You can use DBMS_XMLGEN.CONVERT to unescape the special XMLcharacters.
SQL> select DBMS_XMLGEN.CONVERT('HOLLAND & BARRETT',1) from dual;
DBMS_XMLGEN.CONVERT('HOLLAND&BARRETT',1)
--------------------------------------------
HOLLAND & BARRETT