privacy policy
Who I Am
I am Jennie, a qualified reflexologist trading as Nurturing Touch Reflexology, providing treatments from my private treatment space in Corringham, Essex.
I am committed to protecting your privacy and handling your personal information responsibly, securely, and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.
Data Controller
For the purposes of data protection law, Nurturing Touch Reflexology is the Data Controller responsible for your personal information.
ICO Registration Number: ZC119706
If you have any questions about this Privacy Notice or how your personal information is processed, please contact:
What Personal Information I Collect
To provide reflexology treatments safely and effectively, I may collect and process the following information:
- Name, address, telephone number and email address
- Date of birth
- Emergency contact details
- GP details (where relevant)
- Medical history and current health conditions
- Lifestyle information, including stress levels, sleep patterns and general wellbeing
- Consultation forms and treatment records
- Appointment history and correspondence
Some of this information may be classified as Special Category Data (health information) under UK GDPR.
Why I Collect Your Information
I collect and process your personal data for the following purposes:
- To assess your suitability for treatment
- To provide safe and personalised reflexology treatments
- To maintain accurate treatment records
- To monitor progress and adapt treatments where appropriate
- To communicate with you regarding appointments, bookings and follow-up care
- To meet professional, legal and insurance requirements
- To protect your vital interests in the event of a medical emergency
The lawful bases for processing your information are:
- Contract – where processing is necessary to provide the services you have requested
- Legal Obligation – where records must be maintained to comply with legal, professional or insurance requirements
- Legitimate Interests – for the administration and management of my practice
- Explicit Consent – where required for processing health-related information
How Your Information Is Stored
Your information is stored securely using appropriate technical and organisational measures.
This may include:
- Paper records stored in a locked filing cabinet
- Electronic records stored on password-protected devices
- Secure cloud-based systems with appropriate security measures and encryption where available
I take reasonable steps to protect your personal information from unauthorised access, loss, misuse, alteration or disclosure.
Sharing Your Information
Your personal information will remain confidential and will never be sold or shared with third parties for marketing purposes.
Information may only be shared:
- With your explicit consent
- With healthcare professionals involved in your care where appropriate
- In the event of a medical emergency
- Where required by law, regulation, court order or insurance requirements
Any third-party service providers used to store or process data on my behalf are required to maintain appropriate levels of security and confidentiality.
How Long I Keep Your Information
Client records are retained for:
- Seven years after your last treatment if you are an adult
- Until your 25th birthday if treatment was provided while you were under 18 years of age
These retention periods are based on professional body guidance and insurance requirements.
Once the retention period has expired, records will be securely destroyed, deleted or anonymised.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data I hold about you
- Request correction of inaccurate or incomplete information
- Request restriction of processing in certain circumstances
- Object to processing where applicable
- Request erasure of your personal data where legally permissible
- Withdraw consent at any time where consent is the basis for processing
- Receive a copy of your data in a portable format where applicable
- Lodge a complaint regarding the handling of your personal data
Requests can be made by contacting me using the details provided above.
Important Information About Treatment Records
Please note that maintaining accurate client records is a professional, legal and insurance requirement.
If you do not agree to the collection and retention of information necessary for safe treatment, I may be unable to provide reflexology services.
In some circumstances, even where you request that your data be erased, I may be required to retain certain records for the retention period stated above in order to comply with legal, professional or insurance obligations.
Records may be transferred between secure devices or systems where necessary for the administration of my practice, provided appropriate safeguards remain in place to protect your information.
How to Make a Data Protection Complaint
If you have concerns about how I have collected, used or stored your personal information, please contact me first:
I will acknowledge and investigate your complaint in accordance with applicable data protection requirements.
If you remain dissatisfied with my response, you have the right to complain to the Information Commissioner’s Office (ICO).
Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://www.ico.org.uk
Changes to This Privacy Notice
This Privacy Notice may be updated from time to time to reflect changes in legal requirements, professional obligations or business practices. The latest version will always be available on request.
Last Updated: June 2026
Data Controller: Nurturing Touch Reflexology
ICO Registration Number: ZC119706
Contact Email: info@ nurturingtouchreflexology.co. uk