1. Introduction
Holistic Health Practitioner is committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Personal Data We Collect
We may collect the following types of personal information:
- Identity data: Full name, date of birth, gender
- Contact data: Address, phone number, email address
- Health and wellbeing data: Information you provide during consultations or treatments that may include medical history, emotional concerns, lifestyle information, or other sensitive data relevant to your care
- Appointment data: Records of your sessions, including session notes and treatment history
- Payment data: Details related to payments (processed securely via [e.g. Stripe, PayPal, bank transfer], but we do not store your card details)
3. How We Collect Your Data
We collect data through:
- Intake forms (paper or digital)
- Phone, email, or online communication
- In-person sessions
- Our website (e.g. contact forms, cookies – if applicable)
4. Why We Collect Your Data (Legal Basis)
We collect your data to:
- Provide holistic healing services tailored to your needs
- Maintain accurate records of your treatment
- Communicate with you about appointments or relevant updates
- Comply with legal or professional obligations
We rely on the following legal bases for processing your data:
- Consent – You have given clear consent for us to process your personal data for a specific purpose
- Contract – Processing is necessary for a contract we have with you
- Legal obligation – To comply with relevant laws (e.g. tax or health and safety requirements)
- Legitimate interest – For running and improving our business
For special category data (such as health information), we obtain your explicit consent.
5. How We Store and Protect Your Data
We take data security seriously and use appropriate technical and organisational measures to protect your information, including: