Who is responsible
The Clara Path Consultants Ltd is responsible for the information described here. Contact clara@theclarapath.org about privacy, your information or a rights request. See our business details.
Collecting only what is needed
You can browse our public guidance and download the free starter guide without giving an email address. We do not use advertising pixels, session recordings or analytics of form contents. Initial enquiry forms, when available, ask for your name, email, topic and a short outline. Please do not send medical records, NHS numbers, financial details, passwords or another person’s identifying documents.
How information is used
- Enquiries: contact details and a brief outline let us respond and consider a requested service. Relevant bases are steps at your request before a contract and our legitimate interest in responding to ordinary enquiries. A privacy acknowledgement is confirmation that you read the notice, not agreement to marketing.
- Member accounts: Firebase processes sign-in details and account identifiers to authenticate members. Membership/access records support the requested service and account security.
- Community: posts, replies, display names and moderation reports are processed to provide and protect the member community. Other members can see posted material. Keep information general and do not publish identifiable case details.
- Payments: where paid services are available, Stripe handles payment details. We use customer identifiers, payment status and entitlement records to administer the contract, with records required for accounting and legal obligations. Card details are not collected by our enquiry form.
- Optional updates: if an email-updates form is available, it asks only for your email, an optional unticked marketing choice and a privacy acknowledgement. We retain the email only when you choose updates. Marketing uses consent; the free download remains available without subscribing. Withdraw by contacting us or using the unsubscribe link where provided.
- Public website analytics: only after your choice, Vercel counts permitted public page views. We remove query strings and fragments, exclude member/account/API pages and send no custom events or form information. The provider may process technical information such as device/browser and approximate location to produce statistics. See Vercel’s analytics privacy information.
- Embedded videos: only after your separate choice, an embedded YouTube or Vimeo player connects to its provider, which receives technical information including your IP address. Providers’ own policies apply to their processing.
Sensitive health and care information
This website does not request case files or detailed health histories. Ordinary form acknowledgement does not authorise processing special-category information. Before requesting sensitive case information for an individual service, we will explain the purpose, secure transfer method and applicable lawful basis and special-category condition. Do not use community discussions or initial forms for case documents.
Service providers and transfers
Vercel hosts the website; Google Firebase supports authentication and member data. Stripe supports billing when enabled. Active enquiries use Resend for email delivery and Cloudflare Turnstile for spam protection. Video providers connect only when embeds are permitted. Provider systems can operate outside the UK; applicable contractual safeguards or recognised adequacy arrangements must cover transfers before a service is activated. We do not sell your contact details.
Retention and security
We keep information only while needed for the purpose it was supplied, account administration, resolving disputes or a legal record-keeping duty. Cookie choices expire after 180 days. The member-session cookie lasts up to 55 minutes. Provider security and technical records have their own retention arrangements. Contact us for information about a particular record or deletion request. A retention and deletion schedule must be confirmed before currently closed collection workflows open; this notice does not activate those workflows.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information, object to processing based on legitimate interests, and withdraw consent without affecting processing already lawfully carried out. We may need proportionate identity checks. We normally respond to rights requests within one month, subject to lawful extensions. You can complain to the Information Commissioner’s Office and do not have to contact us first.
Changing optional choices
Use Privacy settings in the footer to reject analytics or withdraw permission for embedded videos. This stops future optional processing by this website; it does not erase information already held by a provider. Our Cookies Policy explains storage in more detail.
Service availability and changes
Enquiry, email-collection, booking and membership-sale features may remain closed until their operational and policy requirements are met. We update this notice when purposes or suppliers change and seek a fresh choice for material changes to optional tracking.