Privacy policy
Last updated: 16.07.2026
Aligned Being, the practice of Ester Oldfield, operates www.alignedbeing.net and provides psychotherapy. This policy explains how we collect, use, and protect personal data, in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. Under the Ordinance, Aligned Being is the data user responsible for your personal data.
Personal Information Collection Statement
The purpose of collection. We collect personal data in order to respond to your enquiries, to provide and improve our therapy and yoga services, and to meet our professional and legal obligations. We will not use your data for a new purpose without your consent, unless permitted or required by law.
The data we collect. When you enquire or become a client, this may include your name, email address, phone number, and the content of your messages. In the course of therapy, we hold information relating to your physical and mental health, personal circumstances, and session notes. When you browse the site, we collect technical log data (see below).
Who your data may be transferred to. Your data may be handled by the service providers described below. We do not sell your data, and we do not share it with anyone else except as set out in this policy or as required by law.
Your rights of access and correction. You have the right to request access to the personal data we hold about you, and to request correction of anything inaccurate. To do so, contact us at esteroldfield@alignedbeing.net. As permitted under the Ordinance, we may charge a reasonable fee for complying with a data access request, not exceeding the direct cost of doing so.
Confidentiality and its limits
What you share in session is confidential. There are narrow exceptions, which we would normally discuss with you first where it is safe to do so: where there is a serious risk of harm to you or another person; where a child or vulnerable adult is at risk; or where we are required by law or court order to disclose. Anonymised aspects of the work may be discussed in clinical supervision, which is a standard and ethical part of safe practice.
Log data
When you visit our website, we automatically collect information your browser sends, which may include your IP address, browser type and version, the pages you visit, the date and time of your visit, time spent on pages, and similar statistics. This is used to understand and improve how the site is used.
Cookies
Cookies are small data files stored on your device that help the website function and let us understand how it is used. You can accept or refuse cookies through the banner on this site or through your browser settings. If you refuse them, some parts of the site may not work as intended.
Service providers
We use third-party companies to run the practice — for example website hosting, email, booking, video sessions, and payments. They may access your personal data only to perform their tasks on our behalf, and are obliged not to use or disclose it for any other purpose. As the data user, we remain responsible for data entrusted to them, and take contractual or other steps to ensure it is not kept longer than necessary and is protected against unauthorised access. Providers may include:
Squarespace (website hosting)
NEO (Email provider)
Stripe (Payment processor)
Each has its own privacy policy.
Data retention
We keep personal data only as long as necessary for the purposes above. Enquiries that don't become clients: 12 months. Client records: 3 years after therapy ends, in line with professional-body guidance.
Cross-border handling
Our services operate between Hong Kong and Bali, and some providers store data outside Hong Kong. Where data is handled outside Hong Kong, we take steps to ensure it is protected to a standard consistent with the Ordinance.
Security
We use commercially reasonable means to protect your personal data. However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
Links to other sites
This website may contain links to sites we don't operate. If you follow one, we have no control over and take no responsibility for its content, privacy policies, or practices. We'd encourage you to review the privacy policy of any site you visit.
Children's privacy
This website and our services are directed at adults and are not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.
Making a complaint
If you have concerns about how we handle your personal data, please contact us first at esteroldfield@alignedbeing.net. You also have the right to complain to the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong (pcpd.org.hk).
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with the "last updated" date revised accordingly.
Contact