Privacy Policy

Last updated: July 2026

Who we are

Cleanse Studio Surrey (“we”, “us”, “I”) is a colon hydrotherapy practice operated by Rachel at 26 Water Mead, Chipstead, Coulsdon, CR5 3NU.

We are the data controller for the personal information described in this policy. You can contact us at [email protected] or on +44 7792 100984.

What information we collect

When you contact us

If you use our contact form, email us or call us, we collect your name, email address, telephone number and the content of your message, together with any preferences you tell us about.

When you book a treatment

Before any treatment we ask you to complete a health questionnaire. This includes information about your medical history, digestive health, medication, allergies and previous surgery. Under UK GDPR this is special category data (health data) and we treat it with particular care.

We also keep brief notes of the treatments you receive and any aftercare advice given.

When you visit this website

Our hosting provider records standard server logs including IP address, browser type and pages visited, for security and troubleshooting. If you submit a form, our spam protection service (Cloudflare Turnstile) processes limited technical data to confirm you are not an automated bot.

Why we use your information, and our lawful basis

• To respond to your enquiry — lawful basis: legitimate interests (answering people who contact us).
• To arrange and deliver your appointment — lawful basis: performance of a contract with you.
• To assess whether treatment is safe and suitable for you, and to keep treatment records — lawful basis: consent, and for health data specifically, Article 9(2)(h) UK GDPR (provision of health or social care treatment).
• To take payment and keep accounting records — lawful basis: legal obligation.
• To protect the website from spam and abuse — lawful basis: legitimate interests.

We do not use your information for marketing unless you have specifically asked us to, and you can opt out at any time.

Who we share it with

We do not sell your data or share it for marketing. We share it only with:

• Our website host and email provider, who store data on our behalf
• Our online booking provider, if you book through it
• Our accountant, for financial records
• Emergency or medical services, if there were ever a genuine risk to your safety
• Any authority we are legally required to disclose to

Some of these providers may process data outside the UK. Where that happens, we rely on the UK Government’s adequacy regulations or International Data Transfer Agreements to protect it.

How long we keep it

• Enquiries that don’t lead to a booking: up to 12 months
• Client health questionnaires and treatment records: 8 years from your last appointment, in line with standard practice for complementary health records and our insurance requirements
• Financial records: 6 years, as required by HMRC

How we keep it safe

Paper records are kept in a locked cabinet at the studio. Electronic records are held on password-protected, encrypted devices and accounts. Only Rachel has access to client health records.

Cookies

This website uses essential cookies needed for it to function, and cookies set by our spam protection service. We do not use advertising or tracking cookies without your consent. You can block or delete cookies through your browser settings, though some parts of the site may not work as well as a result.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the information we hold about you
• Ask us to correct anything that is inaccurate
• Ask us to delete your information, where we are not required to keep it
• Ask us to restrict or object to how we use it
• Withdraw consent at any time, where we rely on consent
• Ask for your data in a portable format

To exercise any of these, email [email protected]. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.