2026

At Bright Side Wellness, I respect your privacy and take the protection of your personal information seriously. This Privacy Policy explains what information I collect, why I collect it, how I use and protect it, and your rights in relation to your information.

This policy applies when you book or attend my massage therapy, pregnancy and postnatal massage, yoga or deep rest sessions, contact me, make a payment, or otherwise use my services.

1. Who I am

The data controller responsible for your personal information is:

Bright Side Wellness
Lauren Small
Alveston, Bristol
Email: lauren@brightsidewellness.co.uk
Telephone: 07581387685

If you have any questions about how I use your personal information, please contact me using the details above.

2. What information I collect

Depending on the services you use, I may collect:

Your name and contact details, such as your email address and telephone number.

Date of birth, where relevant.
Appointment and booking information.
Information provided through consultation or health questionnaires.
Information about your health, medical history, injuries, medications and allergies.
Information relating to pregnancy, childbirth and postnatal recovery where relevant to the service you are booking.
Information about your physical wellbeing and any conditions or circumstances that may affect the suitability of a treatment or class.
Notes relating to your treatment or session.
Payment and transaction information.
Communications between you and me, where relevant to your booking or treatment.
Information you provide when contacting me by email, telephone or other communication methods.

I aim to collect only information that is relevant and necessary for providing my services safely and effectively.

3. Health information

Some of the information I collect is health information, which is classed as special category data under UK data protection law.

I may need to collect this information so that I can:

Assess whether a treatment or class is appropriate for you.
Identify relevant contraindications, precautions or considerations.
Provide safe and appropriate massage therapy.
Adapt yoga, deep rest or other sessions where appropriate.
Provide pregnancy and postnatal treatments safely.
Keep appropriate treatment and client records.
Respond appropriately to information you provide about your health.

Health information may include information about existing conditions, previous injuries or surgery, mental health, medications, allergies, pregnancy, recent childbirth and other relevant medical or wellbeing information.

I will only collect and use health information where it is necessary and appropriate for providing my services and in accordance with applicable data protection law.

4. How I use your information

I may use your personal information to:

Process and manage your bookings.
Contact you about your appointments.
Provide massage therapy, pregnancy and postnatal massage, yoga and deep rest sessions.
Assess your needs and whether a particular service is suitable for you.
Keep appropriate treatment and session records.
Respond to enquiries.
Process and reconcile payments.
Manage cancellations and rescheduling.
Maintain business and financial records.
Meet legal, regulatory, insurance or professional obligations.
Protect the health and safety of clients and others.
Deal with complaints or disputes.

If you have specifically opted in to receive marketing communications, I may also use your contact details to send you information about relevant services, classes, events or offers.

You can withdraw your consent to marketing communications at any time.

5. Online bookings and Cliniko

I use Cliniko to manage online massage bookings, appointments and client records.

When you make an online booking or complete a health or consultation form, the information you provide may be stored securely within Cliniko so that I can manage your appointment/ information and provide my services.

Cliniko acts as a service provider to my business for the management of client and appointment information. You can find more information about how Cliniko handles personal information in its own privacy policy:

Cliniko Privacy Policy: https://www.cliniko.com/policies/privacy/

6. Payments and Online Payments

I accept payment by bank transfer, Cash and through online booking via my website.

If you pay by bank transfer, I may record information such as:

Your name.
The date and amount of the payment.
Your payment reference.
Information necessary to identify and reconcile the payment.

I do not have access to your online banking passwords, login details or security information.

I accept payments online through my website using Wix payments.

When you make an online payment, your payment information is processed by the relevant payment provider. I do not have access to your full card number, security code, online banking password or other confidential payment credentials.

I may receive and retain information such as:

Your name.
The amount paid.
The date and time of the transaction.
The service, package or plan purchased.
Your transaction or payment reference.
The status of your payment.
Information relating to refunds or cancelled transactions.

Payment providers may collect and process additional personal information in accordance with their own privacy policies and terms.

You can find information about how your payment provider handles your personal information on their website.

Payment and transaction records may be retained for accounting, tax, legal and business-record purposes.
Please do not include sensitive health information in a bank transfer reference.

7. Who I share your information with

I will not sell or rent your personal information.

I may share personal information where necessary and lawful with:

Cliniko which provides my online massage booking and practice management system.
Payment providers or banks where necessary to process or reconcile payments.
My accountant, bookkeeper or other professional advisers, where necessary.
My professional or public liability insurer, where appropriate.
IT, website, email or other service providers who help me operate my business.
Government bodies, regulators or law enforcement agencies where I am legally required to do so.
Healthcare professionals or other appropriate third parties where this is necessary for your care or safety, or where you have asked me to share information.

I will aim to share only the information that is reasonably necessary for the relevant purpose.

8. Keeping your information secure

I take reasonable steps to protect your personal information from loss, misuse, unauthorised access, alteration or disclosure.
Client and health information is stored using appropriate systems and access is restricted to people who have a legitimate reason to access it.

I also take reasonable steps to ensure that third-party service providers I use provide appropriate safeguards for personal information.

9. How long I keep your information

I will keep your personal information only for as long as reasonably necessary for the purposes for which it was collected, including where I need to retain information to meet legal, accounting, tax, insurance, professional or regulatory requirements.

When information is no longer required, I will take reasonable steps to securely delete or dispose of it.

10. Your rights

Under UK data protection law, you may have rights including:

The right to know how your personal information is being used.
The right to request access to the personal information I hold about you.
The right to ask me to correct inaccurate or incomplete information.
The right to request deletion of your information in certain circumstances.
The right to request that I restrict how I use your information in certain circumstances.
The right to object to certain types of processing.
The right to data portability in certain circumstances.
The right to withdraw consent where processing is based on consent.

These rights are not absolute, and there may be circumstances where I am legally entitled or required to retain or continue processing certain information.

If you would like to exercise any of your rights, please contact me at lauren@brightsidewellness.co.uk.

I may need to verify your identity before responding to a request.

11. Complaints

If you have any concerns about how I have handled your personal information, please contact me in the first instance so that I can try to resolve your concern.

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has not been handled appropriately.

12. Cookies and website information

My website may use cookies or similar technologies to provide essential website functionality and, where applicable, understand how visitors use my website.

Where required by law, I will ask for your consent before using non-essential cookies.

13. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my services, the way I use personal information, technology or applicable legal requirements.

The latest version will be available on my website and will show the date it was last updated.

14. Contact me
If you have any questions about this Privacy Policy or how I handle your personal information, please contact:
Bright Side Wellness
Lauren Small
Email: lauren@brightsidewellness.co.uk
Telephone: 07581387685
Last updated: 22/08/2026

​Your name and contact details, such as your email address and telephone number.

Date of birth, where relevant.

Appointment and booking information.

Information provided through consultation or health questionnaires.

Information about your health, medical history, injuries, medications and allergies.

Information relating to pregnancy, childbirth and postnatal recovery where relevant to the service you are booking.

Information about your physical wellbeing and any conditions or circumstances that may affect the suitability of a treatment or class.

Notes relating to your treatment or session.

Payment and transaction information.

Communications between you and me, where relevant to your booking or treatment.

Information you provide when contacting me by email, telephone or other communication methods.

Assess whether a treatment or class is appropriate for you.

Identify relevant contraindications, precautions or considerations.

Provide safe and appropriate massage therapy.

Adapt yoga, deep rest or other sessions where appropriate.

Provide pregnancy and postnatal treatments safely.

Keep appropriate treatment and client records.

Respond appropriately to information you provide about your health.

Process and manage your bookings.

Contact you about your appointments.

Provide massage therapy, pregnancy and postnatal massage, yoga and deep rest sessions.

Assess your needs and whether a particular service is suitable for you.

Keep appropriate treatment and session records.

Respond to enquiries.

Process and reconcile payments.

Manage cancellations and rescheduling.

Maintain business and financial records.

Meet legal, regulatory, insurance or professional obligations.

Protect the health and safety of clients and others.

Deal with complaints or disputes.

Your name.

The date and amount of the payment.

Your payment reference.

Information necessary to identify and reconcile the payment.

I do not have access to your online banking passwords, login details or security information.

I accept payments online through my website using Wix payments.

Cliniko which provides my online massage booking and practice management system.

Payment providers or banks where necessary to process or reconcile payments.

My accountant, bookkeeper or other professional advisers, where necessary.

My professional or public liability insurer, where appropriate.

IT, website, email or other service providers who help me operate my business.

Government bodies, regulators or law enforcement agencies where I am legally required to do so.

Healthcare professionals or other appropriate third parties where this is necessary for your care or safety, or where you have asked me to share information.

The right to know how your personal information is being used.

The right to request access to the personal information I hold about you.

The right to ask me to correct inaccurate or incomplete information.

The right to request deletion of your information in certain circumstances.

The right to request that I restrict how I use your information in certain circumstances.

The right to object to certain types of processing.

The right to data portability in certain circumstances.

The right to withdraw consent where processing is based on consent.

Your name and contact details, such as your email address and telephone number.