PRIVACY POLICY

(Data protection only)

Privacy Policy

Data Controller
Vicky Thompson (trading as [Vicky Thompson Holistic Therapies]) is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact:
Email: [mail@vickythompson.co.uk]
Location: Surrey, United Kingdom

What Information We Collect

We may collect:

  • Name

  • Address

  • Email address

  • Telephone number

  • Payment details

  • Information you provide via contact forms

  • Relevant health or background information where required to provide services

  • Website usage data (such as IP address and browser type)

For animal services, this may also include:

  • Veterinary details

  • Animal health and behavioural information

Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Contract (to provide agreed services)

  • Legal obligation (e.g., tax and accounting requirements)

  • Legitimate interests (business administration and communication)

  • Consent (for marketing communications)

Where health-related information is collected, this is processed as special category data under Article 9 UK GDPR for the provision of services.

How Your Information Is Used

We use your information to:

  • Provide booked services

  • Maintain client records

  • Communicate regarding appointments

  • Process payments

  • Comply with legal obligations

  • Improve website functionality

We do not sell or share your personal data for marketing by third parties.

Third-Party Service Providers

We may use trusted third-party providers to assist in operating our business, including website hosting and email marketing services provided by Squarespace, payment processors, and accounting software providers.

These providers act as data processors and are required to handle your data securely and in accordance with UK data protection legislation.

Data Retention

  • Financial records: retained for 6 years (HMRC requirement)

  • Client records: retained for up to 6 years

  • Marketing data: retained until consent is withdrawn

Your Rights

You have the right to:

  • Access your personal data

  • Request correction

  • Request erasure (where legally applicable)

  • Restrict or object to processing

  • Withdraw consent for marketing

You also have the right to lodge a complaint with the
Information Commissioner's Office.