Privacy Policy

Soul & Grace™

Last updated: 13/02/2026

 

Soul & Grace™ is committed to protecting and respecting your privacy. This Privacy Policy explains how personal data is collected, used, stored and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website or booking a treatment, you agree to the practices described below.

1. Who We Are

Soul & Grace™ is a private wellness and treatment studio operating in the United Kingdom.

Data Controller: Soul & Grace™
Contact Email: hellokellyconnell@gmail.com
Business Address: 45 Roper Street, Whitehaven Cumbria

If you have any questions about this policy or your data, please contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following information:

Identity & Contact Information

• Full name

• Address

• Email address

• Telephone number

• Emergency contact details

Booking & Payment Information

• Appointment history

• Transaction records

• Deposit and payment details (processed securely via third-party providers)

Health Information (Special Category Data)

• Medical conditions

• Allergies

• Medications

• Pregnancy status

• Injury history

• Lifestyle information relevant to treatment

This information is collected via consultation forms and health questionnaires.

3. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contractual necessity – to provide booked treatments and services.

• Legal obligation – to maintain appropriate treatment records.

• Legitimate interests – to manage bookings and business operations.

• Explicit consent – for processing health-related (special category) data.

You may withdraw consent at any time, though this may prevent treatment from being provided safely.

4. How Your Information Is Used

Your information is used to:

• Assess suitability for treatment

• Provide safe and appropriate services

• Manage appointments and payments

• Respond to enquiries

• Maintain accurate client records

• Comply with legal and insurance requirements

We do not sell or trade personal information.

5. How Your Data Is Stored

Personal data is stored securely through:

• Password-protected digital systems

• Secure booking platforms

• Locked physical storage (for paper forms, if applicable)

Access is limited to Soul & Grace™ only.

Payment details are processed via secure third-party providers and are not stored directly by Soul & Grace™.

6. Data Retention

Client consultation records and treatment notes are retained for up to 7 years after your last appointment in line with insurance and professional practice requirements.

After this period, data is securely deleted or destroyed.

7. Sharing of Information

Your personal data will not be shared with third parties except:

• Where required by law

• Where necessary for insurance or legal defence

• Where you have given explicit consent

Payment processors and booking systems operate under their own privacy policies.

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data

• Request correction of inaccurate information

• Request erasure of your data (where legally permissible)

• Restrict or object to processing

• Request transfer of your data

• Withdraw consent at any time

To exercise these rights, please contact [Insert Email].

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk

9. Website Cookies

This website may use cookies to:

• Improve website functionality

• Analyse visitor traffic

• Support booking systems

You may control cookies through your browser settings.

For full details, please refer to the Cookie Policy.

10. Marketing Communications

If you opt in to receive newsletters or updates, your email address will be used solely for that purpose.

You may unsubscribe at any time using the link provided in emails or by contacting us directly.

11. Confidentiality

All client information, discussions and treatment details are treated as strictly confidential, except where disclosure is required by law or where there is a safeguarding concern.

12. Updates to This Policy

This Privacy Policy may be updated periodically. The latest version will always be available on this website.