Privacy Notice
At Christopher Holt, your privacy and the confidentiality of your personal and health information are extremely important.
This Privacy Notice explains how I collect, use, store and protect your information when you visit my website, contact me, complete a health questionnaire or receive psychosomatic therapy or Biochemic services.
I am committed to handling your information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Christopher Holt
Email: contact@christopherholt.co.uk
Website: www.christopherholt.co.uk
What Information I Collect
To provide my psychosomatic therapy and Biochemic services, I may collect and retain the following information:
Personal information: Your name, contact details and relevant personal circumstances.
Health information: Your medical history, symptoms, existing health conditions, medications, supplements, previous treatments and relevant test results.
Emotional and psychological information: Details you voluntarily provide about your emotional wellbeing, personal experiences, stress, trauma and lifestyle.
Consultation records: Written notes, assessments, findings and recommendations arising from our consultations.
Biochemic Design records: Where this service is provided, copies of your completed Biochemic Design, including tissue salt selections and recommendations.
Appointment and payment information: Information necessary to arrange appointments, issue invoices and process payments.
Website information: Technical information collected through website functionality, cookies and any analytics services in use.
I collect only information that is relevant and necessary for providing my services, managing my practice and meeting applicable legal obligations.
How I Use Your Information
I use your personal and health information only where necessary for the following purposes:
Understanding your health history: Reviewing the information you provide about your physical health, emotional wellbeing, lifestyle and previous experiences.
Providing consultations: Preparing for and conducting psychosomatic therapy and Biochemic consultations.
Preparing Biochemic Designs: Assessing relevant information and preparing individual tissue salt recommendations where you have requested this service.
Maintaining accurate records: Documenting consultation discussions, findings, recommendations and any agreed follow-up work.
Communicating with you: Responding to enquiries, arranging appointments and providing information relevant to your consultations.
Managing payments: Preparing invoices, processing payments and maintaining appropriate financial records.
Meeting legal obligations: Maintaining records and responding to lawful requests where required.
Your health information is treated as confidential and is not used for marketing purposes or sold to third parties.
I do not routinely disclose your health records to other practitioners or healthcare professionals. Information may be disclosed where required by law or where another applicable legal justification permits or requires disclosure.
Your Information and UK GDPR
Under the UK General Data Protection Regulation (UK GDPR), I must have a lawful reason for collecting and using your personal information.
Depending on the purpose, I rely on the following lawful bases:
Contract: To arrange and provide the consultations and services you have requested, including preparing your Biochemic Design where applicable.
Legal obligation: To maintain financial records, meet tax requirements and comply with other applicable legal obligations.
Legitimate interests: To manage appropriate business correspondence, respond to enquiries and administer my practice, where these interests do not override your rights.
Sensitive Health Information
Your medical history, physical and psychological health information and consultation findings are classified as special category personal data under UK GDPR.
Where I rely on explicit consent under Article 9(2)(a), I ask for your clear agreement to process this information for your agreed services.
You may withdraw that consent by contacting contact@christopherholt.co.uk. Withdrawal does not affect processing already carried out lawfully. Any continued retention or processing must have an appropriate legal basis and, where applicable, a separate special category condition.
I will only collect and use information that is relevant to the services I provide.
How Your Information Is Stored and Protected
I take the confidentiality, privacy and security of your personal and health information extremely seriously.
Secure Health Records
Completed health questionnaires, consultation notes, relevant medical information, assessment findings and completed Biochemic Designs are stored on an encrypted storage device, with a separate secure backup.
I am the only person authorised to access these confidential client records.
Health Questionnaires
Health questionnaires are collected through Jotform and downloaded to my encrypted storage device.
Once the information has been securely transferred, checked and successfully backed up, the original submission is deleted from Jotform.
Email Correspondence
I use Google Workspace for business email communications, enquiries and appointment arrangements.
Any health information received by email is downloaded and securely stored with the client's confidential health records on my encrypted storage device.
Routine appointment correspondence may remain within Google Workspace for administrative purposes.
Consultation Notes
Consultations are conducted by telephone or Zoom and are not audio or video recorded.
Written notes may be taken during or following consultations to document relevant health information, discussions, findings and recommendations.
These notes are stored securely on my encrypted storage device, with a separate secure backup, and form part of your confidential client records.
Biochemic Design Records
Where a Biochemic Design is undertaken, a copy of the completed design is securely retained as part of the client's confidential records.
This may include assessment findings, selected tissue salts, individual recommendations and relevant follow-up information.
Access and Confidentiality
I am the sole practitioner responsible for handling and maintaining client health records.
I do not routinely share clients' confidential health records with other practitioners or healthcare professionals.
External service providers may process personal information where necessary to provide appointment booking, email, payment, invoicing or website services.
I take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
Data Retention and Secure Disposal
Client health records are normally retained for seven years following the last consultation or professional service, unless a different period is justified or required by applicable law.
When information is no longer required, appropriate steps are taken to securely delete or dispose of it, including copies held in backups where applicable.
Third-Party Services
To operate my practice and provide my services, I use selected third-party service providers. These services may process personal information where necessary for their particular functions.
Jotform — Health Questionnaires
Jotform is used to collect completed health history questionnaires and consent information. Submissions are transferred to my secure encrypted storage system and deleted from Jotform once their successful transfer and backup have been verified.
Google Workspace — Email Communications
Google Workspace is used for business emails, appointment enquiries and correspondence. Relevant health information received by email is transferred to my encrypted client records.
Setmore — Appointment Bookings
Setmore is used to manage online appointments and may process clients' names, contact details and booking information.
Stripe — Payment Processing
Stripe is used to process payments securely. Payment information is handled in accordance with Stripe's applicable privacy and security arrangements.
Squarespace — Website and Invoicing
Squarespace provides my website and invoicing facilities. It may process information associated with website visits, enquiries, invoices and payments.
Zoom — Online Consultations
Zoom may be used to conduct online consultations and processes information necessary to provide video and audio communications.
Data Protection and International Transfers
Some service providers may process or store personal information outside the United Kingdom. Where international transfers take place, I will ensure that appropriate safeguards or other lawful transfer arrangements apply.
I do not sell clients' personal or health information to third parties.
Information may also be disclosed where required by law or where another applicable legal justification permits disclosure.
How Long Your Information Is Kept
I retain client information only for as long as reasonably necessary for the purposes for which it was collected, including providing my services, maintaining appropriate records and meeting legal obligations.
Health and Consultation Records
My standard retention period for adult client health records is seven years from the client's last consultation or professional service, unless a longer or shorter period is justified or required by applicable law.
These records may include health questionnaires, consultation notes, relevant health correspondence and completed Biochemic Designs.
Emails and Appointment Information
Routine correspondence and appointment information are retained only for as long as reasonably necessary for business administration, record-keeping or legal purposes.
Financial Records
Invoices, payment records and related financial information are retained for the periods required by applicable tax and accounting legislation.
Secure Deletion
When personal information is no longer required, I take appropriate steps to securely delete or dispose of it, including information held on encrypted storage devices and associated backups.
You may contact me at contact@christopherholt.co.uk to enquire about how long your information will be retained or to request deletion, subject to applicable legal requirements.
Your Rights Under UK GDPR
Under UK data protection law, you have certain rights concerning the personal information I hold about you.
Depending on the circumstances, these include:
Right of access: You can request a copy of the personal information I hold about you.
Right to rectification: You can request that inaccurate or incomplete personal information be corrected.
Right to erasure: You can request the deletion of your personal information where the law provides this right.
Right to restrict processing: You can request that I limit how your information is used in certain circumstances.
Right to object: You may object to certain uses of your personal information.
Right to data portability: Where applicable, you may request your information in a structured, commonly used, machine-readable format.
Right to withdraw consent: Where I rely on consent to process your information, you may withdraw that consent at any time. This does not affect processing already carried out lawfully.
How to Exercise Your Rights
To make a request or raise a concern about your personal information, please contact:
Christopher Holt
Email: contact@christopherholt.co.uk
I will normally respond to requests within one calendar month, in accordance with applicable data protection law.
Complaints
If you are unhappy with how your personal information has been handled, you can contact the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Website: https://ico.org.uk
You have the right to complain to the ICO without first contacting me, although I welcome the opportunity to address your concerns directly.
Cookies and Website Information
My website, www.christopherholt.co.uk, is hosted by Squarespace.
The website may use cookies and similar technologies to support its operation, maintain security, remember visitor preferences and provide information about website usage.
Some cookies are essential for the website to function correctly. Other cookies, including those used for analytics or additional functionality, may require your consent.
Where consent is legally required, these technologies will only be used in accordance with your choices.
You can manage cookies through your browser settings and, where available, the website's cookie preferences.
For further information about how Squarespace handles personal information, please visit www.squarespace.com/privacy.
Changes to This Privacy Notice
I may update this Privacy Notice from time to time to reflect changes in my services, working practices, technology or applicable data protection legislation.
Any changes will be published on this page, together with the date of the latest update.
Where significant changes affect how your personal or health information is processed, I will take appropriate steps to inform you where required.
Last updated: 29 October 2026
Contact
Christopher Holt
Psychosomatic Therapist & Biochemic Practitioner
Email: contact@christopherholt.co.uk
Website: www.christopherholt.co.uk