Privacy Policy

Last updated: 18/08/2025

Welcome to Toward Health. This Privacy Policy explains how we collect, use, and safeguard your personal information.

1. Who We Are

Toward Health is a privately run holistic health practice based in the UK. We provide personalised care and support to patients through in-person and remote services. If you have any questions about this policy or your data, you can contact us at:

  • Email: info@towardhealth.co.uk

2. What Information We Collect

We may collect the following types of personal data:

  • Identity & contact details

  • Booking & scheduling details

  • Clinical information you share in forms or sessions (including special-category data about health)

  • Practitioner notes and care plans

  • Photos or recordings where relevant and lawful

  • Communications with us

3. How We Collect Information

We collect information:

  • Directly from you via forms, email, WhatsApp, calls, or in-person

  • From booking tools when you make or change an appointment

  • From payment providers

4. Why We Collect Your Data

We only collect and use your information when necessary for:

  • Booking and managing appointments

  • Providing care and support tailored to your needs

  • Keeping accurate clinical records and continuity of care

  • Communicating about your care, appointments, and practical admin

  • Meeting our obligations

  • Meeting legal/regulatory obligations 

  • Safeguarding

  • Occasionally sending updates about our services, offerings, or relevant content

5. Lawful Bases for Processing

Under UK data protection law, we process your personal data on one or more of the following grounds:

  • Contract – to provide services you request and manage appointments

  • Legitimate interests – to operate safely, schedule efficiently, and maintain accurate records

  • Legal obligation – to comply with laws

  • Special-category data (health) – processed as necessary for the provision of care

6. Sharing and Disclosure

We do not sell, rent, or trade your data. Information is not shared outside the business unless we are required to do so by law.

By using our service you will use third-party services (such as booking and payment providers) who may process your data.

7. Data Security and Storage

We take appropriate steps to protect your data. Information is stored securely and handled with care. We retain records for as long as necessary to provide services, safeguard and meet legal obligations.

8. Your Rights

You have rights under data protection law, including the right to:

  • Request access to the information we hold about you

  • Ask for corrections to your personal details

  • Request deletion of your records.

We normally respond within one month. Some rights are qualified by legal/regulatory requirements.

9. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website. Significant changes will be communicated directly where appropriate.

10. How Long We Keep Data (Retention)

We aim to keep your records for at least 8 years after your last consultation.