Privacy Policy

Last updated: 16 June 2026

Angela Moulding Bodywork ("we", "us" or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Angela Moulding Bodywork is the Data Controller responsible for your personal information.

Contact details:

Email: hello@angelamoulding.com

Information We Collect

We may collect and process the following information:

Personal Information

Name
Address
Telephone number
Email address
Date of birth
Appointment history
Gift voucher purchases

Health Information (Special Category Data)

Where necessary to provide treatment safely and appropriately, we may collect:

Medical history
Information relating to current symptoms or injuries
Pregnancy information
Emotional wellbeing information
Lifestyle information relevant to treatment
Treatment notes and consultation forms

Health information is classed as Special Category Data under UK GDPR and receives additional legal protection.

How We Collect Your Information

We may collect information when:

You contact us through our website.
You complete a contact form.
You book an appointment.
You purchase a gift voucher.
You complete consultation or health forms.
You subscribe to receive newsletters or marketing emails.
You contact us by email, telephone, text message, WhatsApp, iMessage, Facebook Messenger, Instagram, or through our website.

How We Use Your Information

We use your information to:

Arrange and manage appointments.
Provide treatments safely and effectively.
Maintain accurate treatment records.
Process payments.
Issue gift vouchers.
Communicate regarding appointments.
Respond to enquiries.
Comply with legal and insurance obligations.
Send marketing emails where you have provided consent.
Protect the health, safety and wellbeing of clients.

Lawful Basis for Processing

Under UK GDPR, we rely upon the following lawful bases:

Contract

Processing necessary to provide the services you have requested.

Legal Obligation

Processing required to comply with legal, accounting, taxation and insurance requirements.

Legitimate Interests

Processing necessary for the effective management and operation of the business.

Consent

Where you choose to receive newsletters or marketing communications.

Explicit Consent

Special category health information is processed because it is necessary for the provision of health and wellbeing therapies and in accordance with Article 9(2)(a) of UK GDPR (explicit consent) and Article 9(2)(h), where applicable.

Marketing Communications

We may send newsletters, offers and information relating to our services where you have chosen to opt in.

You may unsubscribe at any time using the unsubscribe link contained within marketing emails or by contacting us directly.

Appointment reminders, confirmations and service-related communications are not considered marketing and may still be sent where necessary. You may unsubscribe to these either by using the unsubscribe link contained within the communications, logging into your online profile and revoking permissions, or contacting us directly.

Sharing Your Information

We do not sell your personal information.

Your information may be shared with trusted service providers who process information on our behalf, including:

Wix (website hosting)
Salon IQ (booking and client management software)
Stripe (payment processing)
Constant Contact (email marketing)
Microsoft 365 (email services)
WhatsApp Business (client communications)
Apple iMessage and SMS services (appointment-related communications)
Meta Platforms, including Facebook and Instagram (social media communications and marketing)

We only use these providers to the extent necessary to operate our business and provide our services. These providers are responsible for handling information securely and in accordance with applicable data protection laws.

Information may also be disclosed:

Where required by law.
To insurers or legal advisers where necessary.
To healthcare professionals or your GP, but only with your specific consent, unless otherwise required by law.

All third-party providers are required to handle your information securely and in accordance with applicable data protection laws.

Social Media

Angela Moulding Bodywork maintains business pages and profiles on social media platforms including Instagram and Facebook. If you choose to contact us through social media, the information you provide may be processed both by us and by the relevant platform provider.

We recommend that sensitive personal or medical information is not shared through social media messaging services. Where appropriate, we may ask you to continue the conversation via email, telephone or secure consultation forms.

International Transfers

Some of the service providers we use may process information outside the United Kingdom.

Where this occurs, we ensure that appropriate safeguards are in place to protect your information, including the use of approved contractual arrangements and recognised data protection mechanisms.

Keeping Your Information Secure

We take appropriate technical and organisational measures to safeguard your information.

These measures include:

Password-protected systems.
Encrypted software and payment systems where available.
Restricted access to client records.
Secure electronic storage.
Confidential handling of client information.

No method of transmission over the internet can be guaranteed to be completely secure, but we take reasonable steps to protect your information.

Confidentiality

Information shared during consultations and treatments is treated confidentially. Information will not normally be disclosed to third parties without your consent unless we are required to do so by law, there is a safeguarding concern, or we believe there is a serious risk of harm to yourself or others.

Data Breaches

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will comply with our legal obligations to notify the Information Commissioner's Office and affected individuals where required.

How Long We Keep Information

Enquiries

If an enquiry does not result in treatment, correspondence may be retained for a reasonable period for administrative purposes.

Client Records

Treatment records and consultation forms are normally retained for a minimum of seven years following your last appointment, in accordance with insurance requirements and professional practice recommendations. Records relating to children may be retained for longer where required.

Financial Records

Financial information may be retained for up to six years in accordance with HMRC requirements.

Marketing Information

Marketing preferences will be retained until you unsubscribe or withdraw your consent.

Children

Clients under the age of 18 are only treated with the express consent of a parent or legal guardian, who must remain present throughout the treatment session. Where consent is required, responsibility for providing valid consent rests with the parent or legal guardian.

Your Rights

Under UK GDPR, you have the right to:

Access your personal information.
Request correction of inaccurate information.
Request erasure of information in certain circumstances.
Restrict processing.
Object to processing.
Withdraw consent at any time.
Request transfer of your information where applicable.
Lodge a complaint with the Information Commissioner's Office (ICO).

Making a Complaint

If you have concerns about how your information is handled, please contact us first so that we can attempt to resolve the matter.

You also have the right to complain to:

Information Commissioner's Office

Website: https://ico.org.uk/make-a-complaint/

Telephone: 0303 123 1113

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time.

The most current version will always be published on this website.

How To Exercise Your Rights

You may request access to your personal information, ask for inaccurate information to be corrected, request erasure where applicable, object to processing, withdraw consent, or request a copy of the information we hold about you.

Requests should be made by email to hello@angelamoulding.com.

We may ask for reasonable proof of identity before releasing information to protect your privacy and security.

Angela Moulding Bodywork
Data Controller