Go to content

Privacy Policy - Harmony & Balance – Holistic Therapies with Annette Graham

Skip menu
Skip menu
Privacy Policy

Privacy Policy

This Privacy Policy explains how Harmony & Balance (run by holistic practitioner Annette Graham) collects, uses, stores, and protects your personal data when you visit this website, make an enquiry, book a session, attend a seminar or workshop, or purchase products.

We are committed to handling your information respectfully, transparently, and in line with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website or sharing your information with us, you acknowledge that you have read this Privacy Policy. If you have any questions, please use the contact details at the end of this page.

Data We Collect

When you contact Harmony & Balance, we may collect your name, email address, phone number and (if you choose to provide it) your general location. This can be through the website contact form, email, phone, text, or social media messages, and is used so that we can respond to your enquiry and manage bookings.

In order to provide holistic treatments safely and appropriately, Annette may record relevant health and wellbeing information that you share, such as medical history, current symptoms, medications, allergies, and lifestyle factors. This information helps assess suitability for treatments, adapt sessions for your needs, and maintain appropriate treatment records.

If you book a treatment, workshop or purchase products, we may collect information such as the date and time of your booking, services selected, attendance, and limited payment-related details (for example, whether you have paid and by which method). Card payment details are handled by third-party providers and are not stored by Harmony & Balance.

When you visit this website, basic technical information such as your IP address, browser type, pages visited, and time spent on the site may be collected through cookies and similar technologies. If you sign up to any mailing list or request specific information, we may also store your communication preferences and the content of our correspondence. Please see the Cookies & Website Data section for more details.
How We Use Your Data

Harmony & Balance uses your personal data only for clear and specific purposes, and only when there is a lawful reason to do so. Typical purposes include:

  • Responding to enquiries: answering questions about therapies, workshops, products, or availability.
  • Managing bookings and appointments: confirming, rearranging, and reminding you about your sessions, and workshops.
  • Providing treatments and services: assessing suitability, tailoring sessions to your needs, and keeping appropriate treatment notes.
  • Processing payments and administration: recording what you have booked or purchased and whether payment has been received.
  • Maintaining records: keeping necessary records of treatments, workshops, and communications for reference, continuity of care, and legal or tax purposes.
  • Marketing communications: sending you occasional updates about new services, workshops, or products, but only where you have given consent or where another lawful basis applies. You can opt out at any time.
  • Website improvement and security: monitoring how the website is used to improve content and layout, and to keep the website secure.

Your information is not used for automated decision-making or profiling that would have legal or similarly significant effects on you.

Lawful Bases for Processing

Under UK GDPR, Harmony & Balance must have a valid lawful basis for each way that your personal data is used. The main lawful bases relied upon are:

  • Contract: where processing is necessary to enter into or perform a contract with you, for example when you book a treatment, workshop, or purchase a product.
  • Legitimate interests: where processing is necessary for the legitimate interests of Harmony & Balance or a third party, and these are not overridden by your rights and interests. This can include managing enquiries, maintaining basic records, and improving services.
  • Consent: where you have clearly agreed to specific processing, for example to receive marketing emails or for the storage of particular sensitive health information beyond what is required.
  • Legal obligation: where processing is necessary to comply with a legal or regulatory requirement, such as tax or accounting rules.

The table below summarises how these lawful bases relate to the main ways in which your data is used.

Purpose of processingExamplesMain lawful bases
Managing enquiries and bookingsResponding to messages, confirming appointments, rearranging sessionsContract; Legitimate interests
Providing treatments and servicesCarrying out agreed therapies, workshops, and follow-upContract; Legitimate interests; Consent (for special category data)
Maintaining records and accountsKeeping treatment notes, attendance records, and financial recordsLegal obligation; Legitimate interests
Sending marketing communicationsEmails about new services, workshops, or productsConsent; Legitimate interests where appropriate
Website operation and securityMonitoring website performance, preventing misuse or attacksLegitimate interests
Data Sharing & Third Parties

Your personal data is treated as confidential. It is only shared when necessary, with trusted third parties who help Harmony & Balance deliver services or run the business, or where there is a legal obligation to do so.

Examples of third parties who may process your data on our behalf include:

  • Booking and events platforms: for managing workshop, and product bookings (for example, Bookwhen).
  • Email and communication providers: services that deliver emails and store messages.
  • Website hosting and IT services: providers who host the website and keep it secure.
  • Payment processors and banks: services that handle payments when you purchase treatments, workshops, or products.

These third parties are only given the information they need to perform their services and are required to keep your data secure and to use it only in accordance with data protection law.

Your information will not be sold to third parties. Data may be disclosed if required by law, to protect your vital interests or those of another person, or to establish, exercise, or defend legal claims.

Data Retention & Security

Your personal data is kept only for as long as it is reasonably needed for the purposes described in this Privacy Policy, and to meet legal, accounting, or reporting requirements.

  • Treatment and health records: are typically retained for a minimum period required by professional, insurance, or legal guidelines, after which they are securely deleted or destroyed.
  • Booking and purchase records: are kept for as long as necessary to manage your bookings and to comply with tax and accounting rules.
  • Enquiry information: is usually retained for a shorter period, unless it forms part of an ongoing client relationship.
  • Marketing preferences: are stored until you withdraw your consent or object to receiving further communications.

Harmony & Balance uses appropriate technical and organisational measures to protect your data, such as secure devices and accounts, password protection, limited access to records, and care when sharing information electronically. However, no system can be completely secure, and you are encouraged to take care when sending sensitive information via email or online forms.

Your Rights

You have the right to request confirmation of whether your personal data is being processed and to obtain a copy of the information held about you, along with certain details about how it is used.

If you believe that any of your personal data is inaccurate or incomplete, you can ask for it to be corrected or updated so that it is accurate and up to date.

In certain circumstances, you can request that your personal data is deleted, for example where it is no longer needed for the purpose for which it was collected. There may be legal or professional reasons why some information must be retained for a period of time.

You can ask for the use of your data to be limited in certain situations, for example while a concern about accuracy or lawful use is being considered.

Where processing is based on your consent or on a contract and is carried out by automated means, you may request that certain personal data is provided to you or another controller in a structured, commonly used, machine‑readable format.

You have the right to object to processing based on legitimate interests, and to object at any time to the use of your data for direct marketing. If you object, your data will no longer be processed for that purpose unless there are compelling legitimate grounds or a legal obligation to continue.

If you have concerns about how your data is being used, you are encouraged to contact Harmony & Balance first so that any issues can be addressed. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.
Cookies & Website Data

This website may use cookies and similar technologies to help it function properly, to understand how visitors use the site, and to improve content and layout over time.

Cookies are small text files stored on your device. Some are essential for the website to work, while others are used for analytics or to remember your preferences. You can usually control cookies through your browser settings and dedicated cookie tools.

For more detail about the types of cookies used on this site, what they do, and how you can manage your preferences, please refer to the Cookie Policy.

Contact for Privacy Questions

If you have any questions about this Privacy Policy or how your personal data is handled, please get in touch.

Data controller: Harmony & Balance – Holistic Therapies with Annette Graham

Email: anewman835@aol.com
Phone: 07769 183286

When you contact Harmony & Balance about privacy matters, please include enough information for your request to be understood and, if relevant, to help locate your records (for example, your name, approximate dates of sessions, and how you have been in contact).

Back to content