And breathe Privacy Policy 


Click Here to Add a Title

From 25 May 2018 the law will change with regards to data protection. I take my responsibility extremely seriously when it comes to data protection and as such, I have created a privacy policy that adheres to my legal requirements. I have also attended a seminar on General Data Protection Regulation and have completed and passed a Training International Qualification on General Data Protection Regulation which I took through the Guild Training International (GTI)

Click Here to Add a Title

This is the Privacy policy for And breathe. And breathe is a mobile massage and beauty therapy service based in Burnham on Sea, owned by Beth Helbrow. You can contact me on 07544 269456 or via e-mail at [email protected] This policy explains why I collect a certain level of personal data and how I use it.

Click Here to Add a Title

I need to have the following information in order for a treatment to go ahead:

  • Contact details – name, address, telephone number/s, e-mail address
  • Date of birth
  • Details relating to your health including medical history and current medication and any allergies you may have. Without this information a treatment will not be able to be given.
  • Doctor’s name and surgery address – in case permission needs to be sought prior to treatment being given. This would only be done with your consent.
  • It is a legal requirement of my insurance.  

Why do I need it, how will I use it and how long will ​I keep it for?

The information provided on the consultation forms will be used to ensure that it is safe for you to have the treatment/s you have asked for. It is also a requirement of my insurance. Your consultation form will be stored in a locked filing cabinet for a duration of 7 years after your last treatment. It will then be destroyed by shredding. For anyone who has received a treatment under the age of 18, the consultation form will be kept for 7 years after the client has turned 18.  No one other than myself has access to the cabinet.


The lawful basis for processing information is ‘contract’, this means that I have a legal reason to ask you for your data because I need it for contractual reasons. You do not have to share your personal data with me, but if you do not, I cannot offer you a treatment.


And breathe is registered with the Information Commissions Office and complies with all data protection legislation.


Being a mobile therapist means that I have to carry with me my paper diary and mobile phone. Both of which contain key information such as names, addresses and telephone numbers. These are kept safely locked away in my bag and are never left unattended.  

Electronic data, communications and payments

The data you provide will not be shared with anyone and no one has access to your records other than myself. However, you should note that I use an online booking system called Shedul and so will enter your basic information – name, e-mail address and mobile phone number into the system so that you can receive e-mail booking confirmations and text reminders. 

Click Here to Add a Title

All data entered into my Shedul account belongs solely to me and is not accessed by anyone else and is not sold to anyone. Plus, all data is securely stored in Shedul’s backed up, encrypted cloud database. The system uses SSL security, the data bases are encrypted and the hardware has top of the range firewalls so it's super secure Any card payments are made using a system called Sum Up. The security of your data is SumUp’s top priority and all data accessed by the SumUp Card Reader is encrypted instantly and sent securely to their servers. It makes no difference if I use a public or private internet connection, your data is safe.


In addition to these measures, all SumUp software and hardware meets–and in many cases exceeds–the strict security standards outlined by the PCI-DSS (Payment Industry Data Security Standard). PCI-DSS is a policy in the payment industry focusing on credit card transactions, and the policy is supported by all major credit card organisations.

Mar​keting and Contact

Please read through the following questions and tick in the relevant box to confirm if you are happy/not happy for And breathe to contact you in different ways. You can change your mind at any time by e-mailing [email protected] or by phoning 07544 269456

Click Here to Add a Title

  • Are you happy for And breathe to enter your contact details into Shedul?
  • Are you happy to receive text message reminders re your appointments?
  • Are you happy to receive e-mail confirmations and reminders re your appointments?
  • Are you happy for And breathe to contact you from time to time via e-mail regarding new treatments and offers?
  • Are you happy for And breathe to store your phone number into the mobile phone?
  • Are you happy for And breathe to take photographs of nail treatments (if applicable) to be shared on Facebook and on And breathe’s website? 


Yes/No


Yes/No


Yes/No


Yes/No



Yes/No


Yes/No

Who can I complain to if I feel you are not handling my data correctly?

If you have any questions or concerns regarding this privacy policy or about the information that I hold on you, then please do not hesitate to contact me either via e-mail at [email protected] or by phone on 07544 269456. If you believe that I am not handling your data correctly you have a right to make a complaint. If you wish to do so then please either put it in writing via the e-mail address quoted or contact me so that I can give you an address to send a written complaint to. If you are unhappy with the response given you can contact the ICO (Independent Commissioner’s Office). You can do so via their website - https://ico.org.uk/concerns/ or by phone on 0303 123 1113.


Client name

Client signature

Parent/Guardian if under 18

Date