Privacy Policy

Privacy Policy

The Healing Room – Acupuncture with Leah

1. Introduction

At The Healing Room – Acupuncture with Leah, your privacy is very important to me. This privacy policy explains how I collect, use, and protect your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Business contact:
The Healing Room – Acupuncture with Leah
Email: [healingroomacupuncture@gmail.com]
Phone: [07966184039]

2. Information I Collect

When you book or receive treatment, I may collect:

Personal details (name, address, phone number, email)
Date of birth and gender
Medical history and treatment notes
GP or healthcare provider details (if relevant to treatment)
Payment details (if required for billing)
Appointment and communication records

3. How I Collect Your Information

Directly from you when you complete forms, book appointments, or during consultations.
Via my secure booking and practice management system (Cliniko).
Through email, phone, or messages you send to me.

4. Why I Collect Your Information

Your information is collected and used in order to:

Provide safe and effective healthcare treatment.
Maintain accurate records as required by law and professional insurance.
Contact you about appointments, follow-ups, or treatment updates.
Process payments and invoices.
Comply with professional and legal obligations.

5. How I Store and Protect Your Data

All patient records are stored securely in Cliniko, a GDPR-compliant practice management system with encrypted data storage.
Any paper notes (e.g. consent forms) are stored in a locked cabinet accessible only by me.
Electronic devices used to access records are password protected.

6. How Long I Keep Your Information

Records are kept for 7 years after your last treatment, or until a child patient reaches age 25 (or 26 if they were 17 at their last treatment), in line with legal and insurance requirements.
After this period, records are securely deleted or destroyed.

7. Sharing Your Information

I will never sell your personal information. Your data may be shared only if:

Required by law.
Necessary for insurance purposes.
With your consent, for referrals to other healthcare professionals.
Through third-party services I use (e.g. Cliniko for records, SumUp for payments) — these services are GDPR compliant.

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data I hold about you.
Request corrections to your data.
Request deletion of your records (unless I am legally obliged to retain them).
Restrict how your data is used.
Object to certain types of processing.
Lodge a complaint with the Information Commissioner’s Office (ICO) if you are concerned about how your data has been handled.

9. Contact

If you have any questions or concerns about this privacy policy, or if you wish to exercise your rights, please contact:

Leah Danton
The Healing Room – Acupuncture with Leah
Email: [healingroomacupuncture@gmail.com]
Phone: [07966184039]