Privacy Policy for Sue Harding Craniosacral Therapy

Last Updated: August 15, 2025

Sue Harding Craniosacral Therapy is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website [insert website URL], use our services, or interact with us. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process the following types of personal information:

Personal Details: Name, email address, phone number, and postal address when you book appointments, contact us, or sign up for newsletters.

Health Information: Information you provide about your health or medical history during consultations or therapy sessions, which is necessary for providing craniosacral therapy services.

Website Usage Data: Information about how you use our website, such as IP address, browser type, pages visited, and time spent on the site, collected via cookies or similar technologies.

Payment Information: Billing details if you make payments for services (processed securely via third-party payment providers).

2. How We Collect Information

We collect information:

Directly from you when you fill out forms, book appointments, or communicate with us via email, phone, or in person.

Automatically through cookies and analytics tools when you visit our website (see Section 7 for details).

During therapy sessions when you share health-related information necessary for treatment.

3. How We Use Your Information

We use your personal information to:

Provide craniosacral therapy services, including scheduling appointments and tailoring treatments to your needs.

Communicate with you about appointments, updates, or promotional offers (with your consent).

Process payments securely through trusted third-party providers.

Improve our website and services through analytics.

Comply with legal obligations, such as record-keeping or reporting requirements.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds under the UK GDPR:

Consent: For marketing communications or certain cookies.

Contract: To provide therapy services or process payments.

Legitimate Interests: For website analytics or improving our services.

Legal Obligation: To comply with applicable laws or regulations.

Vital Interests: For processing health data necessary to protect your health during therapy.

5. Sharing Your Information

We do not sell or share your personal information with third parties except:

With trusted service providers (e.g., payment processors, website hosting, or email services) who act on our behalf and are contractually obligated to protect your data.

When required by law, such as to comply with a court order or regulatory requirement.

With your explicit consent, for example, if referring you to another practitioner.

6. Data Storage and Security

Your data is stored securely on encrypted systems compliant with UK GDPR standards.

Health records are kept in a secure, password-protected database or locked physical storage.

We retain personal data only for as long as necessary:

Health records: 7 years after your last appointment, as required by professional standards.

Contact details: Until you request deletion or unsubscribe from communications.

Website analytics: Up to 2 years.

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or theft.

7. Cookies and Tracking

Our website uses cookies to enhance your experience and analyse site usage. Cookies may include:

Essential Cookies: Necessary for the website to function.

Analytics Cookies: To understand how visitors interact with our site.

Marketing Cookies: To deliver personalized content (only with your consent).

You can manage cookie preferences via your browser settings or our website’s cookie consent tool.

8. Your Rights

Under the UK GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you.

Rectification: Correct inaccurate or incomplete data.

Erasure: Request deletion of your data, subject to legal retention requirements.

Restriction: Limit how we process your data in certain circumstances.

Data Portability: Receive your data in a structured, machine-readable format.

Object: Object to processing based on legitimate interests or for marketing purposes.

Withdraw Consent: Withdraw consent at any time, where applicable.

To exercise these rights, contact us at [insert contact email or phone number]. We will respond within one month, as required by law.

9. International Data Transfers

If your data is transferred outside the UK (e.g., to cloud service providers), we ensure it is protected by UK GDPR-compliant safeguards, such as Standard Contractual Clauses or adequacy decisions.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before sharing personal information.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on our website with the revised date.

12. Contact Us

If you have questions, concerns, or wish to exercise your data rights, please contact:

Sue Harding Craniosacral Therapy: 07726 503978

If you are dissatisfied with our response, you can lodge a complaint with the Information Commissioner’s Office (ICO):

ICO Website: www.ico.org.uk

ICO Helpline: 0303 123 1113