Privacy Policy
Last updated: October 2026
At Chiltern Wellness, we respect your privacy and am committed to protecting your personal information. This Privacy Notice explains how we collect, use, store and protect your personal information when you visit the Chiltern Wellness website, contact us, make an appointment or receive a treatment.
Chiltern Wellness is a sole-trader business operated by Sarah Searle Anker.
1. Who is responsible for your information?
For the purposes of UK data protection law, Sarah Searle Anker, trading as Chiltern Wellness, is the Data Controller for the personal information we collect and process in connection with my business and the services we provide.
If you have any questions about how your information is handled, please contact us at:
Email: hello@chilternwellness.uk
Postal address:
Chiltern Wellness
Medlar Street
Weston Turville
Aylesbury
Buckinghamshire
2. What information do I collect?
Depending on how you interact with Chiltern Wellness, we may collect:
your name;
email address;
telephone number;
address;
appointment and treatment details;
information you provide when making an enquiry;
information contained in consultation and treatment records;
information about your health, medical history, medications, injuries, allergies or other circumstances that may be relevant to providing your treatment safely;
payment and transaction information where relevant; and
information relating to communications between you and Chiltern Wellness.
When you use the Chiltern Wellness website, certain technical information may also be collected automatically, such as your IP address, browser type, device information and information about how you use the website.
We only collect information that is relevant and reasonably necessary for the purposes described in this Privacy Notice.
3. Health and medical information
Some information you provide as part of your consultation or treatment may constitute special category data, particularly information concerning your health.
This may include information about medical conditions, medications, injuries, allergies, previous treatments and other health information that is relevant to your treatment.
Health information receives additional protection under UK data protection law.
We collect and process this information only where it is relevant and necessary to understand your individual circumstances and to provide your treatment safely and appropriately.
Where we rely on explicit consent to process health information, this consent will be requested separately and clearly.
Providing accurate health information is important for your safety. If you choose not to provide information that is necessary for us to determine whether a treatment is appropriate, we may be unable to provide that treatment.
4. How we use your information
We may use your personal information to:
respond to enquiries;
arrange and manage appointments;
provide reflexology and other treatments;
understand your individual health and wellbeing circumstances;
maintain appropriate treatment records;
communicate with you about appointments;
process payments;
maintain business, accounting and insurance records;
respond to questions, concerns or complaints;
maintain the security and functionality of my website and business systems;
comply with legal obligations; and
send marketing communications where you have specifically chosen to receive them.
We will not use your personal information for purposes that are incompatible with those described in this Privacy Notice.
5. Our lawful bases for processing your information
Depending on the circumstances, we rely on the following lawful bases under UK GDPR:
Contract
We may process your personal information where this is necessary to arrange and provide a treatment or service that you have requested.
Legitimate interests
We may process information where this is necessary for the reasonable running and administration of Chiltern Wellness, including managing enquiries, appointments, business records, security and client communications, provided that this does not override your rights and freedoms.
Legal obligation
We may process and retain information where necessary to comply with legal, accounting, tax, insurance or other regulatory requirements.
Consent
Where appropriate, we may ask for your consent, including for certain marketing communications or other processing where consent is required.
Where we rely on consent, you can withdraw it at any time.
For health information, we will also rely on an appropriate additional condition under Article 9 of UK GDPR for processing special category data.
6. Where your information is stored
We use trusted specialist software providers to help operate Chiltern Wellness.
Acuity Scheduling
We use Acuity Scheduling, part of the Squarespace group, to manage appointments and online bookings.
When you book an appointment, information such as your name, contact details, appointment details and any information you choose to provide through the booking process may be processed through Acuity.
Cliniko
We use Cliniko as our secure client management and treatment-record system.
Cliniko is used to store client information and treatment records, including relevant health information that you provide as part of your consultation and ongoing treatment.
For this information, Chiltern Wellness is the Data Controller and Cliniko acts as a Data Processor, processing information on my behalf.
Cliniko has security measures in place to protect client information, including encryption and access controls.
7. Other third parties
We may also use trusted third-party providers where necessary to operate Chiltern Wellness, including:
Squarespace – website hosting and website services;
Acuity Scheduling – appointment booking and scheduling;
Cliniko – client management and treatment records;
payment providers, where applicable;
email and communication providers; and
professional advisers, such as accountants, where necessary.
We will not sell, rent or otherwise make your personal information available to third parties for their own marketing purposes.
Third-party providers may process personal information on my behalf where necessary to provide their services. We take reasonable steps to ensure that appropriate data protection arrangements are in place.
8. Keeping your information secure
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.
Access to client information is restricted to what is reasonably necessary for the operation of Chiltern Wellness and the provision of treatments.
However, no method of storing or transmitting information electronically can be guaranteed to be completely secure.
9. How long we keep your information
We will retain personal information only for as long as it is reasonably necessary for the purpose for which it was collected, taking into account applicable legal, accounting, insurance and professional requirements.
Treatment and health records will be retained for an appropriate period in accordance with applicable legal, professional and insurance requirements.
Where information is no longer required, it will be securely deleted or destroyed.
10. Marketing
We may occasionally contact existing clients about Chiltern Wellness services, news or updates where permitted by applicable data protection and electronic marketing laws.
Where we require your consent to send marketing communications, we will ask you to actively opt in.
You can withdraw your consent or unsubscribe from marketing communications at any time.
Your decision not to receive marketing communications will not affect your ability to book or receive treatments from Chiltern Wellness.
11. Cookies
The Chiltern Wellness website may use cookies and similar technologies.
Some cookies are necessary for the website to function, while others may be used for analytics or other purposes and may require your consent.
You can manage cookie preferences through the website's cookie controls and through your browser settings.
Third-party services connected to a Squarespace website may also use cookies in accordance with their own privacy policies.
12. Your data protection rights
Under UK data protection law, you may have the right to:
ask for a copy of the personal information we hold about you;
ask for inaccurate information to be corrected;
request deletion of your information in certain circumstances;
request that processing of your information is restricted in certain circumstances;
object to certain types of processing; and
where applicable, request that your information is provided to you in a portable format.
You also have the right to withdraw consent where we are relying on consent as the lawful basis for processing.
These rights are subject to certain legal conditions and exemptions. For example, we may need to retain certain information where there is a legal, professional or insurance requirement to do so.
To exercise your rights, please contact me using the details below.
13. Third-party websites
The Chiltern Wellness website may contain links to third-party websites, including social media platforms and external services.
Once you leave the Chiltern Wellness website, we are not responsible for the privacy practices or content of those websites. We recommend reviewing their own privacy policies before providing them with personal information.
14. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to my business, the services we provide or applicable data protection requirements.
The latest version will always be published on this page.
15. Complaints
If you have any concerns about how I have handled your personal information, please contact us first so that we can try to resolve your concern.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.
Information about making a complaint is available from the ICO.
16. Contact
Sarah Anker
Chiltern Wellness
Medlar Street
Weston Turville
Aylesbury
Buckinghamshire
Email: hello@chilternwellness.uk