Privacy Notice
The Grateful Living
Last updated: 14 October 2026
At The Grateful Living, we are committed to protecting your privacy and handling your personal information with care, confidentiality and respect.
This Privacy Notice explains how we collect, use, store and protect your personal information when you book or receive treatments, complete consultation forms or communicate with us.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
The Grateful Living is a holistic wellbeing business based in Syston, Leicestershire, offering holistic massage, Manual Lymphatic Drainage (MLD), reflexology, Reiki and other wellbeing treatments.
The Grateful Living is responsible for determining how and why your personal information is processed and acts as the data controller.
For privacy-related enquiries, please contact:
Business: The Grateful Living
Data Controller: Talesha Chauhan, trading as The Grateful Living
Email: [Insert business contact email]
Location: Syston, Leicestershire, United Kingdom
Correspondence address: [Insert business correspondence address]
2. Information We Collect
When you book or receive a treatment, we may collect:
Your full name, date of birth and contact details.
Appointment dates, booking details and payment records.
Medical history, relevant health conditions and medications.
Allergies, injuries, recent surgeries and other relevant health information.
Consultation forms, treatment notes and consent records.
Emergency contact information where necessary.
Information you voluntarily share about your wellbeing.
Communications relating to your appointments or treatment.
We collect only information reasonably necessary to provide our services safely and professionally.
3. Why We Collect Your Information
Your information is collected and used to:
Arrange, confirm and manage appointments.
Assess your suitability for treatments.
Identify potential contraindications.
Adapt treatments to your individual needs.
Maintain accurate consultation and treatment records.
Monitor relevant changes in your health between appointments.
Process payments and maintain financial records.
Meet applicable legal, professional and insurance obligations.
Respond to enquiries, complaints or concerns.
We do not use your confidential treatment information for unrelated marketing purposes.
4. Our Lawful Basis for Processing Personal Information
Under Article 6 of UK GDPR, we rely on the following lawful bases where applicable:
Article 6(1)(b) – Performance of a Contract
To manage your booking, communicate about your appointment and provide the treatment or service you have requested.
Article 6(1)(c) – Legal Obligation
To comply with applicable legal requirements, including financial record-keeping and tax obligations.
Article 6(1)(f) – Legitimate Interests
Where necessary and proportionate, to maintain appropriate business records, respond to complaints, protect our business and establish or defend legal claims.
Article 6(1)(a) – Consent
Where we specifically request your consent for optional activities, such as certain marketing communications.
5. Special Category Health Information – Article 9 UK GDPR
Health and medical information is classified as special-category personal data under UK GDPR and receives additional legal protection.
For the collection and use of health information necessary to assess your suitability for treatment, identify contraindications and maintain appropriate treatment records, we rely on:
Article 9(2)(a) – Explicit Consent
This allows us to process special-category personal data where you have given explicit consent for one or more specified purposes.
Before receiving treatment, you will be asked to provide explicit consent for the collection, use and storage of relevant health information.
You may withdraw your consent to this processing at any time by contacting us.
Withdrawing consent will not affect processing already lawfully carried out. Certain records may still need to be retained where another lawful basis and applicable Article 9 condition permit this, including where necessary for legal claims.
If you do not provide the health information necessary to assess treatment suitability, we may be unable to proceed with your appointment.
Consent to the processing of health information is separate from your informed consent to receive a treatment.
6. How We Store and Protect Your Information
We take reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, loss or misuse.
Client information may be stored through secure electronic consultation, booking and business record systems, including Jotform and Picktime.
Access to confidential treatment information is restricted to authorised persons who require it for legitimate business purposes.
We do not sell or rent your personal information to third parties.
7. How Long We Keep Your Information
We retain personal information only for as long as necessary to meet treatment, legal, insurance and professional requirements.
Adult consultation and treatment records
Our standard retention period is seven years from the client's last treatment, subject to any longer applicable legal, insurance or professional requirement.
This includes consultation forms, relevant health information, consent records and treatment notes.
Children's treatment records
Records relating to clients under 18 may require longer retention. These will be retained in accordance with applicable safeguarding, professional and insurance requirements.
Booking and financial records
Relevant financial and transaction records are generally retained for seven years, where necessary for tax, accounting and business record-keeping purposes.
General enquiries
Enquiry information that does not result in a booking will be retained only for as long as reasonably necessary to respond and manage the enquiry.
Marketing information
Marketing contact information will be retained while you remain subscribed or until it is no longer needed, subject to any minimal suppression records necessary to respect your preferences.
Records are reviewed periodically and securely deleted or anonymised when no longer required.
8. Sharing Your Information
Your personal information is treated confidentially.
We may share necessary information with trusted third-party service providers who support our business operations, including:
Picktime for appointment management.
Jotform for consultation and consent forms.
Payment processors for financial transactions.
Email and other business communication providers.
Professional advisers or insurers where reasonably necessary.
Information may also be disclosed where required by law or necessary for legal claims.
We do not routinely share your medical information with other healthcare practitioners without an appropriate lawful basis.
9. International Data Transfers
Some third-party service providers may process or store personal information outside the United Kingdom.
Where international transfers occur, we will ensure that appropriate protections are in place as required by UK data protection law, such as UK adequacy regulations or approved contractual safeguards.
Further information about relevant safeguards can be requested using the contact details in this notice.
10. Your Data Protection Rights
Under UK GDPR, you have rights concerning your personal information, subject to applicable legal conditions and exceptions.
These include the right to:
Access personal information held about you.
Request correction of inaccurate or incomplete information.
Request deletion in certain circumstances.
Request restriction of processing.
Object to certain processing activities.
Request data portability where applicable.
Withdraw consent where processing relies on consent.
To exercise your rights, please contact The Grateful Living.
We will respond within the timeframes required by applicable data protection law.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO).
Website: www.ico.org.uk
11. Marketing Communications
Where applicable, we may send information about treatments, wellbeing services, events, products or special offers.
We will obtain marketing consent where required by law.
You can unsubscribe from marketing emails at any time.
Your treatment consultation information will not be used to target you with marketing based on your medical history.
12. Changes to This Privacy Notice
We may update this Privacy Notice to reflect changes to our services, systems or legal requirements.
The latest version will be available on The Grateful Living website.
The Grateful Living
Syston, Leicestershire, United Kingdom