Privacy Policy
Angels Without Wings Ltd
Angels Without Wings Ltd (“we”, “us” or “our”) is committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, store and protect personal data when you visit our website at www.angels-without-wings.co.uk (the “Website”), make an enquiry, book onto an event, or otherwise use our consultancy, training, and drama psychotherapy services.
This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Angels Without Wings Ltd is the “data controller” responsible for your personal data collected through the Website.
Company name: Angels Without Wings Ltd
Company number: 07165881 (registered in England and Wales)
Registered office: Address available on request
Website: www.angels-without-wings.co.uk
Contact email: admin@angels-without-wings.co.uk
Information We Collect
We collect personal data in the following ways:
Enquiries made through the Website
When you contact us using the contact form on our Website, we collect the information you provide, which may include your name, email address, and the content of your message.
Referral and intake information
Where a referral or intake form is submitted through the Website in connection with our drama psychotherapy or therapeutic services, we collect the information provided in that form. This may include contact details and information about your health, wellbeing, or circumstances relevant to the support being sought. Information of this kind is treated as “special category data” under UK GDPR and is handled with additional care, as set out in Section 4 below.
Event and workshop bookings
When you register or book onto a conference, workshop, healing circle, or other event through the Website, we collect the information needed to process your booking, such as your name, email address, and any event-specific details you provide (for example, dietary or access requirements).
Payment information
Where an event requires payment, ticket purchases are processed by Stripe, our third-party payment processor. We do not receive or store your full card or payment details — these are collected and processed directly by Stripe in accordance with their own privacy policy and security standards.
Marketing and mailing list
We intend to use Mailchimp to operate a mailing list so that we can send updates, news, and information about our services and events to people who have opted in to receive them. If you subscribe, we will collect your name and email address for this purpose. You will always be able to unsubscribe at any time using the link provided in every email.
Technical and usage information
Our Website is built and hosted on the Wix platform. As with most websites, Wix automatically collects certain technical information when you visit, such as your IP address, browser type, device information, and pages visited, and uses cookies to operate and improve the Website. See Section 6 (Cookies) for further detail.
How We Use Your Information and Our Lawful Basis
We only use your personal data where we have a valid lawful basis to do so under UK GDPR. The table below sets out our main purposes and the corresponding lawful basis.
Special Category (Health) Data
As a qualified, HCPC-registered dramatherapist, Clancy Williams and Angels Without Wings Ltd are bound by professional standards of confidentiality set out by the Health and Care Professions Council (HCPC) and relevant professional bodies.
Where you share health-related or other special category information with us — for example, through a referral or intake form — we only use this information for the purpose of providing the service you have engaged us for, and we do not use it for any other purpose without your consent.
Confidentiality exceptions: in line with standard professional and legal obligations, we may need to share information without your consent where we are legally required to do so, or where there is a safeguarding concern involving risk of serious harm to you or another person. Where possible, and unless doing so would increase risk of harm, we will discuss this with you first.
Sharing Your Information
We do not sell your personal data, and we do not share your information with third parties for their own marketing purposes.
We do not share your personal information with any other organisation or individual unless you have given us permission to do so, except in the following circumstances:
Where we use trusted service providers (“processors”) to help us operate our Website and services — currently Wix.com Ltd (website hosting), Stripe (event ticket payments), and, in future, Mailchimp / The Rocket Science Group LLC (email marketing). These providers only process your data on our instructions and are contractually required to keep it secure.
Where we are required to do so by law, regulation, or a valid request from a public authority.
Where there is a genuine safeguarding concern, as described in Section 4 above.
Where necessary to establish, exercise, or defend our legal rights.
Cookies
Our Website is hosted on Wix, which uses cookies and similar technologies to operate the site, remember your preferences, enable event booking and payment functionality, and — where you consent — gather analytics about how the Website is used.
Where required by law, you will be asked to give your consent to non-essential cookies via a cookie banner when you first visit the Website. You can change your cookie preferences at any time through your browser settings or the Website's cookie settings tool.
International Transfers
Some of our service providers (including Wix, Stripe, and Mailchimp) may store or process personal data outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards recognised under UK GDPR, such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses (as adopted for UK use), or a valid adequacy decision, to ensure your data continues to receive an appropriate level of protection.
How Long We Keep Your Information
We keep personal data only for as long as necessary to fulfil the purpose it was collected for, including to satisfy any applicable legal, accounting, safeguarding, or professional regulatory record-keeping requirements (including those of the Health and Care Professions Council and relevant professional bodies for psychotherapists). Where data is no longer needed, we securely delete or anonymise it.
Your Rights
Under UK GDPR, you have the right to:
Be informed about how your personal data is used
Access the personal data we hold about you
Have inaccurate personal data corrected
Request erasure of your personal data, in certain circumstances
Restrict or object to how we use your personal data
Request that your data be provided to you or another organisation in a portable format
Withdraw consent at any time, where we rely on consent as our lawful basis
To exercise any of these rights, please contact us at admin@angels-without-wings.co.uk. We will respond within one month, as required by law.
If you are unhappy with how we have handled your personal data, you also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk or by calling 0303 123 1113.
Children's Information
Our Website and services are intended for adults. We do not knowingly collect personal data directly from children through the Website. Where our services involve children or young people (for example, family-focused programmes), any information is collected with appropriate parental or guardian consent and additional safeguarding care.
Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure, including relying on the security measures provided by our website host (Wix) and payment processor (Stripe). However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this policy from time to time, for example to reflect changes in our services or in data protection law. The “Last updated” date at the top of this policy shows when it was last revised. We encourage you to review this policy periodically.