Quest Holistic Therapies is committed to protecting your privacy and handling your personal information with care, transparency and respect.
This notice explains what information we collect, why we collect it, how it is used, and your rights under UK GDPR and the Data Protection and Digital Information Act (DUAA).

Quest Holistic Therapies is the data controller for all personal information you provide.

We only collect the minimum information needed to provide safe and appropriate treatments:

• Name
• Postcode
• Confirmation that you are over 18
• Relevant email and contact numbers
• Emergency Contact number
• Relevant medical information, allergies, wellbeing details and treatment notes you choose to share

We do not collect or store financial information.

• Consultation forms are completed using Microsoft Forms.
• Forms are downloaded into secure electronic files and the original Microsoft Form responses are deleted.
• All treatment notes are stored electronically.

Deposits may be taken through PayPal or Square.
These companies process your payment information securely.
Quest Holistic Therapies does not see or store your card or bank details.

Your information is used to:

• Provide safe and appropriate holistic treatments
• Maintain accurate client records
• Meet insurance and professional requirements
• Contact you with appointment information or relevant service updates (you may opt out at any time)

We do not use your data for any purpose not stated in this notice.

We process your information under:

• Explicit Consent (Article 6(1)(a) and Article 9(2)(a))
• Legitimate Interests (Article 6(1)(f))
• Legal Obligation (Article 6(1)(c))

All information is stored electronically in secure, password‑protected systems.
Only authorised personnel have access.

We use trusted third‑party services that comply with UK GDPR:

• Microsoft Forms – consultation forms
• Microsoft Outlook / Office 365 – email communication
• PayPal – deposits
• Square – deposits
• GoDaddy – website hosting and contact form delivery

These organisations act as data processors and only process your information as necessary to provide their service.

To meet insurance and professional requirements, we keep client records for:

• 7 years after your last treatment, or
• Until age 21 if the client was under 18 at the time of treatment

After this period, records are securely deleted.

You have the right to:

• Access the personal data we hold about you
• Request corrections to inaccurate information
• Withdraw consent at any time
• Request deletion of your data (where legally permitted)
• Restrict or object to certain types of processing
• Make a complaint to the ICO

Quest Holistic Therapies provides complementary holistic treatments designed to support wellbeing. These therapies may bring up strong emotions or past memories. You may pause or decline any technique at any time. Holistic therapies do not replace medical or psychological care, and you should continue any treatment recommended by your doctor or therapist. If you experience distress during a session, we will pause, ground, and discuss whether referral is appropriate.

For any data protection queries, please email:
qa.1@hotmail.co.uk

If you are unhappy with how your data is handled, you may contact the Information Commissioner’s Office at www.ico.org.uk.