Privacy Policy

Last updated: October 2026

1. Introduction

Phoenix Holistic Health is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website or services.

This policy applies to visitors of the website and clients who use our holistic health and therapy services.

This website complies with the UK GDPR and the EU General Data Protection Regulation (GDPR) where applicable.

2. Data Controller

The data controller responsible for your personal data is:

Nora Hyland
Phoenix Holistic Health
Maidstone, United Kingdom

Email: info@phoenixholistichealth.co.uk
Phone: +44 7877 829378
Website: https://phoenixholistichealth.co.uk/

3. Personal Data We Collect

We may collect and process the following personal information when you contact us, book an appointment, or receive therapy services.

Personal identification information

• Name
• Email address
• Telephone number
• Address (if provided)

Health and treatment information

Where relevant for your therapy or treatment:

• Age or date of birth
• Gender or preferred identity
• Medical conditions
• Prescribed medications
• Lifestyle information
• Stress levels
• Treatment plans and assessments
• Session notes

This information is only collected when necessary to provide safe and appropriate therapy services.

Information provided via forms

Information you submit through the contact form, the booking system, or client intake or assessment forms may include health or lifestyle information relevant to your treatment.

4. How We Collect Your Data

We collect personal data through:

• The contact form on the website
• The online booking form
• Client assessment forms
• Email communication
• Telephone conversations
• In-person consultations

The website’s contact and booking forms are our own system. Submissions are stored securely on our web server and sent to us by email; they are not passed to any third-party form or booking service.

5. How We Use Your Data

Your personal data may be used for the following purposes:

• To respond to enquiries
• To manage appointments and bookings, including confirmation and reminder emails
• To provide therapy and holistic health services
• To maintain treatment records
• To communicate about appointments or services
• To process payments
• To comply with legal obligations

We will never sell or rent your personal information.

6. Legal Basis for Processing

We process your personal data under one or more of the following legal bases:

• Consent – when you voluntarily provide information
• Contract – when processing is necessary to provide services you requested
• Legal obligation – where we must comply with applicable laws
• Legitimate interests – to operate and improve our services

Health-related data is processed only when necessary for providing therapy services and with your consent.

7. Payments

When you book online, a deposit is paid by card through Stripe, an online payment processor. The remaining balance can be paid at your session, by bank transfer or in cash.

Card payments are entered on Stripe’s secure checkout page and handled by Stripe under its own privacy policy. We never see or store your full card details.

8. Third-Party Services

Some services used on this website may process limited personal data:

• Stripe – payment processing
• Hetzner Online GmbH (Germany) – hosting of the website, booking system and its database
• Our email provider – sending booking confirmations, reminders and replies to enquiries
• Google Maps – location maps, only loaded if you allow it (see our Cookie Policy)

These providers process data only as necessary to provide their services and operate under their own privacy policies.

9. Website Data and Cookies

When you visit this website, our web server automatically records limited technical information for security and to keep the site running, including your IP address, browser type, the pages requested and the time and date of access.

We do not use analytics or advertising cookies. The cookies we use, and how to manage your choices, are described in our Cookie Policy. You can change your cookie preferences at any time via “Cookie settings” at the bottom of every page.

10. Data Storage and Security

Personal information may be stored using:

• secure email systems
• password-protected digital records
• paper records stored securely
• our secure booking and form system, accessible only to the practitioner

Reasonable technical and organisational measures are taken to protect personal data from loss, misuse or unauthorised access.

11. Data Retention

Client records may be retained for up to seven (7) years after the end of the professional relationship.

This is to maintain appropriate treatment records and comply with professional and legal obligations.

After this period, records will be securely destroyed or deleted.

12. Sharing Your Data

Your personal data will not be shared with third parties except in the following circumstances:

• when required by law
• if necessary to protect your health or safety
• if you have provided consent
• when required for essential service providers (e.g. hosting, email or payment processing)

In emergency situations, and with your consent where possible, information may be shared with a medical professional.

13. International Data Transfers

Our website and booking system are hosted in the European Union (Germany). Some service providers, such as Stripe or Google, may store or process data outside the United Kingdom or European Economic Area (EEA).

In such cases, appropriate safeguards are used to ensure data protection standards equivalent to GDPR.

14. Your Rights

Under data protection law, you have the right to:

• be informed about how your data is used
• access your personal data
• request correction of inaccurate information
• request deletion of your personal data
• restrict processing
• withdraw consent at any time
• request data portability where applicable

To exercise any of these rights, please contact info@phoenixholistichealth.co.uk.

15. Right to Lodge a Complaint

If you believe your data has been processed improperly, you have the right to lodge a complaint with the relevant supervisory authority.

In the UK, this is the Information Commissioner’s Office (ICO): https://ico.org.uk/

16. Changes to This Privacy Policy

This privacy policy may be updated from time to time to reflect legal or operational changes.

The most current version will always be available on this page.