Privacy Policy — Claire King Therapies
Updated June 2026


Claire King Therapies ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains what personal data we collect, why, how we use it, and your rights.

Data Controller: Claire King Therapies
Contact email: [email protected]

1. What Data We CollectDepending on how you interact with us, we may collect:
  • Contact details: name, email address, phone number, postal address
  • Booking information: appointment dates/times, treatment history, via our online booking system, Fresha.
  • Health information: relevant medical/health history you provide before or during treatment, including information relating to infants and children where you are booking treatment for them (this is classed as "special category data" under UK GDPR and is treated with extra care — see Section 4)
  • Payment information: billing details processed through our booking system's payment provider and, where payment is taken directly, basic transaction details (we do not store full card numbers)
  • Newsletter/marketing data: name and email address, if you subscribe to our newsletter
  • Website usage data: basic technical data collected automatically by Weebly (our website host) as part of running the site, such as IP address and browser type
2. How We Use Your DataWe use your data to:
  • Book and manage appointments
  • Provide safe, informed craniosacral therapy treatment
  • Process payments
  • Communicate with you about appointments or enquiries
  • Send newsletters, if you've opted in (you can unsubscribe at any time)
  • Meet our legal and professional obligations, including record-keeping requirements under CSTA (Craniosacral Therapy Association)
3. Legal Basis for Processing
  • Contract: processing needed to provide treatment you've booked
  • Consent: for newsletters, and for collecting health information before treatment
  • Legal obligation: retaining records as required by our professional bodies
  • Legitimate interests: running and improving our practice and website
4. Children's and Infants' DataWhere treatment is provided to a baby, infant, or child, personal and health data is provided by and collected with the consent of a parent or legal guardian. We only use this information to provide safe, appropriate treatment and keep accurate clinical records. It is never used for marketing.
5. Data SharingWe do not sell your data. We may share limited data with:
  • Our online booking system provider [Fresha] and its payment processor, to manage appointments and payments
  • Professional bodies (CSTA), if required for regulatory or complaint purposes
  • Other professionals involved in your care, only with your explicit consent (e.g. onward referral to a GP, IBCLC, or other practitioner)
We do not transfer your data outside the UK except where our service providers (e.g. Weebly, booking platform) do so as part of their standard operations, in which case they are required to provide adequate safeguards.
6. CookiesOur website is hosted on Weebly, which uses standard cookies necessary for the site to function (e.g. security, load balancing). We do not currently run additional analytics or marketing cookies. For details on Weebly's own cookie practices, see Weebly's Cookie Policy.
We may in future introduce additonal cookies or analytics toos to help us understand how visitors use our site. If we do, we will update this policy and, if required, seek consent via a cookie banner.
7. Data RetentionWe retain clinical records in line with professional body guidance:
  • Adult client records: a minimum of 8 years from the date of last treatment
  • Children's/infants' records: until the client's 25th birthday (or 26th if they were 17 at their last treatment)
Newsletter data is kept until you unsubscribe. Enquiry data not leading to booking is deleted after a reasonable period.
8. Your RightsUnder UK GDPR, you have the right to:
  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to our legal record-keeping obligations)
  • Object to or restrict certain processing
  • Withdraw consent at any time (e.g. unsubscribe from our newsletter)
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, contact us at [email protected]
9. Changes to This PolicyWe may update this policy from time to time. The "last updated" date at the top will reflect the most recent version.

This policy is provided for general guidance and is not a substitute for independent legal advice. You may wish to have it reviewed by a solicitor or data protection consultant before publishing, particularly given the special category health data involved in your practice.

​