Privacy Policy
Laura Brand Natural Health
Your privacy matters to me. If you book an appointment, attend a workshop, contact me or use this website, I may need to collect some information about you. This policy explains what I collect, why I need it and how I look after it.
Who is responsible for your information?
Laura Brand Natural Health is responsible for the personal information collected through this website and the services I provide.
Contact:
Laura Brand Natural Health
Email: [TBC]
Telephone: [TBC]
If you have any questions about your information or how it is used, please contact me.
What information do I collect?
The information I collect depends on how you interact with me and may include:
- your name and contact details;
- appointment and booking information;
- payment and transaction information;
- correspondence between us;
- information you provide when attending a workshop;
- health, medical and family history;
- details of medicines, supplements and herbal products you take;
- information about diet, lifestyle, sleep, stress and wellbeing;
- notes made during or following a consultation or treatment; and
- photographs of your irises if you have an iridology consultation.
I will only collect information that is reasonably necessary for the service I am providing.
Health information
Some of the information you share with me is particularly sensitive. Health information is classed as special category personal data under UK data protection law and is given additional protection.
Where I need to collect health information for a consultation or treatment, I will explain why it is needed and will handle it confidentially and securely.
I will establish and document the appropriate lawful basis and special-category condition for processing this information before providing services requiring health information.
Why do I use your information?
I may use your information to:
- respond to enquiries;
- arrange and manage appointments and workshop bookings;
- provide the service you have booked;
- understand information relevant to an iridology consultation or massage;
- maintain appropriate consultation and treatment records;
- contact you about an appointment or service;
- process payments and maintain financial records;
- meet legal, insurance and professional obligations; and
- manage and improve my business and website.
I won’t use information you’ve provided during a private consultation for unrelated marketing.
My lawful basis for using your information
UK data protection law requires me to have a lawful reason for using your personal information.
Depending on the circumstances, I may process ordinary personal information because it is necessary to provide a service or take steps at your request before providing one, because I have a legal obligation to retain or use particular information, or because I have a legitimate business interest that does not override your rights.
Health information and other special category information requires an additional legal condition. The condition relied upon will depend upon the nature of the service and my professional status at the time the information is collected.
Where I rely on consent, including explicit consent where required, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Who do I share your information with?
I don’t sell your personal information.
I may use trusted companies to help me operate the business, for example providers of:
- website hosting;
- appointment and booking systems;
- secure record storage;
- email;
- payment processing; and
- accounting or other professional services.
These providers should only receive the information necessary to perform their particular service and, where they process information on my behalf, must handle it appropriately.
I may also disclose information where I am legally required to do so, or where disclosure is necessary to protect someone’s vital interests or meet an applicable safeguarding obligation.
I will not routinely share information about your health with your GP or another healthcare professional without an appropriate legal basis and, where required, your permission.
Iris photographs
If you have an iridology consultation, close-up photographs of your irises may be taken as part of the consultation.
These photographs will be treated as confidential personal information and stored securely with, or linked to, your consultation record.
I will not use identifiable iris photographs for advertising, social media, teaching, presentations or other purposes outside your consultation without establishing an appropriate lawful basis and obtaining any consent required.
How long do I keep your information?
I won’t keep personal information for longer than necessary.
Different types of information may need to be retained for different periods depending on the reason it was collected and any legal, insurance or professional record-keeping requirements that apply.
I will maintain a retention schedule setting out the periods that apply to consultation and treatment records, financial information, enquiries, workshop bookings and other information. When information is no longer required, it will be securely deleted or destroyed.
How do I keep your information safe?
I take reasonable steps to protect personal information against loss, unauthorised access, alteration or disclosure.
This includes appropriate security for electronic records, password protection and access controls, secure storage of any paper records and limiting access to personal information to those who genuinely need it.
Because health information is particularly sensitive, I take additional care over how consultation and treatment records are stored and accessed.
Marketing
I will only send marketing communications where permitted by law.
If you choose to receive news about workshops, events or other services, you can change your mind and unsubscribe at any time.
Administrative messages about an appointment you have booked are not marketing communications.
Cookies and website information
My website may use cookies and similar technologies to make the website work and, where applicable, to understand how it is being used.
Where consent is legally required for non-essential cookies, these will not be placed until you have made your choice.
More information about cookies used by this website can be found in my Cookie Policy.
Your rights
Depending on the circumstances, data protection law gives you rights over your personal information. These may include the right to:
- ask what information I hold about you and obtain a copy;
- ask me to correct inaccurate information;
- ask for information to be deleted in certain circumstances;
- ask me to restrict how information is used;
- object to certain uses of your information;
- receive certain information in a portable format; and
- withdraw consent where consent is the basis on which information is being used.
These rights aren’t absolute and there may be circumstances in which I am legally entitled or required to retain information.
If you would like to exercise any of these rights, please contact me at [email address].
Concerns or complaints
If you have a concern about how I have handled your information, please contact me first and I will do my best to resolve it.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
Changes to this policy
I may update this Privacy Policy occasionally as my services or legal obligations change. The latest version will always be available on this website.
Last updated: September 2026