Privacy Policy
Holistic Healing
Data Controller: Nikki Carr MAR, AoR Registered
Website: www.holistichealing.rocks
Email: nikki@holistichealing.rocks
Telephone: 07775901137
Privacy Notice
At Holistic Healing, I am committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information I collect, why I collect it, how I use it, how long I keep it, and your rights under UK data protection legislation.
When you book an appointment or use my services, you will be asked to confirm that you have read and understood this Privacy Policy.
Why I Collect Your Information
To provide safe, effective and professional holistic treatments and wellbeing services, I need to collect and retain certain personal information about you.
This enables me to:
-
assess whether treatment is suitable for you
-
provide safe and appropriate treatments
-
maintain accurate treatment records
-
contact you regarding appointments
-
comply with legal and professional obligations
-
respond appropriately should a medical emergency arise.
The Information I Collect
Depending on the services you receive, I may collect:
-
Your name, address, telephone number and email address
-
Date of birth
-
Emergency contact details (where appropriate)
-
Medical history
-
Current medications
-
Relevant lifestyle information
-
Treatment records and consultation notes
-
GP or healthcare professional details (only where relevant and with your consent)
-
Payment information (where applicable)
I only collect information that is relevant to the services I provide.
Special Category Data
As I provide healthcare-related therapies, I collect health information which is classed as Special Category Data under UK data protection law.
This information is treated as strictly confidential and is only used for providing safe and appropriate treatment.
Lawful Basis for Processing
The lawful bases for processing your personal information are:
-
Legitimate Interests – to enable me to provide professional treatments and maintain accurate records.
-
Legal Obligation – where I am required to retain records for insurance, regulatory or legal purposes.
-
Explicit Consent – where required, for example if I need to contact another healthcare professional on your behalf.
Professional Standards
I am a member of the Association of Reflexologists (AoR) and work in accordance with its Code of Practice and Ethics.
Where applicable, I also comply with the standards required by the Complementary & Natural Healthcare Council (CNHC).
How Your Information Is Used
Your information will only be used for purposes connected with your care, including:
-
providing treatments
-
planning future treatments
-
maintaining treatment records
-
arranging appointments
-
sending appointment reminders
-
responding to your enquiries
-
complying with legal or insurance requirements.
Your information will never be sold or shared for marketing purposes.
I will not share your personal information with anyone else unless:
-
you have given your explicit consent;
-
it is necessary to protect you or another person;
-
I am legally required to do so.
Marketing
From time to time I may send newsletters, wellbeing information, special offers or details of new services.
I will only do this where you have given your consent.
You may unsubscribe at any time.
How Long I Keep Your Information
Your records are retained in accordance with professional, insurance and legal requirements.
Generally, records are kept for:
-
Eight years after your last treatment.
-
Children's records are retained until the age of 25 (or 26 if treatment ended when aged 17).
-
Longer where required for legal proceedings or insurance claims.
Once the retention period has expired, your information will be securely destroyed.
Keeping Your Information Secure
I take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse or disclosure.
These measures include secure electronic systems, password protection, encrypted devices where appropriate and secure storage of paper records.
International Transfers
Your personal information will normally be stored within the United Kingdom.
If it ever becomes necessary to transfer information outside the UK, appropriate safeguards will be put in place to protect your data.
Your Rights
Under UK data protection law you have the right to:
-
be informed about how your information is used
-
access the personal information I hold about you
-
request correction of inaccurate information
-
request erasure of your information (where legally possible)
-
request restriction of processing
-
object to certain types of processing
-
request a copy of your electronic information (where applicable)
-
withdraw consent where processing relies on consent.
Some of these rights may be limited where I have a legal or professional obligation to retain treatment records.
Further information about your rights can be found on the Information Commissioner's Office website:
https://ico.org.uk
Raising a Concern or Making a Complaint
If you have any questions or concerns about how I collect, use, store or protect your personal information, I encourage you to contact me first so that I have the opportunity to investigate and resolve your concerns promptly.
My Complaints Procedure can be found here:
If, after I have investigated your concern, you remain dissatisfied with my response, you have the right to complain to the Information Commissioner's Office (ICO).
Information about making a complaint can be found at:
https://ico.org.uk/make-a-complaint/
Please Note
If you choose not to provide the information necessary for safe treatment, I may be unable to provide treatment.
Although you have the right to request that your personal information is erased, I may be legally required to retain certain treatment records for the retention periods stated above.
Where records are transferred between secure computer systems or practice management software, appropriate security measures will always be in place to protect your information.
Last updated: June 2026