01
Who we are
Ms Violina Todorova Spasova is the person responsible for data protection and acts as the controller for the personal information described in this policy on behalf of Angel Touch Therapy.
02
Information we collect
We collect only the information needed to manage enquiries, appointments and treatments, operate the website and meet our professional and legal responsibilities. This may include:
- Contact details, such as your name, email address and telephone number.
- Booking details, including the treatment requested, appointment date and time, and messages you send with a booking or enquiry.
- Treatment and consultation information that is relevant to providing a safe, suitable service. This can include health information, which receives additional protection under data protection law.
- Correspondence, including questions, requests, complaints and any follow-up communication.
- Public review information, such as your display name and review text when you choose to publish a review on Google.
- Technical information needed to deliver and secure the website, such as your IP address, browser or device information, request times and security logs.
Do not include detailed medical information in the optional booking message. Relevant health information can be discussed privately during your consultation.
03
How and why we use your information
| What we do | Why we do it | Lawful basis |
|---|---|---|
| Respond to enquiries and manage bookings | To take steps you request and arrange your appointment | Contract, or steps before entering a contract |
| Provide and tailor treatments | To understand relevant needs and deliver the requested service safely | Contract; where health information is needed, we will identify an appropriate special-category condition, such as your explicit consent |
| Keep business and treatment records | To meet tax, accounting, insurance, professional and legal responsibilities, and to establish or defend legal claims | Legal obligation and legitimate interests |
| Operate and secure the website | To prevent misuse, troubleshoot problems and keep booking and administration features working | Legitimate interests in running a secure and reliable service |
| Display public Google reviews | To help visitors understand other clients’ experiences | Legitimate interests in presenting public feedback about the business |
If we ask for explicit consent to use health information, you may withdraw that consent at any time. Withdrawal will not affect processing that was lawful before it was withdrawn. We do not use your information for automated decision-making or profiling, and we do not sell personal information.
06
How long we keep information
We keep personal information only for as long as it is needed for the purpose for which it was collected. The period depends on the type of record and may be affected by tax, insurance, professional, safeguarding and legal-claims requirements.
Enquiries that do not lead to a booking are deleted when they are no longer needed. Appointment, customer and treatment records are reviewed and retained only while needed to provide services or meet the responsibilities described above. Technical and security logs are kept for the limited period needed to operate and protect the website. Information is securely deleted or anonymised when it is no longer required.
07
Your data protection rights
Depending on the circumstances and the lawful basis being used, you may have the right to:
- ask for a copy of your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to delete information or restrict how it is used;
- object to processing based on legitimate interests;
- receive certain information in a portable format; and
- withdraw consent where consent is the basis for processing.
You have the right to object to processing based on our legitimate interests. We will stop unless we have compelling legitimate grounds to continue or need the information for legal claims.
There is normally no charge for exercising these rights. We may need to confirm your identity before responding.
08
Questions and complaints
To exercise a right, ask a privacy question or make a data protection complaint, call 07915 910 033, write to the address above, or use the contact details on our home page. Please contact us first so we have an opportunity to investigate and resolve your concern.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. Visit ico.org.uk/make-a-complaint/ (opens in a new tab) for current guidance.
09
Changes to this policy
We may update this policy when our services, website or legal responsibilities change. The latest version will always appear on this page with its updated date.