Last Updated: 1st January 2026

Balanced & Blissed Limited (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal information is handled lawfully, fairly, and transparently. This policy explains what information we collect, how we use it, how it is stored, and your rights under UK data protection law.

If you have any questions, please contact: [email protected]

Who we are (Data Controller)

Balanced & Blissed Limited is the data controller for the personal information we collect in relation to our coaching, wellness, massage, consultancy, events, and related services.

What information we collect

The information we collect depends on your interaction with us and may include:

- Contact details (name, email, address, phone number)

- Appointment and service records

- Health, wellbeing, and lifestyle information relevant to treatment or coaching

- Assessment notes, treatment notes, or programme records

- Payment and purchase records (payment card details are handled only by secure third-party payment providers)

We only collect information that is relevant and necessary for service delivery, safety, administration, and legal/insurance purposes.

How we collect information

We collect information when you:

- Book appointments or services

- Complete intake or consent forms

- Communicate with us by email, phone, or online

- Register for content, newsletters, or events

- Purchase services, products, or programmes

- Lawful basis for processing

- Your information is processed under:

- UK GDPR Article 6(1)(b) — performance of a contract (providing services)

- UK GDPR Article 6(1)(c) — legal/insurance record-keeping where applicable

- Where health or wellbeing information is recorded:
UK GDPR Article 9(2)(h) — provision of health-related and wellbeing services

- Marketing communications are processed only with your explicit consent, which you may withdraw at any time.

How your information is used

We use your information to:

- Provide safe and appropriate services

- Maintain professional, clinical, and administrative records

- Process bookings and payments

- Contact you about appointments or service updates

- Meet legal, insurance, or regulatory requirements

- Send marketing updates where you have opted-in

We do not sell or share your information with third parties for marketing.

Sharing your information

- Your information may be shared only with:

- Secure service providers who support our business (e.g., booking systems, payment providers)

- Insurers or professional bodies where required

- Legal or regulatory authorities where there is a lawful obligation

All service providers act as data processors and must handle your information securely.

How your information is stored

- Records are stored securely in encrypted digital systems.
Where paper forms are used, they are scanned and securely destroyed.
- We minimise the use of paper and ensure safe handling of any temporary storage or transfer.

- Access to records is restricted and controlled.

How long we keep your information

Records are retained in line with professional and insurance requirements:

- Adults: 7 years after the final appointment

- Clients under 18: until 7 years after their 18th birthday (or longer if required by law or insurer)

After this period, records are securely deleted or destroyed.

Your rights

You have the right to:

- Access your personal data

- Request correction of inaccurate data

- Request restriction or deletion (where appropriate)

- Withdraw marketing consent at any time

- Complain to the Information Commissioner’s Office (ICO) if you have concerns

Requests are normally free of charge unless repetitive or excessive.

ICO website: ico.org.uk

To exercise your rights, contact: [email protected]

Changes to this policy

We may update this policy from time to time. The latest version will always be available on our website and in our retreat space.

If you have any questions regarding this policy, then please email [email protected] with your question.