Effective date: 1 August 2026
Last updated: 1 August 2026

At Aterfa, we are committed to protecting your personal information and handling it with care, transparency, and respect.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make an enquiry, book an appointment, or receive a treatment.

1. Who we are

Aterfa is the data controller responsible for your personal data.

Contact details
Aterfa
hello@aterfa.uk
+44 7523 896697

If you have any questions about this Privacy Policy or how your data is handled, please get in touch using the contact details above.

2. The personal data we collect

Depending on how you interact with Aterfa, we may collect and process the following personal data:

a) Identity and contact information

• Name

• Email address

• Telephone number

• Address, where relevant

b) Booking and appointment information

• Appointment history

• Treatment preferences

• Booking details

• Cancellation or attendance records

c) Health and consultation information

To provide treatments safely and appropriately, we may collect information you choose to provide about:

• Injuries

• Medical conditions

• Allergies

• Pregnancy

• Pain, tension, posture, mobility, or recovery concerns

• Other relevant health or wellbeing information shared during consultation or treatment

d) Payment information

We may receive limited payment-related information connected to your booking, such as payment status, transaction reference, or amount paid. We do not store full card details ourselves where payments are processed securely by third-party providers.

e) Communications

• Enquiries submitted by email, contact form, or message

• Correspondence relating to bookings, treatments, or customer support

f) Website usage information

When you use our website, certain technical information may be collected automatically, such as:

• IP address

• Browser type

• Device information

• Pages visited

• Website usage data collected through cookies or similar technologies

3. How we use your personal data

We use your personal data to:

• Respond to enquiries

• Manage bookings and appointments

• Provide treatments safely and appropriately

• Tailor services to your needs

• Process payments

• Maintain treatment records

• Communicate with you about your appointment

• Send marketing communications where you have chosen to receive them

• Improve our website, services, and customer experience

• Comply with legal, regulatory, tax, insurance, or professional obligations

4. Lawful bases for processing

Under UK data protection law, we rely on one or more of the following lawful bases:

• Contract — where processing is necessary to take steps at your request or to provide the services you have booked

• Legal obligation — where we need to comply with legal or regulatory requirements

• Legitimate interests — where it is necessary for the running and improvement of our business, provided your rights do not override those interests

• Consent — where you have given clear permission, for example in relation to marketing or certain health information

Where we collect and use health-related information, we do so only where it is appropriate and necessary to provide treatments safely, and with the relevant legal basis under applicable data protection law. ICO guidance requires businesses to explain what personal data they collect, why they use it, their lawful basis, retention, sharing, and individuals’ rights. ICOICOICO

5. Special category data

Some information you provide during consultation or treatment may be considered special category data, including health information.

We treat this information with particular care and only collect what is relevant to your treatment, safety, and wellbeing. This information will be used only for appropriate treatment-related purposes and kept securely.

6. How we collect your data

We collect personal data directly from you when you:

• Complete a contact form

• Send an email or message

• Make a booking

• Complete a consultation form

• Attend an appointment

• Subscribe to marketing updates

• Browse our website

We may also receive limited information from trusted third-party booking Acuity Scheduling,or payment providers you choose to use.

7. Sharing your personal data

We do not sell your personal data.

We may share your data with trusted third parties where necessary to operate the business, including:

• Website hosting providers

• Booking system providers

• Payment processors

• Email service providers

• Professional advisers, insurers, or accountants

• Legal or regulatory authorities where required

If you use a Squarespace website and online payment tools, your data may also be processed by service providers involved in website hosting, booking, and payments. You should ensure those providers’ own privacy information is also available to visitors where relevant.

8. Payments

Payments may be processed by third-party payment provider Stripe or other secure processors used by Aterfa.

These providers process your payment information in accordance with their own privacy policies and security procedures. Aterfa does not store full payment card details on its own systems.

9. Marketing communications

If you opt in to receive updates, offers, or newsletters, we may use your contact details to send you marketing communications.

You can unsubscribe or withdraw your consent at any time by:

• Clicking the unsubscribe link in emails, or

• Contacting us directly

We will not send you marketing emails where consent is required unless you have chosen to receive them.

10. Data retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, insurance, tax, and record-keeping requirements.

Typical retention periods may include:

• Enquiry data: 12 months

• Client booking and treatment records: 5 years after your last appointment

• Records relating to minors, where applicable: 2 years after your last appointment

• Marketing data: until you unsubscribe or withdraw consent

You should tailor these timeframes to your actual practice, insurance requirements, and professional advice.

11. Data security

We take appropriate technical and organisational measures to help protect your personal data from unauthorised access, loss, misuse, disclosure, alteration, or destruction.

However, no method of transmitting or storing information online is completely secure, and we cannot guarantee absolute security.

12. International transfers

Some of the third-party services we use may store or process personal data outside the UK.

Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place so that your personal data remains protected in accordance with applicable data protection law.

13. Your rights

Under UK data protection law, you may have the right to:

• Request access to your personal data

• Request correction of inaccurate or incomplete data

• Request erasure of your data in certain circumstances

• Request restriction of processing

• Object to processing in certain circumstances

• Request transfer of your data, where applicable

• Withdraw consent at any time, where consent is the basis for processing

These rights are not absolute and may depend on the circumstances.

If you would like to exercise any of your rights, please contact us using the details above. The ICO says privacy information should tell people about their rights and how to complain if they have concerns. ICO

14. Complaints

If you have any concerns about how your personal data is handled, we would welcome the opportunity to address them first.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters:

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/

15. Cookies

Our website may use cookies and similar technologies to support core website functionality, enhance user experience, and help us understand how the site is used.

Some cookies are strictly necessary for the website to function properly. These may include cookies related to security, accessibility, page navigation, or booking and checkout functionality. Because these cookies are essential to the operation of the site, they do not usually require consent. ICO

We may also use non-essential cookies, such as analytics or performance cookies, to help us improve the website and better understand visitor interactions. Where required by law, these cookies will only be used with your consent.

You can manage your cookie preferences through your browser settings and, where applicable, through the cookie banner presented on our website.

For more information about the cookies used on this site, or if you have any questions about how cookies are used, please contact us using the details set out in this Privacy Policy.

16. Third-party websites

This website may include links to third-party websites. If you follow a link to another website, please note that it will have its own privacy practices and policies. Aterfa is not responsible for the content or privacy practices of third-party sites.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. The latest version will always be posted on this website.