top of page

Privacy Policy

Last updated: January 2026

RelaxBeyond is committed to protecting your privacy and personal data. This Privacy Policy explains how personal information is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

1. Data Controller

RelaxBeyond is operated by Caroline Bauch, sole trader, England & Wales.

RelaxBeyond acts as the data controller for all personal data collected.

 

2. Personal Data Collected

RelaxBeyond may collect and process the following categories of personal data:

  • Name, address, email address, telephone number

  • Date of birth (including for minors)

  • Emergency contact details

  • Health and medical information relevant to therapy

  • Session notes and treatment records

  • Payment and booking information

Health data is classified as special category data under UK GDPR.

 

3. Lawful Basis for Processing

Personal data is processed under the following lawful bases:

  • Contract – to provide booked services

  • Legal obligation – record keeping and insurance requirements

  • Vital interests – in case of medical emergency

  • Explicit consent – for processing health-related data

 

4. How Data Is Stored

  • Paper records are stored securely in locked storage

  • Electronic records (e.g. Excel files) are password protected

  • Reasonable steps are taken to prevent unauthorised access

 

5. Data Retention

Personal and health records are retained for 7 years following the last session, in line with professional and insurance guidance, after which they are securely destroyed.

 

6. Data Sharing

Personal data will not be shared with third parties except:

  • Where legally required

  • In the event of a medical emergency

  • With your explicit consent

RelaxBeyond does not sell or share personal data for marketing purposes.

 

7. Your Rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure (where legally permitted)

  • Restrict or object to processing

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests should be made in writing.

 

8. Changes to This Policy

This Privacy Policy may be updated from time to time. The most recent version will always apply.

bottom of page