Last updated: 21 August 2026
The Healing Centre ("we", "us", "our") operates thehealingcentrethc.co.uk and provides wellness services from 134-136 Union Street, Larkhall ML9 1EF. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK data protection law.
Who we are
The Healing Centre, 134-136 Union Street, Larkhall ML9 1EF. You can contact us at thclanarkshire@gmail.com or on 07871 272133.
What we collect and why
When you book a session
We collect your name, email address, phone number and booking preferences (service, date, time).
Why: to confirm your booking, send pre- and post-visit emails, and contact you about your appointment.
Legal basis: performance of contract (you've asked us to provide a service).
How long we keep it: for the duration of our client relationship, plus 7 years for accounting and tax records as required by HMRC.
When you sign a waiver or registration form
We collect the information above, plus your date of birth (for age-appropriate care), relevant health information you choose to disclose (e.g. pregnancy, allergies, medications, conditions affecting treatment suitability), an emergency contact where the activity calls for one, and your signature.
Why: to provide safe, appropriate care; to keep you safe during activities; to comply with practitioner duty of care; and to keep a record of your consent.
Legal basis: explicit consent for health data (UK GDPR Article 9); performance of contract for the rest.
How long we keep it: 7 years after your last visit, in line with professional indemnity practice for therapeutic practitioners.
Health information from waivers is used only for your safety and care. It is never used for marketing, and it never goes to our email marketing platform.
When you subscribe to our emails
We collect your name and email address.
Why: to send you news from the centre — what's on, offers, and things we think you'll love.
Legal basis: consent (you opted in — marketing consent is always its own tick, never bundled into anything else).
How long we keep it: until you unsubscribe. Every email includes an unsubscribe link.
When you buy from us online
Card payments (for example for our book) are handled by Stripe — we never see or store your card details. We receive your name, email and what you bought, so we can deliver it and keep accounting records.
When you visit our website
We collect anonymous analytics (page views, referral source, device type, country) via Google Analytics, and the minimal cookies described below.
Why: to understand how the site is used and improve it.
Legal basis: legitimate interest (improving the service). No personally identifying data is collected unless you submit a form.
Who we share your data with
We never sell your data. We share it only with the processors that help us run the centre:
| Processor | Purpose | Data shared |
|---|---|---|
| Setmore | Bookings + calendar | Name, email, phone, booking history |
| Google (Gmail, Drive) | Email correspondence + record keeping | Name, email, anything you send us, signed waivers |
| Make.com | Automating confirmations, aftercare emails and our waiver register | Name, email, booking and form details |
| Mailchimp | Marketing emails (only if you opted in) | Name and email only |
| Stripe | Card payments | Payment details (handled by Stripe directly) |
| Our accountant | Bookkeeping + tax | Payment + invoice records |
Each of these has its own privacy policy and is contractually bound to protect your data. We may also share data if legally required to (court order, HMRC, safeguarding obligations).
International transfers
Some of our processors (e.g. Google) may store data on servers outside the UK / EEA. They do so under approved international data transfer mechanisms (Standard Contractual Clauses) that provide equivalent legal protection.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you (a "Subject Access Request")
- Correct any inaccurate data
- Delete your data ("right to be forgotten"), subject to our legal retention obligations
- Restrict how we process your data
- Object to processing based on legitimate interest
- Withdraw consent at any time where consent is the basis for processing
- Complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint
To exercise any of these rights, email thclanarkshire@gmail.com. We'll respond within 30 days.
Cookies
Our website uses minimal cookies: essential cookies for the site to function, and anonymous, aggregate analytics cookies via Google Analytics. We do not use advertising or tracking cookies. You can disable cookies in your browser settings; some site features may not work as a result.
Security
We take reasonable technical and organisational measures to protect your data, including encrypted storage, access controls, and processor due diligence. No system is 100% secure, but we do our best. If a data breach affects you, we'll notify you within 72 hours of becoming aware of it, in line with UK GDPR requirements.
Changes to this policy
We may update this policy from time to time. The most recent version is always on this page. If we make material changes, we'll notify newsletter subscribers and active clients by email.
Contact
Questions about this policy? Email thclanarkshire@gmail.com or write to us at The Healing Centre, 134-136 Union Street, Larkhall ML9 1EF.
See also: Terms & Conditions · Cancellation Policy