About this policy
Elbie's Align Therapies handles personal information when you make an enquiry, book a service, attend treatment or use website account features. This policy covers the practice's records as well as information handled through this website.
For privacy questions or to exercise your data rights, contact hello@elbiesaligntherapies.co.uk.
Information the practice may keep
Consultation forms and treatment notes are practice records. The website dashboard currently manages website payments and appointments; it does not collect or display clinical notes.
Please share only information relevant to your enquiry or care. Do not send card details through email, WhatsApp or a website message.
- Enquiry messages and emails, including your name and contact details.
- Booking details, appointment history and Recovery Plan records.
- Consultation and consent forms, including relevant health information you provide.
- Treatment notes and information needed to consider treatment suitability and continuity.
- Payment, refund and invoice records.
- Basic account details, optional saved guide answers and progress, and essential technical or security information.
- Browser subscription details if you choose to request a guide alert.
Why information is used
Information is used to respond to enquiries, arrange and provide agreed services, assess suitability, maintain appropriate consultation and treatment records, process payments and refunds, and meet applicable accounting, legal and insurance requirements.
Booking and payment information is needed to arrange and perform your booking contract. Relevant financial records are also kept to meet legal obligations. Essential account and security information helps operate and protect the website.
Health information needs additional protection. Where explicit consent is required, it must be obtained separately from agreement to booking terms. Agreeing to this policy is not a blanket consent to every use of your health information.
Website accounts and optional guide saving
Google sign in provides the basic identity details shown during sign in. An account is required for website bookings, but you can use the public guide without an account.
Guide entries stay in your browser unless you sign in and separately consent to cloud saving. Those entries may include health or wellbeing information. They are not monitored by Kehinde or used as treatment notes, marketing profiles or automated diagnoses.
You can withdraw cloud saving consent and delete the cloud copy through your account. You can also export progress or delete your account. A local browser copy remains until you clear it or the browser removes it. Anyone sharing that browser profile may be able to see it, and exported files are not encrypted by this website.
Deleting guide progress or an account does not automatically delete booking or financial records that the practice needs to retain for a valid legal or business reason.
Third party services
Stripe processes website card payments and refunds. The website keeps payment references and status information, not your full card details. Supabase provides website account and booking storage, and Vercel hosts the website. Google provides Google sign in and may process information when you choose other Google services.
WhatsApp, email and telephone links open the relevant contact service. A WhatsApp button click is not a saved enquiry, and ordinary WhatsApp conversations are not imported into this dashboard. The providers handle information under their own privacy terms.
If you separately use Treatwell to contact or book with the practice, Treatwell handles that activity under its own privacy terms. This website's direct booking calendar and Stripe checkout do not connect to Treatwell or import its records.
Other providers may support enquiries, email, records, bookings or requested browser notifications where used by the practice. Relevant information may also need to be shared with professional advisers, insurers or authorities where necessary and lawful.
Some providers process information outside the UK. The practice must ensure appropriate safeguards apply where required. You can contact the practice for information about providers and safeguards relevant to your records.
Analytics, cookies and browser storage
No analytics service, advertising tracker or marketing cookie is currently configured on this website. If analytics or other optional tracking is introduced, this notice will be updated and any consent required will be requested before it is used.
Essential cookies support account sign in, and browser storage keeps local guide progress. Browser guide alerts are optional and can be turned off through the website control or browser settings. See the Cookie and Browser Storage Notice for more information.
How long information is kept
Information is retained only for as long as needed for its purpose and applicable legal, insurance and professional record keeping requirements. The period depends on the type of record and the reason it is held.
For enquiry messages and emails, the practice considers whether the enquiry is resolved and whether follow up or a dispute remains. Booking records are considered against service delivery and any unresolved payment, complaint or plan entitlement.
For consultation forms, consent records and treatment notes, the practice considers continuity of care, client age, professional and insurance requirements, and possible claims. Payment and invoice records are retained for applicable accounting and tax obligations.
Optional cloud guide progress and a limited revision history are kept while cloud saving is in use, until you request deletion or withdraw that consent. Local copies are controlled through your browser. Contact the practice for the retention period or criteria applying to a particular business record.
Keeping information secure
Access to website records is restricted through account permissions and server checks. Only authorised owners can access the booking and payment dashboard. No online system can guarantee absolute security; keep your account secure and use logout on shared devices.
Your rights and complaints
Depending on the circumstances, you can request access to or correction of your information, ask for deletion or restricted use, object to processing, or request a portable copy. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier use. Some records may still need to be kept under another lawful basis.
Send requests or concerns to hello@elbiesaligntherapies.co.uk. The practice may need to check your identity before releasing or changing information.
You can also complain to the UK Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.
Changes to this policy
This policy will be updated when the practice's services or handling of information changes. Last updated: 27 September 2026.