This policy explains how your personal information is collected, used and protected when you use this website or book and receive treatments from Adrienne O'Brien, a certified sports massage therapist trading as Baobab Life ("I", "me", "my").

I take your privacy seriously. I only collect what I need to look after you safely, and I do not sell your information.

1. Who is responsible for your information

I am the data controller for the information described in this policy.

Name: Adrienne O'Brien, trading as Baobab Life
Address: 49 Caroline Close, West Drayton, UB7
Email: adrienne@baobablife.org
Phone: +44 7778 087821
ICO registration number: not applicable

2. What information I collect

• Contact details: your name, email address, phone number and, where needed, your address.
• Booking information: appointment dates, times and treatment type.
• Health and treatment information: the details you give me on a consultation form, such as your medical history, medications, injuries, pain or symptoms, lifestyle and activity, and any contraindications. I also record notes on each treatment, what was done and your response, and any advice given.
• Emergency contact: the name and phone number of someone I can contact if you are unwell during a session, if you choose to give one.
• Payment information: a record of payments received. I do not store your card details.
• Communications: emails, messages or call notes between us.
• Website data: technical information such as your IP address, browser type and pages visited, which may be collected through cookies and similar technologies (see section 9).

Information about your health is "special category" data under UK data protection law and I handle it with extra care.

3. Why I use your information and my legal basis

Purpose	Legal basis
To book, manage and deliver your treatments	Contract (taking steps to provide the service you asked for)
To assess whether treatment is safe and suitable for you, to keep treatment records, and to give you advice	Legitimate interests (providing safe, professional care). For health information, your explicit consent, which you give when you complete the consultation form.
To contact you about your appointments	Contract and legitimate interests
To keep accounts and meet tax and legal duties	Legal obligation
To handle complaints, insurance claims or legal claims	Legitimate interests; for health information, establishing, exercising or defending legal claims
To send news or offers by email or text	Your consent. You can withdraw it at any time.
To run and improve the website, and keep it secure	Legitimate interests. Non-essential cookies only with your consent.

You can withdraw your consent to my use of your health information at any time. This does not affect past use, but I may not be able to treat you safely without it. I may need to keep some records after withdrawal where the law or my insurer requires it.

4. Bookings at Uxbridge Chiropractic Clinic

I provide some treatments at Uxbridge Chiropractic Clinic, 38A Windsor Street, Uxbridge, UB8 1AB. If you book through the clinic's online booking system or reception, the clinic collects and holds your booking details under its own privacy policy and is responsible for that information. Please read the clinic's policy for details. Information I collect from you directly during your consultation and treatment is held by me, as set out here.

I will only share your health information with the clinic's practitioners if you agree.

5. Who I share your information with

I do not sell your information or share it for marketing by others. I may share it with:

• Your GP or another healthcare professional, but only with your consent, unless there is a serious risk to your safety or someone else's.
• Providers who help me run my practice, such as my website and email platform (Systeme.io), booking, appointment reminder and record-keeping software, and my accountant. They may only use your information on my instructions.
• My professional indemnity insurer and professional or regulatory body, if needed for a claim or complaint.
• The police, courts or other authorities, where the law requires it.

6. Transfers outside the UK

Some of my service providers, including website and email platforms, may store or process information outside the UK. Where this happens, I take steps to make sure your information has appropriate protection, for example by using providers that rely on UK-approved safeguards. You can contact me for more information.

7. How long I keep your information

• Treatment and consultation records: [7 years] after your last appointment. For clients under 18, until they reach age [25].
• Accounting records: [6 years], as required by tax law.
• Marketing contact details: until you unsubscribe.
• Enquiries that do not lead to a booking: up to [12 months].

After these periods I securely delete or destroy your information.

8. How I keep your information safe

I use sensible measures to protect your information, including password-protected devices and accounts, secure storage of any paper records, and limiting access to those who need it. No system is completely secure. If a breach puts your rights at risk, I will tell you and the Information Commissioner's Office (ICO) where the law requires it.

9. Cookies and this website

This website is built using Systeme.io, which uses cookies and similar technologies to make the site work and, where you agree, to measure usage. Essential cookies are always on. For other cookies I ask for your permission through the cookie banner, and you can change your choice at any time. You can also block cookies in your browser settings, although parts of the site may not work as intended.

Links to other websites, such as the clinic's booking system, are covered by those sites' own privacy policies.

10. Your rights

Under UK data protection law you have the right to:

• be told how your information is used (this policy);
• ask for a copy of the information I hold about you;
• ask me to correct anything inaccurate or incomplete;
• ask me to erase your information, although I may need to keep treatment records for the periods in section 7;
• ask me to restrict or object to certain uses of your information;
• ask for your information in a portable format, where it applies;
• withdraw consent at any time, including for marketing;
• not be subject to decisions made only by automated means (I do not make any).

To use any of these rights, contact me using the details in section 1. I will reply within one month. There is normally no charge.

11. Marketing

I will only send you news or offers if you have agreed to receive them. Every message includes a way to unsubscribe, or you can contact me at any time. I will always still contact you about your appointments.

12. Children

Treatment for anyone under 18 requires the consent of a parent or guardian, who should be present at appointments. This website is not aimed at children.

13. Complaints

If you have a concern, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner's Office:

Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113

14. Changes to this policy

I may update this policy from time to time. The latest version will always be on this page with the date at the top.