• Data Protection & Ethics

Privacy Policy

Natural Path Wellness is dedicated to safeguarding your health records and personal information. We maintain clear compliance, ethical standards, and patient confidentiality across every step of your integrative care.

Core principles governing how your consultation intake, communication records, and medical data are safeguarded.

1. Who We Are

Natural Path Wellness provides naturopathic, herbal medicine, iridology and related health and wellbeing services.

For the purposes of UK data-protection law, Natural Path Wellness is the data controller for the personal information collected and processed in connection with your care and the services we provide.

This means Natural Path Wellness determines why and how your personal information is processed.

Contact details

Business: Natural Path Wellness
Practitioner: Lauren Hidalgo
Email: info@naturalpathwellness.co.uk

If you have any questions about this Privacy Notice or how your personal information is handled, please contact Natural Path Wellness using the email above.

2. The Information We Collect

The information we collect will depend on the services you receive and your individual circumstances.

We aim to collect only information that is relevant and reasonably necessary for providing and managing our services.

Personal and contact information

This may include:

  • Full name

  • Preferred name

  • Date of birth

  • Address

  • Email address

  • Telephone number

  • Emergency contact information

  • Appointment information

  • Relevant correspondence


Health and wellbeing information

Because Natural Path Wellness provides personalised health and wellbeing services, we may need to collect information relating to your physical and emotional health.

This may include:

  • Current symptoms and health concerns

  • Medical history

  • Existing or previous diagnoses

  • Relevant family health history

  • Prescription medication

  • Over-the-counter medication

  • Supplements

  • Herbal medicines and products

  • Allergies and sensitivities

  • Dietary information

  • Digestive health

  • Sleep

  • Stress and emotional wellbeing

  • Physical activity and lifestyle

  • Menstrual, hormonal and reproductive information where relevant

  • Pregnancy and breastfeeding information where relevant

  • Information about other healthcare or complementary treatments

  • Relevant test or investigation information that you choose to provide

  • Other health information relevant to your consultation

Health information is treated as special category personal data under UK data-protection law and requires additional protection.

Consultation records

We may create and maintain records including:

  • Initial health questionnaire

  • Consultation notes

  • Follow-up notes

  • Personalised recommendations

  • Herbal recommendations and preparations

  • Wellness plans

  • Relevant safety considerations

  • Referrals or signposting

  • Adverse reaction information

  • Consent records

  • Relevant communications concerning your care


Iridology information

If you choose to receive an iridology assessment, we may collect and store:

  • Photographs of your left and right iris

  • Information associated with those photographs

  • Iridology observations

  • Relevant consultation notes

Iris photographs will be treated as personal information and handled in accordance with this Privacy Notice.

Appointment and payment information

We may process information relating to:

  • Appointments

  • Services purchased

  • Payments

  • Invoices

  • Refunds

  • Transaction records

Where payments are handled by a third-party payment processor, Natural Path Wellness may not receive or store your complete payment-card details.

3. How We Collect Your Information

We may collect information directly from you when you:

  • Make an enquiry

  • Create or use a client account

  • Book an appointment

  • Complete a health questionnaire

  • Complete a consent form

  • Attend a consultation

  • Participate in a follow-up consultation

  • Send us an email or message

  • Provide an iris photograph

  • Provide health documents or information

  • Purchase a service or programme

  • Provide feedback

  • Otherwise communicate with Natural Path Wellness

We may also create information as part of providing your care, such as consultation notes, herbal recommendations and follow-up records.

4. Why We Use Your Information

We may process your personal information in order to:

Provide and manage your care

This includes:

  • Understanding your health history and concerns

  • Preparing for consultations

  • Providing naturopathic and herbal medicine consultations

  • Considering the suitability and safety of herbal recommendations

  • Providing personalised lifestyle and wellbeing recommendations

  • Conducting iridology assessments where requested

  • Preparing wellness plans

  • Reviewing your progress

  • Providing follow-up care


Maintain appropriate records

We may maintain records in order to:

  • Document consultations

  • Record recommendations

  • Maintain continuity of care

  • Record herbal preparations or recommendations

  • Record consent

  • Document referrals and safety concerns

  • Respond to questions or complaints

  • Meet applicable professional, insurance, legal and regulatory requirements


Manage appointments and our client relationship

This may include:

  • Booking appointments

  • Sending appointment confirmations

  • Sending appointment reminders

  • Rescheduling appointments

  • Processing payments

  • Issuing invoices or receipts

  • Responding to enquiries

  • Sending information relating to your consultation


Maintain safety

Relevant information may be used to:

  • Identify possible contraindications

  • Consider potential herb–medicine interactions

  • Identify allergies or sensitivities

  • Determine whether a recommendation is appropriate

  • Determine whether referral or signposting may be appropriate

  • Respond to reported adverse reactions

  • Address appropriate safeguarding or safety concerns


Meet legal and professional obligations

Information may also be processed where reasonably necessary to:

  • Comply with applicable law

  • Meet professional record-keeping requirements

  • Meet insurance requirements

  • Respond to lawful requests

  • Establish, exercise or defend legal claims

  • Deal with complaints or disputes

  • Maintain appropriate financial records

5. Lawful Basis for Processing

Natural Path Wellness will only process personal information where there is an appropriate lawful basis under applicable UK data-protection law.

Depending on the purpose and circumstances, this may include:

Contract – where processing is necessary to provide a service you have requested or to take steps at your request before providing that service.

Legal obligation – where processing is necessary to comply with a legal requirement.

Legitimate interests – where processing is reasonably necessary for a legitimate purpose and those interests are not overridden by your rights and interests.

Consent – where you have freely given specific consent for a particular processing activity, such as certain optional marketing activities.

Health information and certain other information may constitute special category personal data. Where Natural Path Wellness processes special category information, an appropriate condition under UK data-protection law will also be identified and documented.

Consent to receive a consultation or complementary health service is not necessarily the same as consent relied upon as a lawful basis for processing personal data.

6. Our Practice Management System — Nurish Pro

Natural Path Wellness uses Nurish Pro, operated by Craftech Media Solutions LTD, to support the administration and delivery of our services.

Natural Path Wellness remains the data controller for client information entered and managed through Nurish Pro.

Craftech Media Solutions LTD, trading as Nurish Pro, acts as a data processor when processing this information on behalf of Natural Path Wellness.

Information processed through Nurish Pro may include:

  • Your name and contact information

  • Date of birth

  • Health information

  • Medical and dietary history

  • Lifestyle information

  • Consultation and progress notes

  • Appointment information

  • Billing/payment records relating to our services

  • Communications between you and Natural Path Wellness

  • Other information you provide as part of your care

Nurish Pro states that client information is processed according to the practitioner's instructions and its Data Processing Addendum.

Nurish Pro may also provide functionality for appointment scheduling, billing, secure communications and other practice-management activities.

7. How Nurish Pro Uses Client Information

When Nurish Pro processes client information on behalf of Natural Path Wellness, its stated purposes include:

  • Storing client profiles

  • Storing health information

  • Storing progress notes

  • Facilitating appointment scheduling

  • Facilitating billing

  • Enabling secure communication

  • Storing client-generated information

  • Providing practice-management functionality

Nurish Pro states that it does not use practitioner client data for its own purposes, such as marketing directly to the practitioner's clients, unless separately agreed or required by law.

8. Nurish Pro Sub-Processors

Nurish Pro uses third-party service providers to operate its service.

According to Nurish Pro, these may include providers supporting:

  • Cloud hosting

  • Payment processing

  • Video calls

  • Email delivery

  • Technical services

  • Customer support

  • Analytics

Nurish Pro states that client information is shared with sub-processors only where necessary to provide the Nurish Pro service and in accordance with its Data Processing Addendum.

9. International Data Transfers

Craftech Media Solutions LTD is incorporated in Ireland and states that information processed through Nurish Pro is primarily processed within the European Economic Area (EEA).

Nurish Pro also uses third-party service providers that may operate outside the EEA.

Nurish Pro states that where such international transfers occur, appropriate safeguards are used where required, which may include:

  • Adequacy decisions

  • Standard Contractual Clauses

  • Other legally approved transfer mechanisms

Natural Path Wellness will take reasonable steps to ensure that any international transfer of personal information through the services we select complies with applicable UK data-protection requirements.

10. Security of Information

Natural Path Wellness takes reasonable technical and organisational measures to protect your information from:

  • Unauthorised access

  • Accidental loss

  • Inappropriate disclosure

  • Alteration

  • Destruction

  • Misuse

Measures may include:

  • Password-protected accounts

  • Secure devices

  • Appropriate access controls

  • Multi-factor authentication where available

  • Secure practice-management software

  • Up-to-date software and device security

  • Limiting access to client information

  • Secure disposal/deletion practices

Nurish Pro states that its security measures include encryption for data in transit and at rest, access controls, authentication measures, security audits, vulnerability assessments, backups and disaster-recovery procedures.

No electronic storage or communication system can be guaranteed to be completely secure.

11. Who We May Share Information With

Natural Path Wellness does not sell your personal information.

Information may be shared where necessary with organisations that help us provide and administer our services.

These may include:

Nurish Pro

Used for practice management, client records and video calls as described above.

Payment processor: Stripe

Where applicable, payment providers may process information required to complete payments and transactions.

Professional advisers

Where necessary, information may be disclosed to professional advisers such as:

  • Professional insurers

  • Legal advisers

  • Accountants

  • Other advisers

Information will only be shared where there is an appropriate reason and lawful basis for doing so.

Other healthcare professionals

Where appropriate and lawful, relevant information may be shared with another healthcare professional if:

  • You request or authorise this;

  • It is necessary and lawful for an appropriate safety or safeguarding reason; or

  • There is another applicable lawful basis for disclosure.

Only information reasonably necessary for the purpose will be shared.

Legal and regulatory authorities

Information may be disclosed where required or permitted by law, including where necessary to comply with a lawful request or establish, exercise or defend legal rights.

12. Professional Membership & Insurance

Natural Path Wellness maintains professional arrangements relevant to the services provided.

The practitioner is:

  • Insured through Balens

  • A member of the Association of Naturopathic Practitioners (ANP)

  • A member of the General Naturopathic Council (GNC)

  • A member of the Guild of Naturopathic Iridologists (GNI)

Where necessary, information may be processed or retained in order to meet applicable professional, ethical, insurance or record-keeping requirements.

Where a complaint, claim or professional matter arises, relevant information may need to be disclosed to an insurer, legal adviser or relevant professional organisation where there is an appropriate lawful basis for doing so.

Only information reasonably necessary for the relevant purpose will be disclosed.

13. Confidentiality

Information you share during your consultation will be treated confidentially.

Access to client information will be limited to those who reasonably require access for an appropriate purpose.

However, confidentiality is not absolute.

There may be circumstances where information may need to be disclosed, including where:

  • Disclosure is required by law

  • There is an appropriate legal obligation

  • Disclosure is necessary to establish, exercise or defend a legal claim

  • There is a serious and appropriate safeguarding or safety concern

  • You have requested or authorised disclosure

Where reasonably possible and appropriate, Natural Path Wellness will discuss such disclosure with you.

14. Iris Photographs

If you receive an online iridology assessment, photographs of your eyes will form part of your client record. This is also optional with other consultations.

These photographs will only be collected where relevant to the service you have requested.

They may be used to:

  • Conduct your iridology assessment

  • Document relevant observations

  • Maintain an appropriate record of your care

Iris photographs will not automatically be used for:

  • Social media

  • Advertising

  • Promotional materials

  • Public case studies

  • Educational publications

Separate permission will be sought where appropriate before identifiable client photographs are used for purposes outside your individual care.

15. Testimonials, Photographs & Marketing Materials

Natural Path Wellness will not automatically use your:

  • Testimonial

  • Photograph

  • Video

  • Audio recording

  • Iris photograph

  • Identifiable case information

for promotional purposes simply because you are a client.

Where consent is required for a particular promotional use, you will be given a separate choice.

Refusing marketing or promotional consent will not affect your ability to receive services from Natural Path Wellness.

16. Marketing Communications

Natural Path Wellness may occasionally send:

  • Newsletters

  • Educational resources

  • Business updates

  • Information about services

  • Programmes

  • Events

  • Offers or promotions

Where consent is required for direct marketing, you will be asked separately whether you would like to receive these communications.

You may withdraw your marketing consent or unsubscribe at any time.

You may still receive necessary service-related communications concerning appointments, payments or your care after opting out of marketing.

17. How Long We Keep Your Information

Natural Path Wellness retains client records for periods that take account of professional indemnity insurance requirements, professional standards, legal obligations and applicable data-protection principles.

Adult client records

Clinical and treatment records relating to adult clients will normally be retained for at least 7 years from the date of the client's last consultation or treatment.

These records may include:

  • Health questionnaires

  • Consultation records

  • Treatment records

  • Herbal medicine recommendations and prescriptions

  • Personalised wellness plans

  • Aftercare instructions

  • Follow-up and review records

  • Consent records

  • Relevant correspondence

  • Referral information

  • Adverse reaction or incident records

  • Iris photographs where retained as part of the clinical record

Records may be retained for longer where there is an appropriate legal, professional, insurance, safeguarding or other legitimate reason to do so.

Records relating to children and young people

Where Natural Path Wellness provides services to a person under the age of 18, records will normally be retained for at least 7 years after that person reaches the age of 18.

This means records would generally be retained until at least the individual's 25th birthday.

Records may be retained for longer where there is an appropriate reason to do so.

Financial and administrative records

Financial, accounting, payment and other administrative records may be subject to different retention periods depending on applicable legal, tax and business requirements.

Marketing records

Marketing preferences and consent records will be retained for as long as reasonably necessary to demonstrate and manage those preferences.

Where a person withdraws marketing consent, Natural Path Wellness may retain limited information necessary to record that the individual has opted out and to ensure that their preference is respected.

Secure disposal

At the end of the relevant retention period, records will be reviewed.

Where there is no longer an appropriate reason to retain the information, it will be securely deleted, destroyed or anonymised.

Natural Path Wellness maintains an internal Data Retention & Record-Keeping Policy and Retention Schedule to support the appropriate management of client information.

Client records will be reviewed and securely deleted, destroyed or anonymised when there is no longer an appropriate reason to retain them.

18. Retention of Information Within Nurish Pro

Nurish Pro states that client information managed through its platform is retained according to the practitioner's instructions and the Nurish Pro Data Processing Addendum.

If Natural Path Wellness stops using Nurish Pro, Nurish Pro states that client information will be deleted or returned to the practitioner in accordance with its Data Processing Addendum.

Natural Path Wellness remains responsible for ensuring that appropriate client records are retained where there is a legal, professional or insurance reason for doing so.

Where necessary, appropriate records will therefore be securely exported or otherwise retained before terminating use of the practice-management system.

19. Your Data-Protection Rights

Depending on the circumstances, you may have rights including:

  • The right to be informed about how your personal information is used.

  • The right of access to personal information held about you.

  • The right to rectification of inaccurate or incomplete information.

  • The right to erasure in certain circumstances.

  • The right to restrict processing in certain circumstances.

  • The right to data portability in certain circumstances.

  • The right to object to certain types of processing.

  • Rights relating to automated decision-making and profiling, where applicable.

  • The right to withdraw consent where consent is the lawful basis for a particular processing activity.

These rights are not absolute and do not all apply in every circumstance.

For example, a request to delete information does not necessarily mean Natural Path Wellness must delete a clinical record where there is an overriding legal, professional, insurance or other lawful reason to retain it.

To exercise a data-protection right, please contact: info@naturalpathwellness.co.uk

Natural Path Wellness may need to confirm your identity before responding to certain requests.

20. Withdrawing Consent

Where Natural Path Wellness relies specifically on your consent to process information, you may withdraw that consent at any time.

Withdrawal of consent will not make processing that took place before withdrawal unlawful.

If information is being processed under another lawful basis, withdrawing consent may not require Natural Path Wellness to stop processing or delete that information.

21. Children & Young People

If services are provided to a child or young person, additional consideration will be given to:

  • Consent

  • Capacity

  • Parental or guardian involvement

  • Confidentiality

  • Safeguarding

  • Appropriate handling and retention of records

Please contact Natural Path Wellness before booking a service for a person under 18 so that appropriate arrangements can be discussed.

22. Data Breaches

Natural Path Wellness takes the protection of personal information seriously.

If a personal-data breach occurs, Natural Path Wellness will assess the circumstances and take appropriate action.

This may include:

  • Containing the incident

  • Assessing the information involved

  • Assessing potential risks to affected individuals

  • Recording the breach

  • Taking corrective measures

  • Notifying affected individuals where required

  • Reporting the breach to the Information Commissioner's Office where legally required

23. Third-Party Websites

Our website or communications may contain affiliate links to websites operated by third parties.

Natural Path Wellness does not control the privacy practices of independent third-party websites.

You should review the relevant privacy notice before providing personal information directly to another organisation.

Questions or Concerns

If you have a question or concern about the way Natural Path Wellness handles your personal information, please contact us first: info@naturalpathwellness.co.uk

We will aim to investigate and respond appropriately.

Changes to This Privacy Notice

Natural Path Wellness may update this Privacy Notice from time to time. The current version will be made available through the Natural Path Wellness website.
Where appropriate, clients will be informed of significant changes.

Version: 1.0

Effective from: 01-09-2026

Next review due: 02-09-2026

Natural Path Wellness

Practitioner: Lauren Hidalgo
Email: info@naturalpathwellness.co.uk

Supporting your journey towards natural vitality and wellbeing.