Privacy Policy

Fiona Filby Wellbeing Ltd

At Fiona Filby Wellbeing, I take your privacy seriously and am committed to protecting your personal information. This privacy policy explains what information I collect, why I collect it, how it is used and how it is kept secure.

Who is responsible for your information?

Fiona Filby Wellbeing Ltd is responsible for the personal information collected in connection with my treatments and services.

If you have any questions about how your personal information is used, you can contact me through the contact details provided on this website.

Information I may collect

When you contact me, book an appointment or receive a treatment, I may collect information including:

  • your name and contact details;

  • appointment and booking information;

  • information you provide during your consultation;

  • relevant health and medical information, including medications, allergies, injuries or conditions that may affect your treatment;

  • treatment notes and details of treatments or essential-oil blends prepared for you; and

  • correspondence between us relating to your appointments or treatments.

I only ask for information that is relevant to providing your treatment safely and appropriately.

Health information is classed as special-category personal data under UK data-protection law and receives additional protection.

Why I collect your information

I use your personal information to:

  • arrange and manage appointments;

  • carry out appropriate consultations before treatment;

  • assess whether a treatment is appropriate for you;

  • personalise your massage and aromatherapy treatment;

  • select appropriate essential oils and record bespoke blends;

  • maintain appropriate treatment records;

  • contact you about your appointment or treatment where necessary; and

  • meet relevant professional, insurance, accounting or legal requirements.

My lawful basis for using your information

For ordinary personal information required to arrange and provide your treatment, I process information where it is necessary to provide the service you have requested and, where appropriate, for the legitimate interests of operating Fiona Filby Wellbeing responsibly.

Where I collect health information or other special-category information during your consultation, an additional legal condition is required. Where applicable, I will obtain your explicit consent to process this information for the purposes of providing your treatment.

You can withdraw consent where consent is the basis on which information is processed. This does not affect processing that took place lawfully before consent was withdrawn.

How your information is kept secure

I take appropriate steps to protect your personal information from unauthorised access, loss, misuse or disclosure.

Access to client records is restricted and information is stored securely. I do not sell your personal information to third parties.

Sharing your information

Your personal information will not normally be shared with anyone else.

There may be limited circumstances in which information is shared with a service provider that I use to operate the business, for example an appointment-booking, website or payment provider. Such providers are only given information necessary to provide their service.

Information may also be disclosed where I am legally required to do so, or where necessary in connection with the establishment, exercise or defence of a legal claim.

How long I keep your information

I retain client and treatment records only for as long as they are reasonably required for the purposes for which they were collected, including relevant professional, insurance and legal requirements.

When information is no longer required, it will be securely deleted or destroyed.

Marketing

I will not add you to a marketing mailing list simply because you have booked a treatment.

If I introduce email or other direct marketing in the future, I will only use your information for marketing in accordance with applicable data-protection and electronic-marketing requirements, and you will be able to unsubscribe.

Your rights

Depending on the circumstances, you have rights over your personal information, including the right to:

  • ask what personal information I hold about you;

  • request a copy of your information;

  • ask for inaccurate information to be corrected;

  • ask for information to be erased in certain circumstances;

  • request restriction of the way your information is processed;

  • object to certain uses of your information; and

  • withdraw consent where processing is based on consent.

If you have concerns about how your information is being handled, please contact me in the first instance. You also have the right to raise a concern with the Information Commissioner's Office (ICO).

Information Commissioner's Office

Changes to this privacy policy

This privacy policy may be updated from time to time to reflect changes in my services, business practices or legal requirements.

Last updated: September 2026