide when working with me;
- preferences relating to communications; and
- technical information generated when you use my website, depending on the website platform, cookies and services in use.
Payment information may be processed directly by a third-party payment provider. I do not necessarily receive or retain your full payment-card details.
Forest Bathing & Nature Connection
If you book a Forest Bathing or nature-connection experience, I may ask you to provide information necessary to support safe and accessible participation.
This could include information about accessibility requirements, injuries, mobility considerations or other relevant needs that you choose to disclose.
Some of this information could constitute special-category personal data under UK data protection law. Where this applies, it will only be collected where there is an appropriate lawful basis and condition for doing so, and only where it is relevant to facilitating your participation safely and appropriately.
I will not ask you to provide more health information than is reasonably necessary for this purpose.
Why I use your information
Personal information may be used to:
- respond to enquiries;
- manage bookings and registrations;
- provide purchased services;
- communicate with clients and participants;
- administer events and training;
- issue invoices and maintain appropriate financial records;
- understand and respond to accessibility requirements;
- manage Forest Bathing sessions safely;
- fulfil contractual obligations;
- improve services;
- comply with legal and regulatory requirements; and
- send marketing communications where I have an appropriate lawful basis to do so.
Legal Bases for Processing
Under UK GDPR, personal information must be processed on an appropriate lawful basis.
Depending on the circumstances, I may process information because:
Contract — it is necessary to provide a service you have booked or to take steps at your request before entering into a contract.
Legitimate interests — it is reasonably necessary for operating and developing my business and those interests do not override your rights and interests.
Legal obligation — information must be retained or processed to comply with legal requirements.
Consent — you have actively agreed to a particular use of your information, for example certain marketing communications.
Where special-category data is processed, an additional condition required by data protection legislation will also apply.
Mailing Lists & Marketing
I will not automatically add you to a marketing mailing list simply because you have made an enquiry or purchased a service.
Where you choose to subscribe to updates, training announcements or other marketing communications, you can unsubscribe at any time using the unsubscribe option provided or by contacting me.
Research Data
Where I undertake research, information collected specifically as research data may be subject to a separate participant information sheet, consent process and privacy information explaining how data will be collected, stored, analysed, shared and retained for that particular project.
Where I undertake research on behalf of or in partnership with another organisation, responsibility for the data may be shared with or held by that organisation. This will be explained to participants as part of the research process.
Sharing Your Information
I do not sell your personal information.
Information may be shared with trusted service providers where necessary to operate the business, such as website hosting, booking, email, accounting or payment-processing services.
These organisations process information according to their own contractual and data-protection obligations.
Information may also be disclosed where required by law.
How Long Information Is Kept
Personal information will only be retained for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, contractual, insurance, accounting or regulatory requirements.
Different types of information may therefore have different retention periods.
When information is no longer required, it will be securely deleted or anonymised where appropriate.
Cookies & Website Analytics
My website may use cookies and similar technologies to enable website functionality and, where applicable, understand how visitors use the site.
Where legally required, non-essential cookies will only be used with your consent.
More information about the cookies used on this website should be provided through the website’s cookie settings or cookie notice.
Your Data Protection Rights
Depending on the circumstances, UK data protection law gives you rights relating to your personal information, including the right to:
- request access to information held about you;
- ask for inaccurate information to be corrected;
- request deletion of information in certain circumstances;
- request restriction of processing;
- object to certain processing;
- request transfer of certain information; and
- withdraw consent where processing is based on consent.
Not every right applies in every circumstance.
To exercise a data protection right, contact me using the details above.
You also have the right to raise concerns with the Information Commissioner’s Office (ICO).
Changes to this Policy
This policy may be updated periodically to reflect changes to my services, website or legal requirements.
The current version will be published on this website with the date it was last updated.