Book Your Appointment

Holistic TLC: Privacy Policy

Effective Date: 12th March 2026

1.1 Introduction

Holistic TLC (“we”, “our”, or “us”), based in Romsley, West Midlands, is committed to protecting the privacy and security of your personal data. This policy outlines how we collect, process, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, the Data Controller is Holistic TLC LTD.

1.2 Data We Collect

As a provider of professional massage therapies, we collect several types of data to ensure your safety and provide effective treatment:

  • Identity Data: Name, date of birth, and gender.

  • Contact Data: Email address, telephone number, and home address.

  • Health Data (Special Category): Information regarding your medical history, current health status, surgeries, symptoms, allergies, and lifestyle. This is critical for clinical safety, ensuring treatments are appropriate for your specific needs, and for insurance purposes.

  • Financial Data: Payment details are processed securely via our third-party payment provider, Stripe. We do not store full credit or debit card information on our servers; all payment data is encrypted and handled by Stripe in accordance with their security standards.

1.3 Legal Basis for Processing

We process your data based on the following:

  1. Contractual Necessity: To manage your bookings and provide the services you have purchased.

  2. Legal Obligation: To comply with tax laws and health and safety regulations.

  3. Consent: By completing a consultation form or booking a treatment, you provide explicit consent for us to process your health data for treatment purposes.

1.4 Data Retention

  • Health and Treatment Records: Under UK insurance and professional guidelines for therapy practitioners, we are required to retain adult health records for 8 years following your last treatment.

  • Financial Records: Retained for 6 years to comply with HMRC tax requirements.

1.5 Your Rights

You have the right to access your data, request corrections, or object to marketing. Please note that the “Right to Erasure” (the right to be forgotten) does not override our legal and insurance obligations to maintain clinical treatment records.

1.6 Contact Information

For any questions regarding this policy or your data, please contact us using the details below:

Email: [email protected]

Phone: +44 7367 007585