Privacy notice
Last updated 18 October 2026
This notice explains what personal information I hold about you, why, and how you can ask to see or remove it.
Who I am
Albion Ayurveda is the trading name of Emily Nichols, a sole trader in Falmouth, Cornwall. I am responsible for your information (the "data controller") and I'm registered with the Information Commissioner's Office (ICO).
This notice covers clients, workshop guests, enquiries and people on my mailing list.
What I collect
-
Contact details: your name, phone number, email and, for home visits, your address.
-
Your health and consent form: health information you give me so I can treat you safely, such as conditions, medication, allergies and injuries.
-
Session notes: what we did in each session and anything to bear in mind next time.
-
Bookings and payments: dates, what you booked and what you paid. I never store card details.
-
Mailing list: your name and email, only if you sign up.
Why I use it, and the legal basis
-
Contact details, bookings and payments: to arrange and provide your sessions. Legal basis: our agreement (contract).
-
Health information and session notes: to treat you safely and suitably. Legal basis: your explicit consent, given on the health and consent form.
-
Payment records: to keep business accounts. Legal basis: legal obligation (tax).
-
Mailing list: to send news, workshops and offers you asked for. Legal basis: your consent.
You can withdraw consent at any time. If you withdraw consent for your health information, I may not be able to treat you safely.
Who sees it and where it is kept
-
Only me. I never sell or share your information for marketing.
-
Stored securely in an encrypted, password-protected cloud account with two-step verification. Paper forms are scanned the same day and then shredded.
-
Services I use to run the business may hold some of it on my behalf: my website and booking system, email, and cloud storage. Some of these providers may store data outside the UK, with the legal safeguards UK law requires.
-
Only if I have to: my insurer if there is a claim, my accountant or HMRC for tax, or emergency services if your safety is at risk.
How long I keep it
-
Health forms and session notes: 7 years after your last session, as my insurer requires.
-
Booking and payment records: 6 years, for tax.
-
Mailing list: until you unsubscribe (every email has a link).
-
Enquiries that don't lead to a booking: up to 1 year.
Once the time is up, I securely delete your information.
Your rights
You can ask me to:
-
give you a copy of the information I hold about you
-
correct anything that's wrong
-
delete your information, unless I must keep it by law or for insurance
-
stop or limit how I use it
-
stop sending you emails, at any time
To ask, email emily@albionayurveda.com. I'll reply within one month, free of charge.
If you're unhappy with how I've handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office: ico.org.uk · 0303 123 1113.