Last updated: May 2026
1. Introduction
Pandey Integrated Healthcare (“we”, “us”, “our”; website: https://pandey.healthcare) is a United Kingdom registered limited company. Through this website we share educational and reflective material on mindfulness, meditation and integrative wellbeing. The website does not provide clinical care, medical advice, diagnosis or treatment, and is not a channel for confidential patient communications. If you are an NHS or private patient and need clinical input, please contact your GP, your treating clinician, or NHS 111. We respect your privacy and are committed to handling personal data lawfully, fairly and transparently.
2. Data Collected
Data Storage Location
Our web infrastructure is operated and hosted in London, United Kingdom by AH Cloud Limited. Personal data submitted through this website is therefore stored within the United Kingdom and processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We use SSL/TLS encryption for data in transit, and apply standard administrative, technical and physical safeguards to protect personal data at rest.
Registration Data
If you register on our website, we store your chosen username and email address, together with any additional personal information you add to your user profile. You can view, edit or delete your personal information at any time (except for changing your username). Website administrators can also see and edit this information.
Comments
When you leave a comment on the website we collect the data shown in the comment form, together with the IP address and browser user agent string. This information is used to help with spam detection.
Contact Form
Information submitted through the contact form on our site is sent to our company email, hosted by Google Workspace (Gmail). Where Google transfers data outside the UK, it relies on the UK-US Data Bridge (an extension of the EU-US Data Privacy Framework approved by the UK government in October 2023) and on Standard Contractual Clauses, both of which provide adequate protection for personal data under UK law. You can read Google’s policy here: Google Privacy Policy.
These submissions are kept only for the purposes of customer service and, where you have explicitly consented, our mailing list. We do not use customer data for any external marketing, and we do not share your data with third parties for their own marketing purposes.
Google Analytics
We use Google Analytics 4 to understand how visitors use our website in aggregate. IP addresses are anonymised at collection and we do not enable advertising features or cross-site tracking signals. If you would prefer not to be measured, please decline analytics cookies via the cookie banner shown on your first visit, or use a browser extension such as Google’s official Analytics Opt-out add-on.
Cases for Using the Personal Data
We use your personal information in the following cases:
- Verifying or identifying you while you are using the website;
- Providing technical assistance when you contact us;
- Sending updates with important information about changes to the website or our services, where you have consented;
- Monitoring account activity to prevent fraud and protect the security of personal information;
- Customising the website to make your experience more relevant;
- Ensuring overall performance and that administrative functions run smoothly.
3. Embedded Content
Pages on this site may include embedded content, such as YouTube videos. Embedded content from other websites behaves in the same way as if you visited the originating website. Those websites may collect data about you, set their own cookies, embed additional third-party tracking, and monitor your interaction with the embedded content (including tracking your interaction if you have an account and are logged into that website). The services we are most likely to embed are listed below.
YouTube
We sometimes embed YouTube videos on the site. YouTube has its own cookie and privacy policies which we do not control. Cookies from YouTube are not installed, and your IP address is not sent to a YouTube server, until you interact with the embedded player. See their policy here: YouTube Privacy Policy.
4. Cookies
This site uses cookies, small text files placed on your device to help the site provide a better user experience. Cookies typically retain user preferences, manage authentication, and provide anonymised usage data to third-party services such as Google Analytics. You can decline non-essential cookies via the consent banner shown on your first visit. The most effective way to limit all cookies is via your browser settings.
Necessary Cookies (all site visitors)
- __cf_bm: Set by Cloudflare, our CDN and security provider, to distinguish humans from automated traffic and apply security settings on a per-client basis. See Cloudflare’s Privacy Policy.
- cookie_notice_accepted: Set by our cookie consent banner once you have made a choice, so that we do not show the banner on every page.
- PHPSESSID: Identifies your unique session on the website.
Necessary Cookies (additional, for logged-in users)
- wordpress_logged_in_{hash}: Used by WordPress to authenticate logged-in users and verify identity.
- wordpress_test_cookie: Used by WordPress to confirm cookies are working correctly.
- wp-settings-[UID] / wp-settings-{time}-[UID]: Set by WordPress for logged-in users. The number on the end is your individual user ID and is used to remember your preferences in the admin interface.
5. Who Has Access To Your Data
If you are not a registered user of our site, there is no personal information we can retain or view about you beyond anonymous analytics. If you are a registered user, your personal information can be accessed by:
- Our system administrators;
- Technical support staff at our software and hosting providers (currently AH Cloud Limited for hosting), where access is necessary to provide that support.
6. Third Party Access to Your Data
We do not share your data with third parties in any way that reveals personal information such as your email address or name. There are no exceptions to that rule outside of legal obligations described in section 11 below.
7. How Long We Retain Your Data
When you submit a support enquiry or comment, the associated metadata is retained until you ask us to remove it. We use this data so that we can recognise you and approve your comments automatically rather than holding them for moderation. If you register on our website, we also store the personal information you provide in your user profile, which you can view, edit or delete at any time (except for your username). Website administrators can also see and edit that information. Anonymised analytics data is retained according to the default Google Analytics 4 retention setting.
8. Security Measures
We use the SSL/TLS (HTTPS) protocol throughout the site. This encrypts communications between your browser and our servers so that personally identifiable information is not exposed to unauthorised third parties. In the event of a data breach, our administrators will take immediate steps to ensure system integrity, will contact affected users where required by law, and will reset credentials where appropriate.
9. Your Data Rights
General Rights
If you have a registered account on this website, or have left comments, you can request an exported file of the personal data we hold about you, including any additional information you have provided to us. You can also request that we erase any of the personal data we have stored. This does not include data we are obliged to keep for administrative, legal or security purposes. If all of your data is erased, we will no longer be able to offer you account-based services.
UK GDPR Rights
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Under that legislation you have the right to access your data, rectify it, request its erasure, restrict its processing, object to its processing, and seek data portability. To exercise any of these rights, please contact us at the addresses listed in the website footer. If you are not satisfied with our handling of a request, you have the right to complain to the UK Information Commissioner’s Office: ico.org.uk.
10. Third Party Websites
This site may link to third-party websites. Those third-party websites are not screened for privacy or security compliance by Pandey Integrated Healthcare, and we accept no liability for the conduct of those websites. Social media sharing links, whether shown as text or icons, do not connect you to the associated third parties unless you click them. Please review the privacy policy and terms of service for each site you visit through any third-party link.
11. Release of Your Data for Legal Purposes
At times it may be necessary for Pandey Integrated Healthcare Limited to release information in response to a request from a government agency, regulator or private litigant. You agree that we may disclose your information to a third party where we believe in good faith that it is necessary or desirable to do so for the purposes of a civil action, criminal investigation, regulatory enquiry or other legal matter. In the event we receive a subpoena or court order affecting your privacy, we may elect to notify you so that you have an opportunity to challenge it, but we are not obliged to do so. Any disclosure of personal data for legal purposes will be carried out in compliance with the laws of the country in which you reside.