Training has always said I had to take notes following a treatment. How is this handled and covered by GDPR?

Under GDPR, if the information is relevant to your treatments, then it is considered to be in yours and the client’s legitimate interest. Make sure that this information is only accessible to staff who truly need this to do their job.