Privacy Policy

Your privacy is important to me. This Privacy Policy explains how I collect, use, store and protect your personal information when you visit my website, book an appointment or receive my services.


Meg Atalanta provides holistic wellbeing services, including Craniosacral Therapy and nature-based experiences. I am committed to protecting your privacy and handling your personal information responsibly, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, together with any other applicable data protection legislation.


This policy applies to personal information collected through my website, booking system and during appointments or consultations.


What Information I Collect

Depending on how you interact with my services, I may collect:

  • Contact information, such as your name, email address and telephone number, through my contact form or booking system.
  • Appointment details, including your bookings, cancellations and appointment history.
  • Health-related information that you choose to share with me, where relevant to providing your treatment safely and appropriately.
  • Payment and card information, which may be collected and stored securely by my booking provider when you make a booking.

How I Use Your Information

I use your personal information to:

  • Provide and tailor my services to your needs.
  • Manage appointments, bookings, cancellations and payments.
  • Contact you about your appointments or respond to your enquiries.
  • Process payments and, where applicable, cancellation or non-attendance fees in accordance with my booking and cancellation policy.
  • Send updates or wellbeing-related information, where you have consented to receive them.
  • Meet relevant legal, professional and record-keeping obligations.

Card Details and Cancellation Policy

If you book an appointment through my online booking system, you may be asked to provide your card details, which may be securely stored by the booking provider.

Where you have provided your card details and agreed to the applicable booking and cancellation terms, your card may be charged in accordance with my cancellation policy if you fail to attend an appointment or cancel at short notice.

Your card details are handled through my booking provider's payment system. I do not independently store your full card details.

Please refer to my booking and cancellation policy for details of the notice period and any applicable charges.


GDPR and Legal Basis for Processing

I handle personal information in accordance with the UK GDPR and the Data Protection Act 2018. I only collect and use personal information where there is a lawful basis for doing so, and I take appropriate steps to keep it secure and protect your privacy.

Depending on the circumstances, the legal basis for processing your information may include:

  • Contractual necessity: where information is needed to manage your booking and provide the services you have requested.
  • Consent: where you have given permission for a specific use of your information, such as receiving marketing communications.
  • Legal obligation: where processing is necessary to comply with legal or professional requirements.
  • Legitimate interests: where processing is necessary for the effective management of my practice, provided your rights and interests do not override those interests.

Health information is classed as special-category personal data under UK GDPR. Where I collect or use information about your health, I will ensure that an appropriate lawful basis and additional condition for processing this type of information apply.

I aim to collect only the information necessary for the purposes outlined in this policy and will not use your information for unrelated purposes without an appropriate lawful basis.


How I Store and Protect Your Data

I take reasonable and appropriate steps to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

Client records may be held securely in digital or physical form, with access limited to those who need the information to provide services or manage my practice.

Where I use third-party providers, such as my booking or payment provider, their handling of personal information is subject to their own privacy and security arrangements.

I retain personal information only for as long as necessary for the purposes for which it was collected, taking into account any applicable legal, professional or record-keeping requirements.


Sharing Your Information

I do not sell your personal information.

I may share relevant information with trusted service providers who help me operate my practice, such as my booking or payment provider, where necessary to manage appointments and payments. I may also disclose information where required by law or where necessary to meet relevant legal or professional obligations.

Where third parties process personal information on my behalf, I take appropriate steps to ensure that this is handled in accordance with applicable data protection requirements.


Cookies and Website Analytics

My website may use cookies or similar technologies to support its functionality and, where applicable, understand how visitors use the site.

You can manage cookies through your browser settings. Where required, I will seek your consent before using non-essential cookies.


Your Data Protection Rights

Under UK GDPR, you have rights in relation to your personal information. Depending on the circumstances, these may include the right to:

  • Request access to the personal information I hold about you.
  • Ask for inaccurate or incomplete information to be corrected.
  • Request the deletion of your personal information where applicable.
  • Request that the processing of your information be restricted.
  • Object to certain types of processing.
  • Request a copy of certain personal information in a portable format.
  • Withdraw your consent where processing is based on consent.

These rights are subject to applicable legal requirements and exceptions.

If you have any concerns about how your personal information is handled, please contact me in the first instance. You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.


Contact Me

If you have any questions about this Privacy Policy, how your personal information is used or wish to exercise your data protection rights, please contact:

Email: mabrowning94@gmail.com


Updates to This Policy

I may update this Privacy Policy from time to time to reflect changes to my services, booking arrangements or legal obligations. Any changes will be published on this page, together with an updated review or effective date.