1. Introduction
This Privacy Policy explains how Nurtured Soles by Alison Steyn AoR (“I”, “me”, “my”) collects, uses, stores and protects your personal information. I am committed to maintaining the privacy and confidentiality of all clients and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By booking an appointment or completing a consultation form, you agree to the terms of this Privacy Policy.
2. What Information I Collect
I collect the following types of personal data:
a. Personal Identification Information
- Name
- Address
- Date of birth
- Email address
- Telephone number
- Emergency contact (optional)
b. Health and Medical Information (Special Category Data)
- Medical history
- Current health conditions
- Medications
- Allergies
- Treatment notes
- Lifestyle information relevant to treatment
c. Appointment and Payment Information
- Booking history
- Payment records (no card details are stored)
d. Website or Digital Contact (if applicable)
- Enquiry forms
- Email correspondence
I do not collect or store financial card details, nor do I use automated decision‑making or profiling.
3. Lawful Basis for Processing Your Data
Under UK GDPR, I rely on the following lawful bases:
a. Legitimate Interests
- To provide safe and effective reflexology treatments and manage appointments.
b. Explicit Consent
- For processing special category data (health information). You may withdraw consent at any time.
c. Legal Obligation
- To maintain accurate records for insurance, professional standards and tax purposes.
4. How Your Information Is Used
Your information is used to:
- Assess suitability for treatment
- Deliver safe and personalised reflexology sessions
- Maintain accurate treatment records
- Contact you about appointments or relevant updates
- Meet insurance, professional and legal requirements
- Respond to enquiries or complaints
Your data is never sold, shared or used for marketing without your explicit consent.
5. How Your Information Is Stored
I take data security seriously and use appropriate measures to protect your information.
Digital Records
- Stored on password‑protected devices
- Encrypted where possible
- Access restricted to the therapist only
Paper Records
- Stored in a locked cabinet
- Accessible only to the therapist
6. How Long Your Data Is Kept
- Adult client records: kept for 7 years after your last treatment
- Clients under 18: kept until age 25
- Financial records: kept for 6 years for HMRC compliance
- Enquiry emails: deleted after 12 months if no booking is made
After the retention period, records are securely destroyed.
7. Sharing Your Information
Your information is confidential and will only be shared if:
- You provide written consent
- It is required by law (e.g., safeguarding concerns, court orders)
- It is necessary for insurance or professional compliance
I do not share your data with third parties for marketing or commercial purposes.
8. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion (where legally permissible)
- Withdraw consent at any time
- Restrict or object to processing
- Request transfer of your data (data portability)
- To exercise any of these rights, contact me using the details above.
9. Complaints
If you have concerns about how your data is handled, please contact me first so I can address the issue.
You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk
10. Updates to This Privacy Policy
This policy may be updated periodically to reflect changes in legislation or practice operations. The most recent version will always be available on request.
11. Contact Information
For questions about this Privacy Policy or your personal data, please contact:
Nurtured Soles by Alison Steyn AoR