GDPR & your Privacy

Privacy & Data 

Last updated: September 2026

The Gloaming Glade is committed to treating your personal information with care, respect and confidentiality.

This privacy notice explains what information I collect, why I collect it, how I use it, who I share it with and how long I keep it.

The Gloaming Glade is a sole-trader practice operated by Diana Bracewell.

What information I collect

Depending on how you interact with The Gloaming Glade, I may collect:

• your name and contact details;

• information you provide when making an enquiry or booking;

• information you choose to provide about accessibility needs or circumstances relevant to your session;

• information you choose to provide about your health where this is relevant to arranging or providing a session;

• booking and session records;

• correspondence between us;

• payment and financial information necessary to keep business and tax records;

• feedback you choose to provide.

I aim to collect only information that is relevant and necessary for the purpose for which it is provided.

You do not need to provide more health or personal information than is necessary for your circumstances. The ICO's data-minimisation principle requires organisations not to collect more health information than they actually need.

How I use your information

I use your information to:

• respond to enquiries;

• arrange and manage bookings;

• provide Reiki sessions safely and appropriately;

• communicate with you about your booking or enquiry;

• understand and accommodate accessibility needs where you choose to tell me about them;

• respond to feedback;

• maintain appropriate business records;

• meet legal and financial obligations, including tax requirements;

• protect the security and integrity of my business and records.

I do not sell your personal information or use it for advertising purposes.

I do not use your information to make automated decisions about you.

My lawful bases for using your information

Under UK data protection law, I need a lawful basis for processing personal information.

Depending on the purpose, I rely on:

Contract / steps before entering into a contract
To respond to enquiries, arrange bookings and provide services you have requested.

Legitimate interests
For reasonable administration of the practice, maintaining appropriate records, communicating with clients and protecting the business, where this is appropriate and your rights do not override those interests.

Legal obligation
Where I am required to keep information to comply with legal or financial obligations, such as HMRC record-keeping requirements.

Consent
Where I ask you to give consent for an optional use of your information, such as providing optional feedback or receiving marketing communications.

Where consent is used, you can withdraw it at any time. Withdrawal does not affect processing that was already lawful before consent was withdrawn.

Health and other special-category information

Information about your health is special category data under UK GDPR and receives additional protection.

The Gloaming Glade will only ask for or use health information where it is relevant to providing or arranging your session, and will avoid collecting unnecessary medical information.

Where I process health information on the basis of consent, I will seek explicit consent for that processing. Explicit consent must be a clear, specific positive statement and can be withdrawn.

Providing health information is not intended to turn The Gloaming Glade into a healthcare provider. Reiki sessions are complementary and are not a substitute for medical diagnosis or treatment.

Who I share information with

I do not sell or rent your information.

I may use trusted service providers to operate the practice, including:

• Google — for website hosting, forms and associated document/storage services;

• Krystal — for business email and website/domain-related services;

• payment providers, where applicable;

• professional advisers where necessary;

• HMRC or other authorities where I am legally required to provide information.

These providers may process information on my behalf or, depending on the service, act as independent controllers. I only use services that are appropriate for the relevant business purpose.

How I protect your information

I take reasonable steps to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Digital information is held using password-protected accounts and reputable service providers. Access to information is limited to what is necessary for running the practice.

I do not retain information simply because I can. I review records regularly and delete information when it is no longer needed, subject to legal record-keeping requirements.

How long I keep your information

I review the personal information I hold regularly and aim not to keep it for longer than necessary. 

For ordinary enquiries, bookings and client contact records, I will review these records monthly and delete them when there has been six months with no contact and no ongoing reason to retain them. 

Where information needs to be retained for an ongoing booking, continuing client relationship, complaint, legal matter or other legitimate reason, it may be retained for longer.

Some records cannot be deleted after six months because I have a legal obligation to retain them. In particular, business income and expense records required for tax purposes are retained in accordance with HMRC requirements. HMRC currently requires self-employed records to be retained for at least five years after the relevant 31 January submission deadline.

Your rights

Depending on the circumstances, you have rights under UK data protection law including the right to:

• ask what personal information I hold about you;

• ask for inaccurate information to be corrected;

• ask for information to be deleted where there is no lawful reason for me to retain it;

• ask me to restrict how I use your information;

• object to certain processing;

• withdraw consent where consent is the basis for processing;

• request a copy of your personal information in certain circumstances.

These rights are subject to some legal exceptions.

If you would like to exercise a data protection right, please contact me using the details below.

Contact

If you have a question about how your information is used, or would like to exercise one of your data protection rights, please contact:

Diana Bracewell
The Gloaming Glade
hello@thegloamingglade.co.uk

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.

Information about making a complaint is available from the ICO.