The Craniosacral Practice – Privacy Notice

As a client, I collect and hold certain personal information to provide treatment and comply with data protection laws, including the General Data Protection Regulation (GDPR). This notice explains how your information is used and your rights.

Contact Details

Phone: 07970 174502

Email: madeleine@thecraniosacralpractice.co.uk

What information I collect and why

To provide care, I collect:

  • Name, address, and contact details
  • Date of birth
  • Health information (medical history, conditions, allergies, requirements)

To meet legal requirements, I also collect:

  • Name and contact details
 Lawful basis for using your data

I process your data under:

  • Legal obligation – to comply with the law
  • Legitimate interests – to manage and run my practice effectively

Some rights (such as erasure, objection, and portability) may be limited where data is required by law.

Where your data comes from 

  • Directly from you

How long I keep your information

In line with professional guidelines (CSTA):

  • Adults: at least 8 years after your last visit
  • Children: until age 25 (or 26 if treatment ended at 17)
  • If capacity is impaired: at least 15 years

In practice, I keep records for up to 10 years, after which they are securely destroyed.

Confidentiality and data sharing

Your information is kept strictly confidential and is not shared without your consent, except where necessary:

  • To provide your care
  • To meet legal obligations (e.g. court orders)
  • In the public interest (e.g. serious crime prevention)
  • Where permitted under relevant health regulations

I may discuss cases in supervision, but never with identifying details.
If I am unable to continue practice, someone may contact you on my behalf.

How to complain

If you have concerns, please contact me using the details above.

If you remain dissatisfied, you can contact the Information Commissioner’s Office (ICO):

Last updated: 5 May 2026