What is the GDPR?

The General Data Protection Regulation (GDPR), which comes into force on May 25th, 2018, aims to protect the fundamental right to privacy and the protection of personal data of European Union (EU) citizens. 



Spirit and Wellbeing Privacy Policy 


To help comply with GDPR consent requirements, I will ask if you would like to receive information from me occasionally, which might be promotions and special offers. To do this, I need to ask you for your consent before sending you this type of promotional message. 


Should you wish to withhold consent thats no problem. If you do provide consent, you may subsequently withdraw your consent at any time. I will review this with you once a year.

Appointment reminders, are not considered promotional activity and are therefore excluded from being covered by this request for consent.


I do not share your information with any third party, and will never sell or give access to your data to anyone else.


Any personal information, such as name, telephone number and session notes are stored in paper form, not digitally, and is kept locked and secure. After the legal requirement of notes being held for seven years, I dispose of them through a secure confidential shredding facility.

Like all health professionals I need to keep a few notes about my clients. 

This is to keep track of the therapy I’m giving them. I do not record information that is not needed for this purpose. I am required to keep some notes, however in Kinesiology sessions often people like to take their notes home for working on at home, and re reading, some people take a photo of any notes before the end of the session. Clients are welcome to read and ask for notes from sessions. This is in alignment with customer rights under the new GDPR privacy policy.


I do not share information with anybody else, unless I had reason to believe that a client was about to do serious harm to their self or other people

Like most health professionals I am required to have ongoing supervision and professional practice mentoring sessions. This means I meet with a senior therapist to discuss ongoing cases. 

During these meetings, no information is disclosed that could identify the client. 


Information about clients’ problems and therapy is kept for seven years after each client finishes therapy. This is required by the GDRP. 


These files are kept on paper in a secure location.


Clients’ email addresses and phone numbers are retained for as long as the client remains in contact with me. 


None of the above data is shared with anybody else, nor will it be shared, except in the following situations.

Firstly, if I were to receive a legal subpoena from a Court of Law.

Secondly, if I had reasonable cause to believe that a client was about to attempt suicide or to cause serious harm to other persons.


Contact with me may be via my website contact page which is hosted on the  Wix.com platform. Wix.com provides me with the online platform that allows me to advertise my therapy services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.