Terms & Policies
Integral Health Privacy and Retention Policy – April 2023
Angiras Auro, Integral Health, hereafter for the purposes of this Privacy Notice will be referred to as Integral Health, holds some information about you and this policy applies between you and Integral Health. This document outlines how that information is used, who we may share that information with and how we keep it secure.
This document does not provide exhaustive detail; however we are happy to provide any additional information or explanation if required. Any requests for this should be sent to angiras@integral-health.co.uk.
Here at Integral Health, we are committed to maintaining the trust and confidence of our clients, subscribers to our newsletter and visitors to our website and we keep our Privacy Notice under regular review. This Privacy Notice was last reviewed in April 2023.
1. Scope and Definitions
This document refers to Personal Data, which is defined as information concerning any living person who can be identified by that data (or from other information either in our possession or likely to come into our possession). This also collectively refers to all information that you submit to Integral Health via the website or through any other interaction with Integral Health.
Integral Health also handles Special Category Data, defined as personal data that is especially sensitive, revealing political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data (where used for identification purposes), data concerning health, a person’s sex life and sexual orientation. This is collected with your express permission.
The Data Protection Act 2018 (DPA), which is the incorporation of the EU wide General Data Protection Regulation (GDPR) 2018 into UK Law protects and enhance the rights of UK and EU data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the UK, EU and its storage within the EEA until 27 June 2025. Additional definitions can be found at the end of this document.
Client, you and your: this refers to the individual purchasing/using healthcare support or educational services from Integral Health.
Data Controller is defined as the natural or legal person who (either jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are processed. For the purposes of this policy Integral Health is the data controller.
Data Processor is defined as any natural or legal person who processes the personal data on behalf of the data controller. We may use the services of other providers in order to process your data more effectively. In these instances, we will ensure that the relevant agreements will be in place to ensure the security of your personal data to the best of our ability.
2. What we do at Integral Health:
At Integral Health, Angiras Auro provides wellness support for health conditions using kinesiology, nutritional advice, and reiki. We focus on preventative healthcare, the optimisation of physical and mental health and chronic health conditions. Through Kinesiology consultations, dietary and lifestyle analysis, and biochemical testing we aim to understand the underlying cause of your health issues which we aim to address with personalised dietary and lifestyle advice and nutraceutical recommendations (supplements). Therapies are carried out in accordance with full and complete training and certificates are available for clients to see upon request. We also run educational programmes, teaching kinesiology and periodically we run workshops, group presentations and educational seminars. Full public liability insurance is provided to Integral Health via Balens Insurance Ltd.
How we obtain your personal data:
Information provided by you:
You provide us with personal data in the following ways:
● By completing a questionnaire
● By signing a terms of engagement form
● During a consultation and session
● Through email, over the telephone, including text and message apps or by post
● By taking credit card and online payment
This may include the following information:
● Basic details such as name, address, contact details and next of kin.
● Details of contact we have had with you such as referrals and appointment requests.
● Health information including your previous medical history, dietary, lifestyle, supplements and medicine details, biochemical results, clinic notes and health improvement plans (Special Category Data).
● GP contact information
● Bank details
We use this information to provide you with direct health care. This means that the legal basis of our holding your personal data for legitimate interest. By accessing our services and accepting that you have read and understood our Privacy Policy, you agree to the collection and use of information in accordance with this policy. We will only collect what is relevant and necessary for your wellness support. To be able to process your personal data it is a condition of any healthcare support that you give your explicit consent to allow Angiras Auro to document and process your personal medical data. When processing any Special Category Data our legal basis is Contract and Consent.
Information we get from other sources:
We may obtain sensitive medical information (Special Category Data) in the form of test results from biochemical testing companies. We use this information to provide you with direct healthcare. This means that the legal basis of holding your personal data is for legitimate interest.
We may obtain sensitive information from other healthcare providers. This information is subject to you giving us your express consent. If we do not receive this consent from you, we will not be able to coordinate your healthcare with that provided by other providers which means the healthcare provided by us may be less effective.
How we use your data
Any or all of the data above may be required by us from time to time in order to provide you with the best possible wellness support may be used for the following reasons:
○ internal record keeping
○ improvement of our products and support
○ transmission by email of marketing materials that may be of interest to you
○ contact for market research purposes which may be done using email, telephone, or mail. Such information may also be used to customise or update the website.
We act as a data controller for use of your personal data to provide direct healthcare. We also act as a controller and processor in regard to the processing of your data from third parties such as testing companies and other healthcare providers. We act as data controller and processor in regard to the processing of credit card and online payments. We undertake at all times to protect your personal data, including any health and contact details, in a manner which is consistent with our duty of professional confidence and the requirements of the DPA 2018 concerning data protection. We will also take reasonable security measures to protect your personal data storage.
Contact details provided by you such as telephone numbers, email addresses, postal addresses may be used to remind you of future appointments and provide reports or other information concerning your treatment.
We may use your personal data where there is an overriding public interest in using the information e.g. in order to safeguard an individual, including yourself, or to prevent a serious crime. Also, where there is a legal requirement such as a formal court order.
For direct marketing purposes via email, we will need your consent either via soft-opt-in or an opt-in
○ Soft-opt-in consent is a specific type of which applies when you have previously engaged with us (eg you contact us for more details of a particular product/service, and we are marketing similar products/services). Under soft-opt-in consent, we will take your consent as given unless you opt out.
○ For other types of e-marketing, we are required to obtain your express consent, that is you need to take positive, affirmative action when consenting by, for example, checking a tick box that we will provide.
○ If you are not satisfied with our approach to marketing, you have the right to withdraw consent at any time. To find out how to withdraw your consent, see the section headed “Your Rights” below.
5. Your data and other organisations
We will keep information about you confidential. Integral Health will only collect the information needed so that they can provide you with the services you require; the business does not, and will not, sell or broker your data.
We will only disclose your information with other third parties with your express consent with the exception of the following categories of third parties:
● Our registrant body, CNHC and our professional associations Kinesiology Association, for the processing of a complaint made by you.
● Any contractors and advisors that provide a service to us or act as our agents on the understanding that they keep the information confidential. Eg Mailchimp, online booking software, etc.
● Anyone to whom we may transfer our rights and duties under any agreement we have with you
● Any legal or crime prevention agencies and/or to satisfy any regulatory request (eg CNHC) if we have a duty to do so or if the law allows us to do so.
Integral Health may share your basic contact details with supplement companies and biochemical testing companies as part of providing you with direct healthcare. Each company will only be provided with your details with your explicit consent, usually in order to send you nutritional supplements or biochemical tests as part of your wellness support.
We will seek your express consent before sharing your information with your GP or other healthcare providers. However, if we believe your life is in danger then we may pass your information onto an appropriate authority (such as the police, social services in the case of a child or vulnerable adult, or GP in case of self-harm) using the legal basis of vital interests.
We may share your case history in an anonymised form with our peers for the purpose of professional development. This may be at clinical supervision meetings, conferences, online forums and through publishing in medical journals, trade magazines or online professional sites. We will seek your explicit consent before processing your data in this way.
Newsletter: We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe at any time by clicking on the unsubscribe link on any newsletter.
Social Media: All contact made via social media is subject to the privacy policy of the relevant social media outlet, eg Facebook, Messenger, Instagram, Twitter, Linked In, etc. Integral Health will not share your data gathered from social media with third parties.
Links to other websites: This privacy notice does not cover the links within this site linking to other websites. Those sites are not governed by this Privacy Policy, and if you have questions about how a site uses your information, you’ll need to check that site’s privacy statement.
Online Booking: As part of the registration process to book sessions, we collect personal information for appointment processing and reminders. We use a third-party provider, (tbc) to deliver this service. We gather statistics around bookings and clicks using industry standard technologies to help us monitor and improve. For more information, please see (tbc’s privacy notice).
Legal basis for processing any personal data:
To meet Integral Health’s contractual obligations obtained from explicit client consent and legitimate interest to respond to enquiries concerning the services provided.
Legitimate interests pursued by Integral Health:
To promote direct healthcare and wellbeing support for clients with all types of health problems.
6. Your rights as a data subject
At any point whilst Integral Health is in possession of, or processing your personal data, all individuals have the following rights with some exceptions:
● Right of access - you have the right to request a copy of the information that we hold about you. Under special circumstances some information may be withheld.
● Right of rectification - you have the right to correct data that we hold about you that is inaccurate or incomplete.
● Right to be forgotten - in certain circumstances you can ask for the data we hold about you to be erased from our records, where we are not required to keep it by law or in accordance with the Kinesiology Association or CNHC guidelines.
● Right to restriction of processing - where certain conditions apply you have a right to restrict the processing, where we are not required to do so by law or in accordance with the Kinesiology Association or CNHC guidelines.
● Right to object - you have the right to object to certain types of processing such as direct marketing.
In the event that Integral Health refuses your request under rights of access, we will provide you with a reason why, which has the right to legally challenge. At your request Integral Health can confirm what information it holds about you and how it is processed.
We do not carry out any automated processing, which may lead to automated decisions based on your personal data.
You can request the following information:
● Identity and the contact details of the person (Angiras Auro of Integral Health) that has determined how and why to process your data.
● The purpose of the processing as well as the legal basis for processing.
● If the processing is based on the legitimate interests of Integral Health and information about these interests
● The categories of personal data collected, stored and processed.
● How long the data will be stored.
● Details of your rights to correct, erasure, restrict or object to such processing.
● Information about your right to withdraw your consent at any time.
● How to lodge a complaint with the supervisory authority (ICO).
● Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and possible consequences of failing to provide such data.
To access the personal data held, identification will be required:
Integral Health accepts the following forms of identification (ID) when information on your personal data is requested: a copy of your driving licence, passport or birth certificate, together with a utility bill not older than three months. A minimum of one piece of photographic ID listed above and a supporting document is required. If Integral Health is dissatisfied with the quality, further information may be sought before personal data can be released.
All requests should be made to Angiras Auro by:
Emailing: angiras@integral-health.co.uk Phoning: 07791 835119
Writing to: Integral Health, 65 Trinity Road, Stotfold, Hitchin, Hertfordshire SG5 4EQ
If you do not hear back within five working days, please try another form of contact.
It is important that the personal information that we hold about you is accurate and current. Please keep us informed if your Personal Data changes during your relationship with us.
7. Safeguarding your data and keeping it secure
All data is held in the United Kingdom. Integral Health does not store personal data outside the EEA. The security of your data is important to us but remember that no method of transmission over the internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data that we hold about you and if you want it to be removed from our systems, please contact us.
We ensure the information we hold is kept in secure locations, restrict access to information to authorised personnel only, protect confidential information held on equipment such as laptops and computers with encryption (which masks data so that unauthorised users cannot see or make sense of it). We ensure external data processors that support us are legally and contractually bound to operate and prove security arrangements are in place where data that could or does not identify the person are processed.
We only use information that may identify you in accordance with the DPA. This requires us to process personal data only if there is a legitimate basis for doing so and that any processing must be fair and lawful.
Within the health sector, we also have to follow the common law duty of confidence which means that where identifiable information about you has been given in confidence, it should be treated as confidential and only shared for the purpose of providing direct healthcare. We will protect your information, inform you of how your information is used and allow you to decide if and how your information can be shared.
Angiras Auro is registered with the Information Commissioner’s Office (ICO) as a data controller and collects data for a variety of purposes. A copy of the registration is available through the ICO website.
8. Retention Policy - how long we store your information for
All records held by Integral Health will be kept for the duration specified by guidance from our professional associations CNHC and the Kinesiology Association.
Integral Health will process personal data during the duration of any treatment and will continue to store only the personal data needed for eight years after the contract has expired to meet any legal obligations. After eight years all personal data will be deleted, unless such information needs to be retained by us to meet our future obligations to you. Records concerning minors who have received treatment will be retained until the child has reached the age of 25.
In the event of Angiras Auro’s death, the executor of her estate will destroy all your records and contact details, both in hard copy and electronically.
9. Consent:
Through agreeing to this privacy notice you are consenting to Integral Health processing your personal data for the purposes outlined. You can ask to see the information that we hold by contacting Angiras Auro. You can withdraw consent at any time by using the postal, email address or telephone number provided at the end of this Privacy Notice.
10. Website copyright and technical details
Www.integral-health.co.uk and any of its subdomains are hosted by Squarespace. Squarespace collects personal data when you visit this website, including:
● Information about your browser, network and device
● Web pages you visited prior to coming to this website
● Web pages you view while on this website
● Your IP address
Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyses the data in a depersonalised form.
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses. To find out more about cookies including to see what cookies have been used and how to manage and delete them visit: www.allaboutcookies.org
● These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
● These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
This website collects personal data to power our site analytics, including:
● Information about your browser, network, and device
● Web pages you visited prior to coming to this website
● Your IP address
This information may also include details about your use of this website, including:
● Clicks
● Internal links
● Pages visited
● Scrolling
● Searches
● Timestamps
We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.
Forms: When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. We also share this information for storage and with Zapier for data porting.
Fonts: This website uses font files from Google Fonts and Adobe Fonts. To properly display this site to you, servers where the font files are stored may receive personal information about you, including:
● Information about your browser, network, or device
● Your IP address
Copyright: All content of www.integral-health.co.uk is owned or controlled by/licensed to Integral Health and is protected by worldwide copyright laws. You may not download content for your personal or professional use and no modification or further reproduction of the content is permitted without the express written permission from us. The content may not be otherwise copied or used in any way. Any products supplied by us are also protected by worldwide copyright laws and should not be redistributed.
The trademarks, service marks, trade names, trade dress and products in this service are protected internationally. No use of any of these may be made without prior written authorisation from us, except to identify the products or services of the company. Information, products, processes and technologies described as part of this service may be subject to other intellectual property rights.
11. Statistical Data
In the instance where personal data is collated as part of a data-set for statistical analysis, educational resources or market research, the data will be anonymised.
12. Complaints
If you have a complaint regarding the use of your personal data then please contact us by writing to Angiras Auro, Integral Health, 65 Trinity Road, Stotfold, Hitchin, Hertfordshire SG5 4EQ. Telephone 07791 835119 Email: angiras@integral-health.co.uk
13. Changes to this Privacy Policy:
We keep our privacy notice under regular review. This privacy notice was last updated on 24 April 2023.
Cookies Policy
We use a system of classifying the different types of cookies which we use on the Website, or which may be used by third parties through our websites. The classification was developed by the International Chamber of Commerce UK and explains more about which cookies we use, why we use them, and the functionality you will lose if you decide you don't want to have them on your device.
What is a cookie?
Cookies are text files containing small amounts of information which are downloaded to your personal computer, mobile or other device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user's device.
How long are cookies stored for?
Persistent cookies - these cookies remain on a user's device for the period of time specified in the cookie. They are activated each time that the user visits the website that created that particular cookie.
Session cookies - these cookies allow website operators to link the actions of a user during a browser session. A browser session starts when a user opens the browser window and finishes when they close the browser window. Session cookies are created temporarily. Once you close the browser, all session cookies are deleted.
Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improve the user experience.
You can find more information about cookies at www.allaboutcookies.org and www.youronlinechoices.eu.
Cookies used on the Website
Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
Third party cookies
These cookies allow third parties to track the success of their application or customise the application for you. Because of how cookies work we cannot access these cookies, nor can the third parties access the data in cookies used on our site.
For example, if you choose to ‘share’ content through Twitter or other social networks you might be sent cookies from these websites. We don't control the setting of these cookies, so please check those websites for more information about their cookies and how to manage them.