How we look after your data.
Plain English. No jargon. Short version: we hold only what we need to give you good care, we keep it carefully, and we will give it back to you on request.
What we collect
When you book a session we collect your name, email address, phone number, the name of the practitioner you have chosen, the date and time of the session, the fee paid, and any optional notes you choose to add. We collect nothing else for the booking itself.
During the work itself, your practitioner will keep clinical notes. These are held separately from the booking system, with the same level of protection used in NHS practice. You can request access to your own notes at any time.
Why we collect it
To run the booking and the work itself, to send you confirmations and reminders, to take payment, and to meet our regulatory record-keeping obligations as a private health practice.
How long we keep it
Booking records: three years after your last session, then deleted. Clinical notes: seven years from the date of the last session, then securely destroyed. Payment records: six years, in line with HMRC requirements.
Who else sees it
Only your practitioner and the booking system administrator. We do not share your data with any third party for marketing. Stripe processes the payment (this is the same processor used by most UK businesses); they hold the payment record but not the booking detail.
Your rights
Under UK GDPR you have the right to access, correct, port, restrict or delete your personal data. You can also object to specific processing and lodge a complaint with the ICO. Make a request here and we will respond within 30 days.