Confidentiality & GDPR Privacy Policy
ICO Registration Reference: ZC003129
Registered Practitioner: Isabella Starkey-Rodgers (HCPC Registered Physiotherapist, Reiki & Hypnotherapy Practitioner)
Business: Lumarise Therapies & Wellbeing
Email: therapy@lumarise.co.uk
Phone: 07984 753 140
1. Purpose of this policy
This policy explains how your personal information is collected, stored, and protected in line with the UK GDPR and the Data Protection Act 2018. It also outlines how confidentiality is maintained throughout and after your treatment.
2. What information I collect
To provide safe and effective treatment, I will collect and securely store information such as:
Your full name, address, phone number, and email
Date of birth and emergency contact details
Relevant medical history, medication, allergies, and GP information
Notes relating to assessments, treatment plans, and session outcomes
Consent forms and correspondence related to your care
This information is collected directly from you during consultations, consent forms, and communications.
3. Lawful basis for processing
Your data is processed under the lawful bases of:
Contract: to provide agreed therapy or treatment services
Legal obligation: to maintain accurate health records as required by professional regulators
Consent: for communications, marketing updates, and sensitive information such as health details
4. How your data is stored
All records are stored securely in password-protected digital files on an encrypted device and, where relevant, locked paper files.
Data is never shared with third parties except:
With your explicit consent (e.g., sharing with your GP or another therapist)
Where required by law (e.g., safeguarding concerns or legal orders)
I retain adult client records for seven years after the last treatment (children’s records are retained until age 21 + 7 years, whichever is longer) in accordance with professional guidelines.
5. Confidentiality
Everything discussed during treatment is treated with strict confidentiality.
Confidentiality may only be broken if:
There is a risk of serious harm to yourself or others
There is a safeguarding concern involving a child or vulnerable adult
I am legally required to disclose information to authorities
Wherever possible, I will discuss this with you before any disclosure is made.
6. Your rights
You have the right to:
Access the personal information I hold about you
Request correction of any inaccurate information
Request deletion of your data (unless required for legal reasons)
Withdraw consent at any time for non-essential communications
Complain to the ICO if you believe your data has been misused
You can learn more about your rights here: www.ico.org.uk/your-data-matters
7. Contact details
If you have any questions or wish to exercise your data rights, please contact:
Isabella Starkey-Rodgers
Lumarise Therapies & Wellbeing
📞 07984 753 140
8. Review
This policy is reviewed annually or whenever legal or operational changes occur.
Last updated: September 2026