Last updated: December 2025

 

Introduction

We are committed to protecting your privacy and handling your personal information responsibly. This policy explains how we collect, use, store, and protect your data when you use our leech therapy and nutritional advisory services.

 

Information we collect

We may collect and process the following personal data:

• Contact details – name, address, telephone number, email address

• Health information – medical history, current medications, allergies, GP details, treatment notes, and nutritional assessments

• Payment information – for processing fees (we do not store card details)

• Communication records – appointment bookings, correspondence, and consent forms

 

Why we collect your data

We process your personal data for the following purposes:

• To provide safe and effective leech therapy and nutritional advice

• To maintain accurate clinical records as required by our professional obligations

• To communicate with you about appointments and aftercare

• To comply with legal and regulatory requirements

• To process payments

 

Legal basis for processing

Under UK GDPR, we process your data on the following grounds:

• Consent – you have given clear consent for us to process your health data for treatment purposes

• Contractual necessity – processing is necessary to deliver the services you have requested

• Legal obligation – we are required to maintain clinical records

• Legitimate interests – practice administration and communication

 

How we store and protect your data

• Your records are stored securely, whether in physical or electronic format

• Access is restricted to authorised personnel only

• We use appropriate technical measures to protect electronic data

• Paper records are kept in locked storage

 

Data retention

We retain your clinical records for a minimum of 8 years from your last appointment (or longer if required by law or professional guidelines). After this period, records are securely destroyed.

 

Sharing your information

We will not share your personal data with third parties except:

• With your explicit consent (e.g., referral to your GP or another practitioner)

• Where required by law or regulatory bodies

• With professional indemnity insurers if a claim arises

We will never sell your data or use it for marketing without your consent.

 

Your rights

Under UK data protection law, you have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion of your data (subject to legal retention requirements)

• Restrict or object to certain processing

• Data portability – receive your data in a usable format

• Withdraw consent at any time

To exercise any of these rights, please contact us using the details below.

 

Contact us

If you have questions about this policy or wish to make a data request:

Data Controller: [Your Name] Address: [Practice Address] Email: [Email Address] Telephone: [Phone Number]

 

Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk Telephone: 0303 123 1113