This policy has been prepared to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Holistic Therapy Liverpool provides holistic therapy services, including Reiki, Reflexology, Indian Head Massage, and Chakra Balancing. Our services are provided by Christine Wilson.
Our contact details are:
Website: holistictherapyliverpool.com
Email: info@holistictherapyliverpool.com
Phone: 07821978062
Address: [Insert Business Address or indicate if services are mobile/at a specific clinic, e.g., The Reiki Lounge, Hightor Road, Woolton Liverpool, UK, as found on the contact page]
For the purpose of the UK GDPR, Christine Wilson is the Data Controller.
2. What Information We Collect
We may collect the following types of personal information:
Personal Identification Information: Name, date of birth, gender.
Contact Information: Email address, phone number, home address (if provided for mobile services or records).
Health and Medical Information (Special Category Data): Information about your health, medical history, lifestyle, and details of treatments you receive from us. This information is crucial for providing safe and effective holistic therapy services.
Website Usage Information: If you visit our website, we may collect information about your visit, such as your IP address, browser type, operating system, pages viewed, and the dates/times of your visits. This is typically collected via cookies (please see our Cookie Policy below).
Communication Information: Records of your communications with us, such as emails or messages via our website contact form.
3. How We Collect Your Information
We collect information in the following ways:
Directly from you: When you book an appointment, complete a consultation form, contact us via email or phone, or during a therapy session.
Automatically when you use our Website: Through cookies and similar tracking technologies (see section 9: Cookie Policy).
4. How We Use Your Information and Our Lawful Basis for Processing
We use your personal information for the following purposes, relying on the specified lawful bases:
To provide and manage our Services:
Scheduling appointments.
Conducting holistic therapy sessions tailored to your needs.
Maintaining treatment records.
Lawful Basis: Contract (to fulfil our agreement to provide you with therapy services), Legitimate Interests (to provide high-quality, personalised care), and, for health data, your Explicit Consent and because processing is necessary for the purposes of health care (as a healthcare practitioner).
To communicate with you:
Responding to your enquiries and requests.
Sending appointment reminders and important service updates.
Lawful Basis: Contract, Legitimate Interests (to manage our client relationships effectively).
For legal and regulatory compliance:
Complying with our legal obligations (e.g., for insurance purposes, maintaining records as required by professional bodies or law).
Lawful Basis: Legal Obligation.
For marketing (with your consent):
Sending you information about our services, special offers, or newsletters, if you have opted-in to receive such communications.
Lawful Basis: Consent (you can withdraw your consent at any time).
To improve our Website and Services:
Analysing website usage to improve its functionality and user experience.
Lawful Basis: Legitimate Interests (to improve our offerings).
5. Data Sharing and Disclosure
We are committed to maintaining the confidentiality of your personal information. We will not share your personal information with third parties except in the following circumstances:
With your Explicit Consent: We will only share your information with other healthcare practitioners or third parties if you give us your explicit permission to do so.
Legal Requirements: If required by law, such as by a court order, or to comply with legal or regulatory obligations (e.g., reporting to relevant authorities if there is a risk of harm to yourself or others).
Insurance Providers: In the event of a claim, we may need to share information with our insurers, but only the necessary information and under strict confidentiality.
Service Providers: We may use third-party service providers for tasks such as website hosting or email services. These providers will only have access to the personal information necessary to perform their functions and are obligated to protect your data.
Business Transfers: In the event of a sale, merger, or transfer of our business, your personal information may be transferred as part of that transaction, under a duty of confidentiality.
We will never sell your personal information to third parties.
6. Data Security
We have implemented appropriate technical and organisational measures to protect your personal information from unauthorised access, use, disclosure, alteration, or destruction. These measures include:
Storing paper records securely in locked filing cabinets.
Using password protection and encryption for electronic records where appropriate.
Restricting access to your personal information to only those who need to know.
Regularly reviewing our data security practices.
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.
7. Data Retention
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
For adult clients, treatment records are typically kept for 7 years following the last occasion on which treatment was given.
For clients under the age of 18, records are kept until their 25th birthday (or 26th if they were 17 when treatment ended).
Information provided for marketing purposes will be kept until you withdraw your consent.
Once the retention period has expired, your personal information will be securely disposed of.
8. Your Data Protection Rights
Under UK data protection law, you have the following rights regarding your personal information:
The right to be informed: To be informed about how we collect and use your personal data.
The right of access: To request a copy of the personal information we hold about you.
The right to rectification: To request that we correct any inaccurate or incomplete personal information.
The right to erasure (the “right to be forgotten”): To request that we delete your personal information, under certain conditions.
The right to restrict processing: To request that we limit the processing of your personal information, under certain conditions.
The right to data portability: To request that we transfer your personal information to another organisation, or directly to you, under certain conditions.
The right to object: To object to the processing of your personal information, under certain conditions (e.g., for direct marketing).
Rights in relation to automated decision making and profiling: We do not currently conduct automated decision making or profiling.
To exercise any of these rights, please contact us using the contact details provided in Section 1. We will respond to your request within one month, unless the request is complex or numerous, in which case we may extend this period.
9. Cookie Policy
Our Website may use cookies to enhance your Browse experience. Cookies are small text files placed on your device to collect standard internet log information and visitor behaviour information.
How we use cookies: We may use cookies to understand how our Website is used, to remember your preferences, and to improve your overall experience.
Types of cookies we may use:
Strictly Necessary Cookies: Essential for the operation of our Website.
Analytical/Performance Cookies: Allow us to recognise and count the number of visitors and see how visitors move around our Website.
Functionality Cookies: Used to recognise you when you return to our Website and remember your preferences.
Managing Cookies: You can set your browser not to accept cookies, and the website allaboutcookies.org tells you how to remove cookies from your browser. However, in a few cases, some of our Website features may not function as a result.
10. Links to Other Websites
Our Website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this Privacy Policy. You should exercise caution and look at the privacy statement applicable to the website in question.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. We encourage you to review this Privacy Policy periodically.
12. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us using the contact details in Section 1.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. Their contact details are:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
13. Contact Us
If you have any questions about this Privacy Policy or our data protection practices, please contact us:
Email: info@holistictherapyliverpool.com
Phone: 07821978062
Address: Hightor Road, Woolton, Liverpool, L25 6DL