Privacy Policy

Last updated: January 2026

1. Introduction

Eva Holistic Therapy Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data when you use our website, book treatments or contact us.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

Business name: Eva Holistic Therapy Ltd

Address: 11 Stockbridge Road, Winchester, SO22 6RN

Email: eva@evaholistictherapy.com

Phone: 07377 706 535 / 01962 588768

For the purposes of data protection law, we are the data controller.

3. What personal data we collect

We may collect and process the following information:

a) Personal details

  • Name

  • Email address

  • Phone number

b) Booking and appointment data

  • Appointment details

  • Treatment history

  • Notes relating to your booking

c) Medical and consultation information

Where relevant, we may collect health-related information to ensure treatments are safe and appropriate. This is treated as special category data and handled with additional care.

d) Payment information

Payments are processed securely via third-party providers. We do not store full payment card details.

e) Website usage data

  • IP address

  • Browser type

  • Pages visited

  • Cookies and analytics data

4. How we use your data

We use your personal data to:

  • Manage bookings and appointments

  • Provide treatments and services safely

  • Communicate with you about your appointments

  • Send newsletters or marketing communications (where consent is given)

  • Improve our services and website

  • Meet legal and regulatory obligations

5. Legal basis for processing

We process health-related information under Article 9(2)(a) (explicit consent) and Article 9(2)(h) (provision of health care or treatment) of the UK GDPR.

  • Contract – to provide booked services

  • Consent – for marketing communications

  • Explicit consent – for health-related information

  • Legal obligation – where required by law

  • Legitimate interests – to operate and improve our business

6. Third-party services

We use trusted third-party providers to support our services, including:

  • Squarespace (website hosting)

  • Acuity Scheduling (online bookings)

  • Payment providers (e.g. Stripe)

These providers only process data on our instructions and in line with data protection laws.

7. Data storage and security

We take appropriate measures to protect your personal data and store it securely. Access is limited to authorised personnel only.

We retain personal data for up to 7 years in line with insurance and legal requirements. Marketing data is retained until consent is withdrawn.

8. Automated Decision-Making

We do not use automated decision-making or profiling.

9. Your rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Withdraw consent at any time

  • Object to or restrict processing

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us using the details above.

10. Cookies

Our website uses cookies to improve your browsing experience, analyse site traffic and support our services.

Cookies are small text files placed on your device when you visit a website. They help the site function properly and provide information about how visitors use the site.

We use cookies for the following purposes:

Strictly necessary cookies

These cookies are essential for the website to function correctly, including page navigation and secure access to booking features. These cookies do not require consent.

Analytics cookies

These cookies help us understand how visitors use our website so we can improve its performance and content (for example, page visits and traffic sources). These cookies are only used if you consent.

Marketing cookies

Where applicable, these cookies may be used to support marketing activities and measure the effectiveness of advertising. These cookies are only used with your consent.

When you first visit our website, you will be asked to accept or manage your cookie preferences via our cookie banner. You can change or withdraw your consent at any time by adjusting your browser settings or via our cookie banner.

Please note that disabling certain cookies may affect how the website functions.

Some cookies may be set by trusted third-party services we use, such as website analytics or online booking tools. These third parties are responsible for their own cookie policies.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.