Privacy policy

Last updated: 26 September 2026

This policy explains what personal information we collect when you use this website or book a conversation, why we collect it, how we keep it safe, and the rights you have. We take particular care with information about your health.

Who we are

The data controller is Cameron Whiteley, a sole trader based in the United Kingdom, trading as CW Coaching (“we”, “us”). You can contact us about anything in this policy at hello@islabonitadietas.com. We are in the process of registering with the UK Information Commissioner’s Office (ICO).

What we collect

• Contact and booking details: your name, email address, phone or WhatsApp number, time zone and the time you book.
• Health and safety intake: answers about your physical and mental health, medications, supplements, previous experience with plant medicines and anything else you choose to share. This is “special category” health data under data protection law.
• Conversations: notes from calls and the messages or emails you send us, including during preparation and integration.
• Retreat logistics: travel dates, flight details, dietary needs, and the name and phone number of an emergency contact you give us. Please let your emergency contact know you have shared their details.
• Donations: if you choose to make a donation towards integration support by bank transfer, your name, the amount, the date and your bank reference.
• Website data: limited technical information, such as your IP address, device and browser type, and, if you accept analytics cookies, how you use the site.

Why we use it, and our lawful basis

• To arrange and hold your conversation and, if you go ahead, your dieta: taking steps at your request before entering a contract, and performing that contract.
• To judge whether a dieta is likely to be suitable and to keep you as safe as we can: for your health information, your explicit consent, which you give when you complete the intake.
• To provide preparation and integration support: contract and, for health-related notes, explicit consent.
• To keep basic records, including records of donations, and meet any legal obligations: legal obligation and legitimate interests.
• To understand how the website is used and improve it, through analytics: your consent, given through the cookie banner.

We do not sell your data, use it for advertising, or send marketing without asking you first.

Who we share it with

• The Shipibo family and centre in Peru, only the information they need to care for you safely, such as relevant health and safety details, dietary needs and travel arrangements. We share this by WhatsApp with Karina, the family’s guest coordinator.
• Service providers who process data on our behalf, namely Calendly (booking), Google (Gmail email, Google Meet video calls, the health and safety intake, and Google Analytics), WhatsApp (Meta), our bank, and our website hosting provider. They may only use your data to provide their service to us.
• Emergency services or medical staff if we believe it is necessary to protect your life or health.

Payments

The retreat fee is paid in cash directly to the family in Peru; we do not collect or process it. Voluntary donations towards integration support are made by bank transfer to CW Coaching. We never ask for or store card details.

International transfers

Some of our providers store data outside the UK and EEA, and the centre is in Peru, which does not have a UK or EU “adequacy” decision. Where our providers transfer data, they rely on recognised safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses. Sharing the information the family needs to care for you is done with your explicit consent, which you give when you book, and we keep what we share to the minimum necessary.

How long we keep it

We keep booking, intake and support records for one year after your dieta ends, then delete them, unless you ask us to delete them sooner. If you book a conversation but do not go ahead, we delete your intake answers straight away. Records of donations are kept for as long as UK tax law requires (usually six years).

Keeping it safe

We use reputable providers with encryption and access controls, keep health information to the minimum necessary, restrict access to those who need it, and use secure passwords and two-factor authentication on our accounts.

Your rights

Under the UK GDPR and EU GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting anything done before you withdrew it. If you withdraw consent to us holding your health information, we may no longer be able to support your dieta safely.

To use any of these rights, email hello@islabonitadietas.com. We will respond within one month.

Cookies

We use Google Analytics to understand, in aggregate, how visitors use the site. Analytics cookies are only set if you accept them in the cookie banner, and you can change your choice at any time. We do not use advertising cookies. The booking tool and fonts load from third-party services, which may set essential cookies or receive your IP address in order to work.

Complaints

If you have a concern, please contact us first so we can try to put it right. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or, if you live in the EU, to your local data protection authority.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.