Privacy Policy

Effective Date: 30-June-2026
Last Updated On: 30-June-2026

This Privacy Policy describes how Lee Bladon Limited (trading as Neurosoma), 19 Beaumaris Way, Grantham, NG31 8WP, United Kingdom ("we", "us", "our") collects, uses and protects your personal information when you use our website https://neurosoma.co.uk or our services. We are the data controller for the personal information we process.

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated date, and will take effect 30 days after posting. We recommend you review this page periodically.

Information We Collect

If you book or attend a session, we collect and process the following personal information:

  • Name.
  • Date of birth.
  • Email address.
  • Phone number.
  • Address.
  • Health information (provided via the client intake form).

Health information is "special category data" under UK GDPR and is treated with additional care, as described below.

Our Lawful Basis for Processing

We process your personal information on the following lawful bases:

  • Contract: to provide the therapy sessions you have booked, including scheduling, communication and delivery of the service.
  • Explicit consent: for the processing of your health information, which you provide when completing the intake form. You may withdraw this consent at any time, though this may affect our ability to provide the service safely.
  • Legal obligation and legitimate interests: to keep accurate records, process payment, prevent fraud, and establish or defend legal claims.

How We Use Your Information

We use your information to:

  • Provide and manage your therapy sessions.
  • Process payment.
  • Communicate with you about your bookings.
  • Maintain accurate and safe clinical records.
  • Enforce our Terms & Conditions.

If we wish to use your information for any other purpose, we will ask for your consent first and use it only for that purpose, unless required to do otherwise by law.

How We Share Your Information

We do not sell your personal information, and we do not share it with third parties except as described here:

Service providers (data processors): We use Acuity Scheduling to manage bookings, intake forms and payment, and Microsoft 365 (Outlook/Exchange) for email correspondence. Your personal and health information may be processed and stored by these providers on our behalf, under their own security and data-protection terms. They process your information only to provide their service to us, and not for their own purposes.

Analytics: We use website analytics tools to understand how visitors use our site. Where these involve personal data, this is covered in our Cookie Policy.

Legal reasons: We may disclose your information where required to comply with the law, a court order or legal process, to enforce our agreements, or to establish, exercise or defend legal claims.

Corporate-Funded Session Confidentiality

Where an organisation purchases prepaid sessions for an employee, the organisation acts only as the purchaser. The employee schedules their own sessions and completes their own intake form directly with us. We do not share the employee's intake information, health information, session content, scheduling or any other personal data with the purchasing organisation. The therapeutic relationship, and all associated personal data, remains strictly between us and the individual receiving the sessions.

Retention of Your Information

We keep your personal and health information for seven years following your most recent session, after which it is securely deleted. This period reflects our record-keeping and insurance obligations and the time within which a legal claim may be brought. Where the law, our insurer, or the nature of the work requires records to be kept longer (for example, for vulnerable adults), we may retain them for an extended period. Anonymous and aggregate information that does not identify you may be kept indefinitely.

Your Rights

Under UK data protection law you have the right to:

  • Access the personal information we hold about you.
  • Have inaccurate information corrected.
  • Have your information erased (where there is no overriding legal reason to retain it).
  • Restrict or object to our processing of your information.
  • Request a copy of your information in a portable format.
  • Withdraw consent you have previously given.

Lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk

To exercise any of these rights, please contact us via https://neurosoma.co.uk/contact. We will respond in accordance with applicable law.

Please note that if you do not provide the personal information we need, or you withdraw your consent, we may be unable to provide our services to you.

Cookies

To learn how we use cookies and similar technologies, and your choices regarding them, please see our Cookie Policy.

Security

We take the security of your information seriously and use reasonable technical and organisational measures to protect it against loss, misuse and unauthorised access or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Third-Party Links

Our website may contain links to other websites we do not operate. This Privacy Policy does not cover the practices of those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any site you visit.

Contact Us About Your Data

If you have any questions or concerns about how we handle your personal information, please contact Lee Bladon via https://neurosoma.co.uk/contact. We will address your concerns in accordance with applicable law.