Privacy Policy — Centre for Integral Health

Last updated: July 2026

This privacy policy explains how the Centre for Integral Health ("we", "us", or "our") collects, uses, maintains, and protects your personal data when you visit www.centreforintegralhealth.com or engage with the practitioners, therapies, and services operating through the centre.

We are committed to safeguarding your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

The Centre for Integral Health acts as a data controller for information collected via the website and general centre operations. Individual practitioners operating from the centre may also act as independent data controllers for their specific client clinical records.

If you have any questions about this privacy policy or how your data is handled, please contact us:

• Address: Office 1, Unit 8, Hartley Business Centre, 272-284 Monkmoor Road, Shrewsbury, SY2 5ST
• Phone: 01743 369866
• Contact: Send us a message using our contact form here
• Website: https://centreforintegralhealth.com/

2. Information We Collect

Depending on how you interact with our website and services, we may collect:

• Contact Information: Name, email address, postal address, and phone number.
• Special Category Health Data: Information regarding your health history, symptoms, treatment records, or wellbeing notes shared when booking therapies or consultations at the centre. Under UK GDPR, health data is classified as "special category data" and is handled with strict confidentiality and enhanced security.
• Transaction & Booking Data: Details relating to your bookings, payments, and communications with us. (Full credit or debit card details are processed securely via third-party payment gateways and are not stored by us).
• Technical & Cookie Data: IP address, browser type, operating system, and website usage data collected through cookies to ensure the secure and effective operation of the site.

3. Lawful Bases and Conditions for Processing

Under UK data protection law, we rely on specific legal grounds to process your data:

• Consent: Where you have given clear, explicit consent (such as subscribing to our newsletter or filling out an initial enquiry form). You can withdraw your consent at any time.
• Contract: Where processing is necessary to fulfil a booking or service you have requested.
• Legal Obligation: Where we are required by law to retain records (such as financial transactions or regulatory compliance).
• Healthcare Provision: Special category health data is processed under UK GDPR Article 9(2)(h) for the provision of health or social care, managed by professionals bound by strict legal confidentiality.

4. How We Use Your Information

We use the data we collect for clear, limited purposes:

• To coordinate appointments, therapies, and client care across the centre.
• To respond to your enquiries, customer service requests, and support needs.
• To process bookings and transactions securely.
• To send periodic updates, newsletters, or information about centre services—only where you have opted in to receive them. Every marketing email includes a clear unsubscribe link.
• To monitor and improve the performance, security, and user experience of our website.

5. Data Retention

• Client & Clinical Records: In line with professional standards and insurance requirements, physical and digital treatment records are securely retained for a minimum of 7 years following your last visit (or until a minor turns 25, where applicable).
• General Enquiries & Marketing Data: Contact details for newsletters or general website enquiries are kept only for as long as you remain subscribed or active, and are removed promptly upon request.

6. Sharing Your Information

We do not sell, trade, or rent your personal identification information to third parties.

We may share your data only in the following limited circumstances:

• Trusted Service Providers: With third-party partners who assist us in operating our website, managing bookings, or sending communications (such as IT support or email platforms). These providers are bound by strict data processing agreements to protect your information.
• Centre Practitioners: If you book with a specific resident practitioner at the centre, necessary contact and health details are shared directly with them for your care.
• Legal Requirements: If required to do so by law, court order, or to protect the vital interests and safety of individuals.

7. Your Data Protection Rights

Under UK data protection law, you hold several rights regarding your personal information:

• The right to access: You can request copies of your personal data or clinical notes held by us.
• The right to rectification: You can request correction of inaccurate or incomplete data.
• The right to erasure: You can ask for your personal data to be deleted, subject to legal and professional retention obligations (such as insurance-mandated record keeping).
• The right to restrict or object: You can object to the processing of your data, particularly regarding direct marketing.
• The right to data portability: You can request the transfer of your data to another service provider.

To exercise any of these rights, please contact us using the details in Section 1. We aim to acknowledge and respond to all formal data requests within 30 days. If you remain dissatisfied, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner’s Office (ICO).

8. How to Raise a Data Protection Concern or Complaint

I always aim to handle your personal details with the utmost care, respect, and confidentiality. However, if you ever feel that your data has not been managed in line with UK data protection laws, you have a formal statutory right to lodge a complaint directly with me.

You do not need to use formal legal language to raise a concern. You can get in touch in whatever way feels most comfortable for you:

• Online: Submit your concern using our contact form here
• By Post: Centre for Integral Health, Office 1, Unit 8, Hartley Business Centre, 272-284 Monkmoor Road, Shrewsbury, Shropshire, SY2 5ST
• In Person or Online: You are welcome to raise your concern directly during a conversation, or via an electronic message.

What happens next:

• Acknowledgement: I will formally acknowledge your complaint within 30 calendar days of receiving it.
• Investigation: I will look into the matter thoroughly and without undue delay, assessing exactly how your information was processed.
• Updates & Outcome: If an investigation requires more time due to its complexity, I will keep you clearly updated on my progress. Once resolved, I will provide you with a meaningful written outcome explaining the steps taken.
• Further Escalation: While I hope we can resolve any reflections or concerns together, you always retain the right to escalate your complaint to the Information Commissioner’s Office (ICO) at any time via their website (www.ico.org.uk).

9. Changes to This Privacy Policy

We review and update this privacy policy periodically to reflect changes in our practices, services, or legal obligations. The most current version will always be published on this page.