Legal

Privacy Policy

Last updated: May 2026

Quick action: To exercise your data rights (access, correction, deletion), use the Request My Data form. You may also reach out through our contact form.

Wholesome Healing Consultants LLC ("we," "us," or "our") operates this website and provides services described herein. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have regarding your data.

We are committed to compliance with the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA), the Personal Data Protection Act of Thailand (PDPA), and other applicable privacy laws.

1. Information We Collect

When you use our website, book a session, contact us, or purchase products, we may collect the following information:

• Contact information: Name, email address, phone number, and mailing address.
• Service inquiry details: The service requested, preferred dates and times, time zone, and any context you provide about what brings you to the session.
• Payment information: Processed by third-party payment processors (such as Stripe or PayPal). We do not store your full payment card details on our servers.
• Technical information: IP address, browser type, device type, and pages visited, collected automatically through standard web technologies and analytics tools.
• Cookie data: See Section 4 below.

2. How We Use Your Information

Your information is used to:

• Respond to your inquiries and schedule appointments.
• Deliver products and services you have requested.
• Process payments and send order confirmations.
• Communicate updates relevant to services or products you have shown interest in.
• Comply with legal obligations (tax records, consumer protection requirements).
• Improve our website and services through aggregated analytics.

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

3. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area, we process your personal data on the following legal bases:

• Consent: When you submit a form, you consent to us using the information to respond.
• Contract: When you book a session or purchase a product, processing is necessary to perform the contract.
• Legitimate interest: Limited use for analytics and security, balanced against your rights.
• Legal obligation: Where required to comply with tax, consumer protection, or other applicable law.

4. Cookies and Tracking Technologies

This website uses cookies to provide essential functionality and to understand how visitors use the site. On your first visit, you are presented with a cookie consent banner allowing you to accept all cookies or only essential ones.

• Essential cookies: Required for the website to function. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site. Used only if you accept them via the banner.
• Third-party cookies: Some pages may load resources from Google Fonts (typography). Google's own privacy policy governs any data they collect.

You may clear your cookie preferences at any time by clearing your browser's local storage for this site, which will cause the consent banner to reappear on your next visit.

5. How We Share Information

We share personal information only in the following limited circumstances:

• Service providers: Companies that help us operate the business, including payment processors (Stripe, PayPal), email service providers (Google Workspace, Web3Forms for form submissions), and website hosting (Cloudflare). Each is contractually bound to protect your data.
• Legal compliance: When required by law, court order, or government request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data will be transferred and the receiving party will be bound by this Privacy Policy.

6. Your Rights

Under GDPR, CCPA, PDPA Thailand, and similar laws, you have the following rights:

• Right to access: Receive a copy of personal data we hold about you.
• Right to rectification: Have inaccurate data corrected.
• Right to erasure (right to be forgotten): Request deletion of your personal data.
• Right to restrict processing: Limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing for direct marketing or based on legitimate interest.
• Right to withdraw consent: Where consent is the basis, you may withdraw it at any time.
• Right to lodge a complaint: File a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, please use the Request My Data form or reach out through our contact form. We respond within 30 days, often sooner.

7. Data Retention

We retain personal data only as long as needed for the purposes described in this policy or as required by law. Typical retention periods:

• Inquiry and booking records: Up to 2 years after last interaction.
• Payment and order records: 7 years (IRS tax requirement).
• Marketing consent records: Until consent is withdrawn.
• Website analytics: Aggregated and anonymized after 14 months.

8. Data Security

We take reasonable measures to protect personal information. All data submitted through forms is transmitted via HTTPS-encrypted connections. Payment processing is handled by PCI-DSS compliant providers. We restrict internal access to personal data to those who need it to perform their role.

9. International Data Transfers

We are based in the United States. If you are in the EEA, UK, or another region, your data may be transferred to and processed in the United States or other countries. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

10. Children's Privacy

This website and our services are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal information, please reach out through our contact form and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects when changes were made. Material changes will be communicated through a notice on this website.

12. Contact

Questions about this Privacy Policy or our data practices? Contact us at:

Contact: Use our contact form
Business: Wholesome Healing Consultants LLC
Registered in: United States
All services offered remotely, worldwide.