Tonya Brash

Remote energy work for people who want support without having to explain themselves

Privacy Notice

This privacy notice explains how I collect, use, and protect your personal information.

Contact Details

Tonya Brash
Based in Nairn, Highland
Email: tonya@tonyabrash.com
Telephone: 07794348889
WhatsApp: 07794348889

You can contact me by email, phone, or WhatsApp. For particularly sensitive information (such as your date of birth or detailed health information), WhatsApp messages are end-to-end encrypted.

What Information I Collect and Why

When you book a Personal Energy Support or Remote Home Energy Reset:

For Personal Energy Support, I collect:

  • Your name and email address
  • Your date of birth (optional – may be used for dowsing and astrological assessment as part of the energetic evaluation)
  • Your postal address
  • Information about your health, wellbeing, and the issues you’d like support with
  • Information I obtain through dowsing to assess your energetic patterns, which may include astrological chart information
  • Photographs (where provided, these may be used as part of the dowsing assessment process)

For Remote Home Energy Reset, I collect:

  • Your name, email address, and contact details
  • Details of people living with you at the address (with their consent), including pets
  • Your property address
  • A plan or floor plan of your property
  • Information about what you’re experiencing in your home
  • Information I obtain through dowsing to assess the property’s energetic state

I use this information to:

  • Provide the service you’ve requested
  • Select and send appropriate remedies
  • Follow up on your progress where appropriate
  • Keep records of our work together

Special category data:
Information about your health and wellbeing is “special category data” under UK GDPR and receives additional protection. I only process this data with your explicit consent or where necessary to provide the services you’ve requested.

When you contact me with questions or enquiries:

I collect:

  • Your name and contact details
  • The content of your message (whether via email, phone, WhatsApp, or other means)
  • Any relevant correspondence

I use this information to:

  • Respond to your enquiry
  • Keep a record of our communication

Lawful Basis for Processing Your Data

Under UK data protection law, I must have a “lawful basis” for collecting and using your personal information.

For providing services (Personal Energy Support, Remote Home Energy Reset):

My lawful bases are:

  • Consent – You give me explicit permission to process your health information when you book a service
  • Contractual necessity – Processing your information is necessary to provide the service you’ve requested

For special category health data:

I rely on your explicit consent, which you provide when booking or enquiring about services.

For responding to enquiries:

My lawful basis is:

  • Legitimate interests – Responding to your questions benefits you and allows me to provide information about my services

You can withdraw your consent at any time by contacting me using the details above.

Your Data Protection Rights

You have the following rights:

Right of access – You can ask me for copies of your personal information and details about how I use it.

Right to rectification – You can ask me to correct information you think is inaccurate or incomplete.

Right to erasure – You can ask me to delete your personal information. However, I may refuse this request if I need to retain your records to:

  • Comply with my professional indemnity insurance requirements (7-year retention)
  • Defend against potential legal claims
  • Meet other legal obligations

If I refuse your deletion request, I will explain why and inform you of your right to complain to the ICO.

Right to restriction of processing – You can ask me to limit how I use your personal information.

Right to object to processing – You can object to the processing of your personal data.

Right to data portability – You can ask me to transfer your personal information to another organisation or to you.

Right to withdraw consent – When I use consent as my lawful basis, you can withdraw your consent at any time.

To exercise any of these rights, please contact me using the details at the top of this notice. I will respond within one month.

For more information about your data protection rights, visit the ICO’s website: www.ico.org.uk

Where I Get Your Information From

I collect personal information:

  • Directly from you (via contact forms, emails, phone, WhatsApp, or conversations)
  • Through dowsing during the assessment process

I do not obtain your information from third parties.

Who I Share Your Information With

I do not share your personal information with third parties except:

  • Where required by law (for example, by court order)
  • Where you have given specific consent for me to do so

Your information is kept confidential.

How Long I Keep Your Information

I keep your personal information for 7 years after our last contact. This is in line with professional record-keeping requirements and allows me to:

  • Maintain continuity if you return for further work
  • Respond to any questions about previous work
  • Meet professional and legal obligations

After this period, your information is securely deleted.

If you ask me to delete your information before this time (exercising your right to erasure), I may need to refuse if I have a legal obligation to retain it, such as my professional insurance requirements or the need to defend against potential legal claims.

How I Keep Your Information Secure

I take appropriate technical and organisational measures to protect your personal information, including:

  • Storing digital records on password-protected devices
  • Using encrypted connections for email communication
  • Using encrypted messaging (WhatsApp) for particularly sensitive information
  • Keeping physical records (if any) in a secure location
  • Limiting access to your information to myself only

Changes to This Privacy Notice

I may update this privacy notice from time to time. Any changes will be posted on this page with an updated revision date.

Last updated: 20th April 2026

How to Complain

If you have concerns about how I’ve handled your personal information, please contact me using the details at the top of this notice. I will do my best to resolve any issues.

If you remain unhappy after raising a complaint with me, you can contact the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint

Questions

If you have any questions about this privacy notice or how I handle your personal information, please contact me using the details at the top of this page.