Last updated: 20 October 2026

Li’L Healing Room respects your privacy. This policy explains how personal information is collected, used, stored and protected when you visit my website, contact me, book an appointment or use my services.

1. Who is responsible for your information?

The data controller responsible for your personal information is:

Business name: Li’L Healing Room
Business owner: Lynette Lewis
Email: [email protected]

If you have questions about this policy or how your information is handled, please contact me using the details above.

2. What information may I collect?

Depending on how you interact with Li’L Healing Room, I may collect:

Contact information:

Your name, email address, telephone number and relevant contact details.

Booking and payment information:

Appointment dates, services booked, payment status and transaction references.

Client information:

Information you provide through client intake forms, consultations or discussions about your needs and preferences.

Health and wellbeing information:

Relevant health details, allergies, medication information, treatment considerations or other information you choose to share that may help assess the suitability of a service.

Communications:

Emails, messages and other correspondence relating to enquiries, bookings or your sessions.

Website information:

Technical information such as your IP address, browser type and website usage data, where collected through the website or its technologies.

Please only provide information that is relevant to your enquiry, booking or care.

3. How do I use your information?

I may use your information to:

Respond to enquiries and communicate with you.

Arrange, manage and confirm appointments.

Assess the suitability of a treatment or service.

Prepare for and deliver your booked session.

Process payments, refunds and related administration.

Send appointment reminders and important service updates.

Maintain appropriate business and financial records.

Meet legal, regulatory, insurance or professional obligations.

Protect the safety and legitimate interests of clients and the business.

Operate, maintain and improve the website, where appropriate.

I will not use your personal information for unrelated purposes without an appropriate lawful basis.

4. Health and other sensitive information

Information about your physical or mental health may be considered special-category personal data. I will only collect and use health or other sensitive information where it is necessary for an identified purpose, and I have an appropriate lawful basis and any additional condition required by data protection law. Where required, I will ask for your explicit consent to process relevant health information. I will explain the purpose of collecting it and will take appropriate steps to protect it. Please be aware that withdrawing consent does not automatically make earlier processing unlawful, and I may need to retain certain records where another legal obligation or lawful basis applies.

5. Our lawful bases for processing

Depending on the circumstances, I may rely on one or more of the following lawful bases:

Contract:

to manage bookings and provide services you have requested.

Legitimate interests:

for appropriate business administration, security and communication, where these interests do not override your rights.

Legal obligation:

where information must be retained or disclosed to meet a legal requirement.

Consent:

where you have freely agreed to a specific use of your information.

Special-category processing condition:

where required to process health or other sensitive information, in addition to an applicable lawful basis under Article 6 of the UK GDPR.

The lawful basis and any additional condition used will depend on the actual purpose and circumstances of the processing.

6. Who may receive your information?

I do not sell your personal information. Where necessary, information may be shared securely with service providers who help operate my business, such as:

Website hosting and website management providers.

Booking and appointment management systems.

Payment processors.

Business email and communication providers.

Secure form and client-record systems.

Accountants, insurers, legal advisers or relevant authorities where appropriate or legally required.

These providers may process information on my behalf or in their own capacity, depending on the service they provide. I will only share information where appropriate, necessary and lawful. I will not disclose your personal details to unrelated third parties for their own marketing without an appropriate lawful basis.

7. How is your information protected?

I take reasonable and appropriate steps to protect personal information against unauthorised access, loss, alteration or disclosure.

Physical records, including printed client intake forms and treatment records, are stored securely in a locked filing cabinet or other locked filing storage system, with access restricted to authorised persons.

Electronic records are protected using appropriate security measures, which may include passwords, access controls, secure systems and limiting access to information to those who need it.

I take care to ensure that personal information is handled confidentially and accessed only where necessary for legitimate business purposes.

No method of electronic storage or transmission can be guaranteed to be completely secure. However, I take appropriate steps to manage security risks and respond to any personal data breach in accordance with applicable data protection requirements.

8. How long is information retained?

Li’L Healing Room retains personal information only for as long as necessary for the purposes for which it was collected, taking account of applicable legal obligations, accounting requirements, insurance conditions and the need to establish or respond to potential complaints or legal claims.

Different retention periods apply to different types of information:

Client intake forms and treatment records:

Retained for up to seven years after your last appointment, unless a longer period is reasonably necessary and lawful, or the information can be securely deleted sooner because it is no longer needed.

Booking records and general correspondence:

Retained for as long as necessary to manage appointments, payments, enquiries and any resulting complaints or disputes.

Marketing preferences and consent records:

Retained as necessary to respect your communication preferences and demonstrate compliance with applicable requirements

.

Retention periods are reviewed periodically. When personal information is no longer required, it will be securely deleted or anonymised, unless there is a lawful reason to retain it for longer.

9. Cookies and website analytics

This website may use cookies or similar technologies to support website functionality, understand website usage or provide other features.

Where consent is required, non-essential cookies or tracking technologies will only be used in accordance with the applicable requirements.

10. Marketing communications

If I send marketing communications, I will do so in accordance with applicable privacy and electronic marketing laws.

You can unsubscribe from marketing emails at any time by using the unsubscribe link, where available, or contacting me directly.

Appointment confirmations, reminders and other necessary service messages are not the same as marketing communications.

11. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

Request access to your personal information.

Ask for inaccurate information to be corrected.

Request deletion of information.

Request that processing is restricted.

Object to certain processing.

Request a copy of information in a portable format where the relevant right applies.

Withdraw consent where processing relies on consent.

Complain to the Information Commissioner's Office (ICO).

These rights are subject to legal conditions and exceptions. For example, I may need to retain certain information to meet a legal obligation or establish, exercise or defend legal claims.

To exercise a right, please contact me at [email protected].

12. Complaints

If you have concerns about how your personal information is handled, please contact me first so that I can try to resolve them.

You also have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Telephone: 0303 123 1113

13. Links to other websites

This website may contain links to third-party websites. I am not responsible for the privacy practices of those websites. Please read their privacy policies before providing personal information.

14. Changes to this policy

This policy may be updated to reflect changes to my services, systems or legal obligations. The latest version will be published on this page with the relevant update date.

15. Contact

For privacy questions or requests, please contact:

Li’L Healing Room
Email: [email protected]
Website: https://lilhealingroom.co.uk