Loving Tums Limites ("we", "us", "our") is committed to protecting the privacy, confidentiality, and security of our clients’ personal data. This policy outlines how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
We are a private healthcare and wellness service providing manual therapy, nervous system healing, trauma-informed care, and somatic rehabilitation for conscious women seeking holistic, deep, personalised healing strategies.
3. What Information We Collect
We may collect and process the following personal data:
Full name and contact details (email, phone, address)
Date of birth
Health and medical information relevant to your care
Treatment notes and session records
Payment and invoicing details
Communication records (emails, booking forms, messages)
4. How We Use Your Data
We use your personal data to:
Provide safe, personalised, and effective healthcare services
Manage communication, appointments, and follow-ups
Process payments and issue invoices
Comply with legal, regulatory, and professional requirements
Improve our services and enhance your experience
5. Lawful Basis for Processing
We process your data under the following lawful bases:
Consent: You have provided clear consent for us to process your data.
Contractual necessity: Data is required to provide agreed-upon service.
Legal obligation: To meet professional and legal healthcare record-keeping requirements.
Legitimate interest: To operate and deliver our services safely and efficiently.
6. Data Sharing
We do not sell or share your personal data for marketing purposes.
Your data may only be shared with:
Healthcare professionals, with your explicit consent
Secure third-party platforms (e.g. clinical systems, booking systems or payment processors)
Legal or regulatory authorities if required by law
All third-party partners are data protection compliant and handle data securely.
7. Data Storage and Security
We store personal data using secure, encrypted systems and protect paper records (if used) in locked storage. We retain client health records for a minimum of 7 years, as required by healthcare regulatory guidelines.
8. Your Rights
Under the UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure (in certain circumstances)
Withdraw consent at any time
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, contact us using the details below.
9. Contact Information
If you have any questions about this policy or how your data is handled, please contact: