Privacy Policy

Last updated: March 2026

1. Introduction

Phoenix Holistic Health is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website or services.

This policy applies to visitors of the website and clients who use our holistic health and therapy services.

This website complies with the UK GDPR and the EU General Data Protection Regulation (GDPR) where applicable.


2. Data Controller

The data controller responsible for your personal data is:

Nora Hylad
Phoenix Holistic Health
Maidstone, United Kingdom

Email: info@phoenixholistichealth.co.uk
Phone: +44 7877 829378
Website: https://phoenixholistichealth.co.uk/


3. Personal Data We Collect

We may collect and process the following personal information when you contact us, book an appointment, or receive therapy services.

Personal Identification Information

  • Name

  • Email address

  • Telephone number

  • Address (if provided)

Health and Treatment Information

Where relevant for your therapy or treatment:

  • Age or date of birth

  • Gender or preferred identity

  • Medical conditions

  • Prescribed medications

  • Lifestyle information

  • Stress levels

  • Treatment plans and assessments

  • Session notes

This information is only collected when necessary to provide safe and appropriate therapy services.

Information Provided via Forms

Information you submit through:

  • the contact form

  • the booking system

  • client intake or assessment forms

may include health or lifestyle information relevant to your treatment.


4. How We Collect Your Data

We collect personal data through:

  • Contact forms on the website

  • Appointment booking forms

  • Client assessment forms

  • Email communication

  • Telephone conversations

  • In-person consultations

Website forms are processed using Fluent Forms and the booking system Amelia.


5. How We Use Your Data

Your personal data may be used for the following purposes:

  • To respond to enquiries

  • To manage appointments and bookings

  • To provide therapy and holistic health services

  • To maintain treatment records

  • To communicate about appointments or services

  • To process payments

  • To comply with legal obligations

We will never sell or rent your personal information.


6. Legal Basis for Processing

We process your personal data under one or more of the following legal bases:

  • Consent – when you voluntarily provide information

  • Contract – when processing is necessary to provide services you requested

  • Legal obligation – where we must comply with applicable laws

  • Legitimate interests – to operate and improve our services

Health-related data is processed only when necessary for providing therapy services and with your consent.


7. Payments

Payments may be processed using the following methods:

  • Stripe (online payment processor)

  • Bank transfer

  • Cash

When payments are processed through Stripe, payment data is handled securely by Stripe and is subject to their privacy policies.

We do not store full credit or debit card details on our website.


8. Third-Party Services

Some services used on this website may process limited personal data.

These include:

  • Amelia – appointment booking system

  • Fluent Forms – website contact and intake forms

  • Stripe – payment processing

  • LW Cookie Plugin – cookie management

  • Google Maps – location display

  • YouTube (if embedded content is used)

These providers process data only as necessary to provide their services and operate under their own privacy policies.


9. Website Data and Cookies

When you visit this website, certain technical information may automatically be collected, including:

  • IP address

  • browser type

  • device information

  • pages visited

  • time and date of access

Cookies may be used to ensure the proper functioning of the website.

Cookie preferences can be managed using the cookie banner powered by the LW Cookie plugin.


10. Data Storage and Security

Personal information may be stored using:

  • secure email systems

  • password-protected digital records

  • paper records stored securely

  • secure booking and form systems

Reasonable technical and organisational measures are taken to protect personal data from loss, misuse or unauthorised access.


11. Data Retention

Client records may be retained for up to seven (7) years after the end of the professional relationship.

This is to maintain appropriate treatment records and comply with professional and legal obligations.

After this period, records will be securely destroyed or deleted.


12. Sharing Your Data

Your personal data will not be shared with third parties except in the following circumstances:

  • when required by law

  • if necessary to protect your health or safety

  • if you have provided consent

  • when required for essential service providers (e.g., booking or payment systems)

In emergency situations, and with your consent where possible, information may be shared with a medical professional.


13. International Data Transfers

Some service providers may store or process data outside the United Kingdom or European Economic Area (EEA).

In such cases, appropriate safeguards are used to ensure data protection standards equivalent to GDPR.


14. Your Rights

Under data protection law, you have the right to:

  • be informed about how your data is used

  • access your personal data

  • request correction of inaccurate information

  • request deletion of your personal data

  • restrict processing

  • withdraw consent at any time

  • request data portability where applicable

To exercise any of these rights, please contact:

info@phoenixholistichealth.co.uk


15. Right to Lodge a Complaint

If you believe your data has been processed improperly, you have the right to lodge a complaint with the relevant supervisory authority.

In the UK, this is:

Information Commissioner’s Office (ICO)
https://ico.org.uk/


16. Changes to This Privacy Policy

This privacy policy may be updated from time to time to reflect legal or operational changes.

The most current version will always be available on this page.