Privacy Policy
Last updated: 13 November 2026
This policy explains how I collect, use, share and protect your personal information when you contact me, book or receive a session, or visit this website. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
1. Who I am
Remarkable-Healers is run by Patricia (Trish) Raven, a sole trader based in Ashford, Middlesex. I am the data controller for the personal information described in this policy, which means I decide how and why it is used.
Email: trish@remarkablehealers.com
Telephone: 07768 308047
I am registered with the Information Commissioner’s Office (ICO). Registration number: ZB298257.
2. The information I collect
Contact and identity details: your name, address, email address, telephone number and age or date of birth.
Client records: notes from consultations and sessions, your health history, symptoms, treatment plans, remedies and supplements recommended, and how you are progressing. This includes health information.
Genetic information: if you take part in Genomics sessions, the results of your DNA test.
Payment records: what you paid, when, and how. I do not store your card details. Card payments are handled by the payment provider, not by me.
Correspondence: emails, messages and notes of phone calls with you.
Health and genetic information are “special category data” under the law and need extra protection. I explain below how I handle them.
3. How I collect it
Almost all of it comes directly from you: when you phone or email me, fill in a client intake form, attend a session, or pay me. If someone else gives me information about you (for example a parent booking for a child), I expect them to have your permission or the authority to do so. DNA test results come from the testing laboratory, with your agreement.
4. Why I use it, and my legal basis
The law requires me to have a lawful reason (a “lawful basis”) for each use of your information:
To reply to your enquiries and arrange appointments: my legitimate interests in running my practice and responding to you, or steps you have asked me to take before booking.
To provide your sessions, keep client records and follow up: to perform my contract with you.
To keep financial and tax records: to comply with a legal obligation.
To keep records in case a question or complaint arises later: my legitimate interest in being able to answer questions about past sessions and defend legal claims.
To send you occasional news about my services: only with your consent, which you can withdraw at any time by asking me to stop or replying “unsubscribe”.
Health and genetic information
I only use your health and genetic information with your explicit consent (UK GDPR Article 9(2)(a)). Before your first session, I will ask you to confirm in writing that you agree to me recording and using this information to provide your wellness support. If you decide to have a DNA test, I will ask for your separate explicit consent before your sample or results are shared with the testing laboratory.
Because I cannot safely provide sessions without knowing about your health, I may not be able to work with you if you do not give this consent. You can withdraw it at any time. That will not affect anything I did before you withdrew it, but it may mean I can no longer continue your sessions. I may keep records I already hold if I need them to deal with a legal claim (Article 9(2)(f)).
I do not make decisions about you by automated means or profiling.
5. Who I share it with
I never sell your information. I only share it where necessary, as follows:
DNA Life: if you choose a DNA test, your sample, the details needed to process it, and your results are shared with DNA Life for genetic analysis, with your explicit consent. See their privacy policy: dnalife.healthcare/privacy.
Supplement suppliers: if you ask me to order supplements for you, I share the details needed for the order, with your agreement.
Ark Health Ltd and professional peers: for training and professional development, I may share case information in a fully anonymised form, so that you cannot be identified. Where a case could still be recognisable, I will ask for your explicit consent first.
Service providers who support my practice, such as my email provider, payment processor, accountant and this website’s host (Cloudflare). They may only use your information to provide their service to me.
Authorities, if the law requires it, for example a court order, or where it is necessary to protect someone from serious harm.
6. Transfers outside the UK
I keep client records in the UK. Some service providers (for example email, website hosting or laboratory services) may store or process information outside the UK. Where they do, I make sure the transfer is protected, either because the country has been approved by the UK government as providing adequate protection, or because the provider has signed the ICO’s International Data Transfer Agreement or an equivalent safeguard.
7. How I keep it safe
Electronic records are kept on a password-protected computer and password-protected email accounts. Paper records are kept locked away. Only I have access to client records. If a data breach happens that is likely to put you at risk, I will tell you and, where required, the ICO.
8. How long I keep it
Client and session records, including health and genetic information: 5 years after your last session, then securely destroyed.
Financial records: 6 years, as HMRC requires.
Enquiries that do not lead to a booking: up to 12 months.
I may keep records longer if there is an ongoing complaint or legal claim. Anonymised information that can no longer identify you may be kept indefinitely.
9. Your rights
You have the right to:
access the personal information I hold about you and receive a copy;
have inaccurate information corrected;
have your information erased in certain circumstances;
restrict or object to how I use it in certain circumstances;
receive information you gave me in a portable format (data portability);
withdraw consent at any time, where I rely on consent.
To use any of these rights, email or phone me. There is normally no charge. I will reply within one month, though this can be extended by up to two more months for complex requests, in which case I will let you know. I may need to confirm your identity first.
10. Children and young people
My services are not aimed at children without a parent or guardian’s involvement. If you book on behalf of a child, please make sure you have the authority to do so and, where the child is old enough to understand, explain to them how their information will be used. Young people who understand what is involved can exercise their own data rights.
11. This website
This website does not use cookies, analytics or tracking, and does not load content from third parties. Like any website, it is served through a hosting provider (Cloudflare), whose systems briefly process technical information such as your IP address to deliver the pages and protect the site from attack. I do not use this information to identify you.
12. Complaints
If you are unhappy with how I have handled your personal information, please contact me first by email or phone. I will acknowledge your complaint within 30 days, look into it promptly, keep you informed, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator:
Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
13. Changes to this policy
I review this policy regularly. The current version is always on this page, with the date it was last updated at the top.
No Session or information on this website constitutes medical treatment or advice and is merely designed to support and encourage wellness. Please consult your Doctor at all times.