PHILOSOPHY

Privacy Policy

Privacy Notice

This Privacy Notice explains how we collect, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR).

1. Information We Collect

During your initial consultation, we may collect the following personal data:

Full name, address, and contact details
Gender and date of birth
Emergency contact information
GP name and surgery address
Details of current medications
Past and present health conditions
Lifestyle information (diet, alcohol intake, fitness)
Occupational and social background (employment, living situation, hobbies, relationships)
Medical test results (e.g. psychological evaluations, scans, blood tests, x-rays, tissue and genetic tests)

2. Lawful Basis for Processing

We process your personal data under the following lawful bases:

Consent: You have given clear permission for us to process your data for specific purposes. You may withdraw your consent at any time.
Provision of healthcare: Processing is necessary for the delivery of acupuncture and related health services.

More information on lawful bases is available from the https://ico.org.uk.

3. Your Data Protection Rights

You have the following rights under UK GDPR:

Right of access – Request copies of your personal data and details of how it is used.
Right to rectification – Request correction of inaccurate or incomplete data.
Right to erasure – Request deletion of your personal data.
Right to restrict processing – Request limits on how your data is used.
Right to object – Object to specific types of data processing.
Right to data portability – Request transfer of your data to another provider.
Right to withdraw consent – Withdraw consent at any time where applicable.

We will respond to all requests within one calendar month. To exercise your rights, please contact us at:
Email: mawdesley.5ea@icloud.com

4. Data Retention

We retain your personal data for eight years from the date of your last appointment, in line with professional standards. For more information, please contact us using the details above.

5. Confidentiality and Data Sharing

We are bound by a common law duty of confidentiality. We will only share your health information:

With your consent (explicit or implied for care delivery)
Where required by law or regulation

We do not share your data with third parties for marketing purposes.

6. How We Collect Your Data

We collect personal information directly from you during consultations and treatment sessions.

7. How to Make a Complaint

If you have concerns about how we handle your data, please contact us directly. If you are not satisfied with our response, you may contact the ICO:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
https://www.ico.org.uk/make-a-complaint