Privacy Policy
 

At APRIVACY POLICY - ALVECHURCH REIKI - UPDATED JUNE 2026

Who I Am :  Alvechurch Reiki is a sole practitioner business. I act as the data controller for the personal data you provide.

Contact details:  Email: alvechurchreiki@gmail.com

Address: Alvechurch Reiki, Bear Hill Drive, Alvechurch, B48 7RG  Phone: 07725 013181

Lawful Basis for Processing : Under UK GDPR, I rely on the following lawful bases:

Contract – to provide Reiki treatments, courses, and related services

Legitimate Interests – to manage my practice effectively and communicate with you

Consent – for sending newsletters and marketing emails (you may withdraw this at any time)

Legal Obligation – where I must retain records for insurance or legal purposes

Some of the information I collect (such as health information) is classified as “special category data”. This is processed only with your explicit consent and to ensure your safety and wellbeing.

Newsletter and Email Communications

As part of the registration process for my newsletter or other email communications, I collect your name and email address.

I use Email Octopus to deliver my emails and to gather statistics such as open rates and clicks to help improve my communications. For more information, please see their privacy policy.

I may use your information to:

• share updates about services, workshops, and offers
• provide Reiki-related information you have expressed interest in
• ensure my records are accurate
• maintain contact where appropriate

You can unsubscribe at any time by clicking the unsubscribe link or by emailing me directly.

I will never sell, rent, or trade your personal data.

Website Use

My website is hosted by Ionos, who process data on my behalf. You can view their privacy policy on their website.

When you visit my website, Google Analytics collects anonymised data about how visitors use the site (such as pages visited and traffic sources). This helps me understand and improve the website.

I do not use this information to identify individual visitors.

Client and Student Information

To provide safe and appropriate Reiki treatments, courses, and workshops, I may collect:

Name and contact details, Emergency contact details, Relevant medical information (e.g. conditions, medications, disabilities), GP details (where appropriate), Course or treatment notes

This may include special category health data, which is handled with additional care.

How Your Information Is Stored

I take appropriate steps to keep your personal data secure:

• Paper records are stored securely under lock and key
• Digital files are password-protected and encrypted where appropriate
• Access is limited to me as the practitioner

Data Retention

Client records and treatment notes are retained for 8 years, in line with insurance and professional requirements

Student records are retained as required for course administration and legal purposes

General enquiries are typically retained for a limited period unless you become a client or request deletion.

After this time, data is securely destroyed.

Sharing Your Information

Your personal information is treated as strictly confidential.

It will only be shared:

• in a medical emergency where necessary for your safety
• if required by law
• with trusted service providers (e.g. Email Octopus, Stripe, website host), where necessary and with appropriate safeguards

I do not share your information for marketing purposes.

Payments

Payments are made via cash, bank transfer, or Stripe.  I do not store debit or credit card details.

For Stripe payments, please refer to Stripe’s privacy policy.

Your Rights (To exercise any of your rights, please email: alvechurchreiki@gmail.com)

Under UK GDPR, you have the right to:

• Access the personal data I hold about you
• Request correction of inaccurate information
• Request erasure (where applicable)
• Restrict or object to processing
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

Data Protection Complaints Procedure

If you have any concerns about how your personal data has been collected, used, or stored, you have the right to make a data protection complaint.

How to make a complaint : Please submit your complaint in writing by email or post using the contact details above.

To help me investigate, please include:

• your name and contact details
• a clear description of your concern
• relevant dates or supporting information

What you can expect:

• I will acknowledge your complaint within 30 days of receipt
• I will investigate promptly and fairly
• I may contact you to request further information if needed
• I will keep you informed of progress where appropriate
• I will provide an outcome without undue delay

Further escalation :  If you are not satisfied with the response, you have the right to contact:

Information Commissioner’s Office (ICO)  Website: www.ico.org.uk  Telephone: 0303 123 1113

Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or how I operate. Please check this page periodically for updates.

 Updated June 2026