Privacy Policy

Your requesting treatment and our agreement to provide that care constitutes an unwritten contract. I need to collect personal information about your health to provide you with the best possible treatment. 

I will retain your records for 7 years after your most recent appointment (or after you have reached age 25, if this is longer), but after this you can ask me to delete your records if you wish. Otherwise, I will retain your records indefinitely. The following records are stored electronically or on paper:

• Your name, telephone number and email (if supplied)
• Clinical records of treatments 
• Email correspondence and text correspondence 
• Invoices 

Collecting that information allows me to practice acupuncture safely. I keep records of your contact information and GP so I can contact you to confirm your appointments, keep you updated on matters related to your medical care or contact your doctor if needed. 

Provided I have your verbal consent, I may send you information by email if we have discussed this in treatment. You may withdraw this consent to this at any time.

Your records are stored on secure password protected applications or in a locked cabinet. I am the only person who has access to your records, invoice, files, and emails. I will never share your information with anyone who does not have a legal right of access without your written consent. 

You have the right to see what data of yours I hold, and you can also ask me to correct any factual errors. I am legally required to respond to any request from a client to see their personal data within a timescale of 30 days.  I will treat your personal data responsibly and will do everything I can to make sure that the people who can access that data have a genuine need to. 

If you feel that I am mishandling your personal data, you have the right to complain. You can raise your concern with me or with the Information Commissioner’s Office on https://ico.org.uk/concerns/

All of this is to ensure I am working in accordance with the latest General Data Protection Regulations.