Last updated: 12 March 2026
Introduction
This privacy policy explains how personal information is collected, used, stored, and protected when you receive Reiki treatments from Lana Alkhedairy, a Reiki practitioner.
Your privacy is important, and personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Why I collect personal data
Personal data is collected in order to:
- Keep notes about treatments and information you choose to share during sessions
- Contact you if necessary regarding appointments
- Meet professional, insurance, and legal responsibilities
What data may be collected
The information collected may include:
- Name
- Contact details (such as phone number, email address)
- Postal address
- Emergency contact details (if provided)
- Medical conditions or medications you choose to share
- Any other information you voluntarily share during consultations or treatments
Information may be recorded where relevant to treatment records.
Legal basis for processing data
Your personal data is processed under the following lawful bases:
- Consent – information you voluntarily provide
- Legitimate interests – maintaining treatment records as part of professional practice
- Legal obligations – complying with insurance and record-keeping requirements
Any health-related information that you choose to share is treated as confidential.
How your data is stored
All records are kept in paper form only.
Paper consultation forms and treatment notes are stored securely and kept confidential. Reasonable steps are taken to protect records from loss, damage, or unauthorised access.
How long data is stored
Client records are retained in accordance with professional insurance and legal record-keeping obligations.
Records will be kept for a minimum of 8 years after your last treatment.
For clients under the age of 16, records must be kept until the client reaches age 25, or 8 years after the last treatment, whichever is longer.
After the required retention period has passed, records may continue to be stored unless a request is made for them to be destroyed.
Your rights
Under data protection law, you have the right to:
- Request access to the personal data held about you
- Request correction of inaccurate or incomplete information
- Request that your records be destroyed once the legal retention period has passed
- Raise concerns about how your information is handled
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.
Contact
If you have questions about this privacy policy or your personal data, please contact Lana Alkhedairy, Reiki Practitioner, by email at contact@serenityshorereiki.com

