Privacy Policy

Last Updated: May 2026

1. Important Notice

Your privacy is extremely important to me. This Privacy Policy explains how I collect, use, store, protect and process the personal information you provide when you:

  • Visit my website

  • Contact me through my website or social media channels

  • Book treatments or services

  • Attend appointments

  • Join my mailing list

  • Interact with me online or in person

I am committed to protecting your privacy and handling your personal information responsibly and in accordance with UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

I only collect information necessary to provide my services safely and effectively, communicate with you appropriately, meet legal obligations, and improve my services.

I may update this Privacy Policy from time to time. Changes will be published on this page and the date above updated accordingly. I encourage you to review this policy periodically.

2. Contact Details

This website is operated by:

Vicky Rawcliffe MA, BA(Hons), CRM5, MAR, MFHT
Trading as VICKY RAWCLIFFE

I am the Data Controller responsible for the personal information you provide.

I am registered with the Information Commissioner's Office (ICO) and comply with UK data protection requirements.

For any questions regarding your privacy or this policy, please contact:

Email: hello@vickyrawcliffe.com

Address:
VICKY RAWCLIFFE
2 Coxley Dell
Horbury
West Yorkshire
WF4 5LF

Telephone: 07917 718858

You may verify my registration with the ICO here:

ICO Register

3. What Personal Information I Collect

Personal information means any information capable of identifying you.

Depending upon your interaction with me, I may collect:

Enquiries through my website

When you contact me through my website, I collect:

  • Name

  • Email address

  • Telephone number (if provided)

  • Any information included within your message

I collect this information to respond to your enquiry.

If you choose not to proceed with a booking, your information will be securely deleted within a reasonable timeframe.

Enquiries via social media

When contacting me via Instagram, Facebook, Messenger or other social platforms, I may collect:

  • Name

  • Username

  • Telephone number

  • Any information voluntarily shared

This information is used solely to respond to your enquiry.

Treatment consultations and appointments

Prior to treatment, I collect personal and health information required to safely provide treatments and create a personalised treatment plan.

This may include:

  • Name

  • Address

  • Date of birth

  • Email address

  • Telephone number

  • Emergency contact details

  • Gender

  • Employment information

  • Lifestyle information

  • Medical history

  • Medications

  • Health conditions

  • Relevant treatment notes

At each appointment additional consultation notes and treatment records may be added.

Health information is classed as Special Category Data under UK GDPR and receives additional protection.

I collect and process this information only where necessary and with your explicit consent.

4. Lawful Basis for Processing Your Information

Under UK GDPR, I rely upon the following lawful bases:

Contract

To provide appointments, treatments and services requested by you.

Legitimate Interests

To respond to enquiries and manage my business effectively.

Legal Obligation

To retain records where required for insurance, taxation or legal purposes.

Consent

For:

  • Processing health information

  • Sending marketing communications

  • Email newsletters

  • Promotional information

You can withdraw consent at any time.

5. How Your Information Is Used

I use your information to:

  • Provide treatments safely

  • Create personalised treatment plans

  • Contact you regarding appointments

  • Maintain treatment records

  • Respond to enquiries

  • Improve services

  • Send marketing communications where consent has been given

  • Meet legal obligations

I will never sell your personal information.

I will only share information:

  • Where legally required

  • With service providers necessary to operate my business

  • With your explicit consent

6. Third Party Services

I use trusted third-party providers including:

Timely

My booking system is provided by Timely.

Timely securely stores appointment and consultation information and complies with GDPR requirements.

Timely Privacy Policy

Squarespace

My website is hosted by Squarespace.

Squarespace Privacy Policy

Google Analytics

I use Google Analytics and Squarespace Analytics to understand website usage and improve user experience.

This may collect anonymous information including:

  • Browser type

  • Device information

  • Pages visited

  • Time spent on website

This information does not personally identify you.

7. Cookies

My website uses cookies to improve user experience and gather website performance information.

When visiting my website you may be asked to consent to cookies.

You can disable cookies within your browser settings, although doing so may affect website functionality.

8. International Transfers

Some providers used within my business, including Google, Squarespace and social media platforms, may process information outside the United Kingdom.

Where this occurs, safeguards are used to ensure appropriate levels of protection consistent with UK GDPR requirements.

9. Data Retention

Insurance requirements oblige me to retain treatment records for:

Adults: 7 years after your last treatment

Children: Until age 25, or age 26 if treatment occurred at age 17

Following these periods, records will be securely destroyed.

10. Security of Information

I am committed to protecting your information.

Appropriate technical, organisational and physical safeguards are used including:

  • Password protected systems

  • Secure devices

  • Confidential treatment records

  • Restricted access procedures

While no system can guarantee complete security, reasonable steps are taken to protect your information from loss, misuse, unauthorised access or disclosure.

11. Your Rights

Under UK GDPR you have the right:

  • To be informed about how your data is used

  • To access your personal information

  • To request correction of inaccurate information

  • To request deletion of information where appropriate

  • To restrict processing

  • To object to processing

  • To request transfer of your information where applicable

  • Rights relating to automated decision making and profiling

Requests can be made using the contact details listed above.

Subject Access Requests will usually be responded to within one month.

Please note some information may need to be retained for legal or insurance purposes.

12. How To Raise A Data Protection Concern Or Complaint

I take privacy concerns seriously and aim to resolve issues quickly and fairly.

If you have concerns regarding how your information has been collected, stored or used, please contact me first:

Email: hello@vickyrawcliffe.com

Address:
VICKY RAWCLIFFE
2 Coxley Dell
Horbury
West Yorkshire
WF4 5LF

Telephone: 07917 718858

Please include:

  • Your name

  • Contact details

  • Details of your concern

  • Information that may help me investigate

I aim to acknowledge complaints within 5 working days and provide a response within 30 days where possible.

If you remain dissatisfied, you have the right to complain directly to the Information Commissioner’s Office:

Information Commissioner's Office Complaint Service

Telephone: 0303 123 1113

The ICO generally encourages individuals to contact organisations first to allow an opportunity to resolve concerns.

13. Therapist Rights

Please note:

If you do not consent to information necessary for treatment being collected and stored, I may not be able to provide treatment safely.

Legal and insurance requirements may require records to be retained even where deletion is requested.

Records may be transferred securely between systems where appropriate safeguards are in place.

14. Consent

By using my website, booking systems, social media pages and services, you acknowledge that you have read and understood this Privacy Policy.

Where required by law, specific consent will be requested separately.