Privacy Policy
Therapy by Hayley
Last updated: 24 October 2026
1. Introduction
At Therapy by Hayley, your privacy, confidentiality and trust are extremely important to me.
As an independent massage and holistic therapist, I understand that clients may share personal and sometimes sensitive information about their health, wellbeing and individual circumstances.
I am committed to treating this information with care, respect and confidentiality, and to handling personal data in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains what information I collect, why I collect it, how it is used and protected, and your rights regarding your personal information.
2. Who Is Responsible for Your Information?
Therapy by Hayley is operated by Hayley Parmenter, a self-employed massage and holistic therapist.
For data protection purposes, I am the data controller responsible for deciding how and why your personal information is used.
Business: Therapy by Hayley
Website: www.therapybyhayley.co.uk
Location: Wisbech area, United Kingdom
Privacy enquiries: parmenter.hayley@outlook.com
3. What Personal Information Do I Collect?
Depending on how you interact with my business, I may collect the following information:
Personal and contact details
Full name
Telephone number
Email address
Address, where required for mobile treatments or administration
Date of birth, where necessary
Health and treatment information
Medical history and relevant health conditions
Allergies, injuries, medications and contraindications
Consultation and consent forms
Treatment preferences and individual requirements
Treatment records, observations and progress notes
Relevant information you voluntarily share about your physical or emotional wellbeing
Booking and payment information
Appointment dates and treatment history
Booking changes and cancellations
Deposits, payments and transaction records
Gift voucher purchases and redemptions
Communications
Emails, messages and enquiries
Relevant correspondence about appointments and treatments
Feedback, reviews and testimonials
Website information
Depending on the website services and cookies in use, technical information may also be collected, such as IP addresses, browser information and website usage data.
I only seek to collect information that is relevant and reasonably necessary for the purposes explained in this policy.
4. Why Do I Collect Your Information?
Your personal information may be used to:
Respond to enquiries and communicate with you
Arrange, manage and confirm appointments
Assess whether a treatment is appropriate and safe
Adapt treatments to your individual needs
Maintain accurate consultation and treatment records
Provide appropriate aftercare information
Process payments, deposits and gift vouchers
Meet legal, tax, insurance and professional obligations
Respond to complaints or resolve disputes
Improve the services and client experience offered by Therapy by Hayley
Send promotional communications where legally permitted and in accordance with your marketing preferences
Health information is collected for the purpose of understanding your needs, identifying potential contraindications and supporting appropriate treatment decisions.
5. Lawful Basis for Processing Personal Information
Under UK GDPR, personal information must only be processed where there is an appropriate lawful basis.
Depending on the circumstances, Therapy by Hayley may rely on:
Contract: To arrange and provide requested treatments, manage appointments and process related payments.
Legal obligation: To maintain records or provide information where required by applicable law.
Legitimate interests: To respond to enquiries, manage the business, maintain appropriate records, prevent misuse and protect the business in the event of complaints or disputes, where these interests are not overridden by your rights.
Consent: Where your permission is required, such as for certain marketing communications, optional photographs or testimonials.
Special category health information
Information about your health receives additional legal protection.
Where explicit consent is the appropriate condition under Article 9 of UK GDPR, I will request this separately and clearly explain how the information will be used.
The relevant Article 6 lawful basis and Article 9 condition will be identified before health information is processed.
6. Consultation Forms and Treatment Records
Consultation forms and treatment records are important for providing appropriate and responsible massage and holistic treatments.
These records may contain information about your medical history, treatment preferences, contraindications and responses to previous treatments.
Information will only be collected where it is relevant to treatment suitability, safety, continuity of care or another legitimate purpose.
Client records are treated confidentially and are not made publicly available.
Clients are encouraged to notify me of relevant changes to their health or circumstances before attending appointments.
7. How Your Information Is Stored and Protected
I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.
Depending on the type of information, records may be held electronically through booking or administration systems, or securely in paper form.
Access to confidential treatment information is restricted to those with a legitimate need to access it.
Although reasonable precautions are taken to protect personal information, no electronic system or method of transmission can be guaranteed to be completely secure.
8. Third-Party Services and Data Sharing
Therapy by Hayley may use trusted third-party services to support bookings, payments, website operation and business administration.
These may include:
Fresha, for appointment bookings and client management
Website hosting and form providers
Payment processing services
Email and communication services
Accounting and administrative services
Professional advisers, insurers or legal representatives where necessary
Personal information will only be shared where there is an appropriate lawful basis and a legitimate reason to do so.
Information may also be disclosed where required by law.
I do not sell client personal information to third parties.
Third-party providers may operate under their own privacy policies and data protection arrangements.
9. Global Reiki Healing Nominations
Visitors may use the Global Reiki Healing page to nominate someone to receive distant Reiki Healing.
Information submitted may include the nominated person's name, relevant nomination details and contact information provided by the person submitting the form.
Only information reasonably necessary to manage the nomination should be submitted.
Please avoid including detailed medical information or other sensitive personal details about another person unless this has been specifically requested and an appropriate lawful basis has been established.
Nomination information will be used only for administering the Reiki nomination and any related communications, unless another purpose has been clearly explained.
Any charitable donations are processed through the relevant donation service, which may have its own privacy policy.
10. Marketing Communications
From time to time, Therapy by Hayley may share information about treatments, special offers, new services and business updates.
Marketing communications will only be sent where permitted by applicable law.
Where consent is required, it will be requested appropriately.
You can ask to stop receiving marketing communications at any time.
Choosing not to receive marketing will not affect your ability to book or receive treatments.
11. Photographs, Reviews and Testimonials
Occasionally, clients may wish to provide reviews, testimonials or photographs relating to their treatment experiences.
Identifiable photographs, testimonials or personal stories will only be published where there is an appropriate lawful basis and any required permission has been obtained.
Where consent is relied upon, it may be withdrawn at any time.
Withdrawal will not affect processing already carried out lawfully, but reasonable steps will be taken to stop further use where required.
12. How Long Is Personal Information Kept?
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including relevant legal, accounting, insurance and professional requirements.
Different types of information may have different retention periods.
For example:
Treatment and consultation records are retained according to an established records retention schedule, taking account of applicable legal, professional and insurance requirements.
Financial and transaction records are retained for the applicable tax and accounting periods.
Enquiries and correspondence are retained for as long as necessary to respond and manage any related matters.
Marketing information is retained while there is an appropriate lawful basis for its use, subject to periodic review.
Reiki nomination information is retained only for the period necessary to manage the nomination and any relevant administrative obligations.
When personal information is no longer required, it will be securely deleted, destroyed or anonymised as appropriate.
13. International Data Transfers
Some third-party technology providers may store or process personal information outside the United Kingdom.
Where international transfers take place, appropriate safeguards will be used where required by data protection law.
Further information about relevant transfers and safeguards can be requested using the contact details in this policy.
14. Your Data Protection Rights
Under UK data protection law, you may have the right to:
Request access to personal information held about you
Ask for inaccurate information to be corrected
Request deletion of information in certain circumstances
Request restrictions on how your information is used
Object to certain types of processing
Request transfer of certain information to another provider
Withdraw consent where processing is based on consent
Receive information about qualifying automated decision-making, where applicable
These rights are subject to applicable legal conditions and exceptions.
If you would like to exercise any of your rights, please contact Therapy by Hayley using the contact details provided.
Requests will be handled in accordance with applicable data protection requirements.
15. Complaints and Concerns
If you have any concerns about how your personal information has been handled, please contact me in the first instance so that I can investigate and respond appropriately.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
16. Changes to This Privacy Policy
This Privacy Policy will be reviewed periodically and updated where necessary to reflect changes in legislation, business practices or the services offered.
The most recent version will be available on the Therapy by Hayley website.
Where changes materially affect how personal information is used, appropriate steps will be taken to inform affected individuals.
17. Contact
If you have any questions about this Privacy Policy or how your personal information is handled, please contact:
Hayley Parmenter
Therapy by Hayley
Website: www.therapybyhayley.co.uk
Email: parmenter.hayley@outlook.com
Thank you for placing your trust in Therapy by Hayley. Your privacy and confidentiality will always be treated with care and respect.