Last updated: 23 September 2026
Who is responsible
Sarraf Healthcare Services Ltd, trading as Chronic Wellness, is the controller responsible for the information described here. Company number: 17421061. Business address: 70 Salmon Street, London, NW9 8PU. Contact Hadi Ali at seekchronicwellness@gmail.com for privacy questions, requests or complaints.
What information we use
We use contact and booking details, confirmation that you are aged 18 or over, your location where relevant to remote appointments, payment records, consent records and correspondence. For coaching, we use your goals, relevant lifestyle information, intake answers, session notes and agreed actions.
Health information may include relevant conditions, medicines, allergies or restrictions that you choose to disclose for suitability and safe coaching. Please provide only what is relevant; do not send medical records or detailed health information in an initial appointment enquiry.
Why we use it and our legal bases
We use necessary contact, booking and coaching information to take steps at your request and deliver our contract with you. Financial records are also used to meet applicable accounting and tax obligations.
For relevant health information, we seek your explicit consent as our special-category processing condition, alongside the applicable contract basis for providing coaching. You can withdraw this consent by email. This does not undo earlier lawful processing, but we may be unable to continue safely if the information is necessary for the service. We will discuss the options with you.
We use necessary records to handle complaints, protect our service and establish or defend legal claims on the basis of legitimate interests, where those interests are not overridden by your rights. Health information retained specifically for legal claims requires an applicable special-category condition, such as necessity for those claims; we do not assume a general right to retain everything.
Optional weekly tips use your consent. You can withdraw it at any time without affecting coaching. We keep the minimum record needed to honour an unsubscribe request and avoid emailing you again.
Booking, calls, email and records
Square provides booking, payment and electronic-contract services. Payment-card details are handled through Square; please never email them to us. Google Gmail is used for appointment administration, routine support and optional weekly emails. Google Meet is used for online consultations; we do not record them.
Our records process uses an access-restricted, encrypted local client folder organised by client ID. Information also remains in the relevant Square and Google services; it is not all stored solely on our computer. Client IDs do not make identifiable records anonymous.
Before returning a completed intake form, follow the protection instructions supplied. If those instructions are unclear or you cannot use the protected form, contact us without attaching health information so we can arrange an alternative.
Who may receive information
Hadi accesses client information to deliver and administer the service. Relevant information is processed by the providers described above. Their roles depend on the activity; a provider may also process some information for its own purposes under its own notice.
We do not routinely contact your GP or share coaching information with another professional without your specific permission. Disclosure may also be necessary where required or permitted by law, for an emergency or safeguarding concern, or for a legal claim, with an appropriate lawful basis.
Information may be disclosed to professional advisers or authorities when necessary and lawful. It is not sold. We do not publish a testimonial or identifying client story without separate permission.
International processing
Square, Google and the provider that hosts our website may process information outside the UK. Where UK data-protection law requires it, we use the appropriate safeguards made available through the provider's contractual and privacy arrangements. You can ask us for further information about the relevant transfer arrangements.
How long information is kept
Initial enquiries that do not lead to a booking are deleted or anonymised within six months after they are resolved. Coaching records, including agreements, consent, relevant intake, session notes and action plans, are kept for seven years after the last coaching session. Payment and accounting records are kept for at least six years from the end of the relevant financial year.
Complaint and incident records are kept for seven years after closure. Records may be held longer where a complaint, legal claim, insurer requirement or legal obligation makes this necessary. We review the schedule annually and remove records that are no longer needed.
Weekly-email contact details are used while your consent remains current. We review active consent every 24 months. If you unsubscribe, we update the mailing list and keep only the minimum suppression record needed to avoid contacting you again. Backup copies are encrypted and removed through the same retention cycle.
Your choices and rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. Rights are subject to applicable exceptions; deletion is not always possible where lawful retention is required.
You can withdraw consent by emailing seekchronicwellness@gmail.com. For weekly emails, simply reply “unsubscribe”. We may need to verify your identity before responding to a request.
Raise privacy concerns with us, or complain to the Information Commissioner’s Office at ico.org.uk. We do not use solely automated decisions with legal or similarly significant effects to decide your suitability for coaching.
Website and updates
The website provides information and links to our Square booking page. Please do not include health information in a general website enquiry. Square and Google provide their own privacy information when you use their services.
We will keep this notice aligned with the services actually used and explain material changes affecting your information.