We may collect and process the following personal data:
We use your personal data to:
We process your personal data under the following lawful bases as defined by the UK GDPR:
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Clinical records are retained in accordance with NHS and regulatory guidelines, typically a minimum of 8 years. Booking and financial records are kept for 7 years in line with HMRC requirements.
We do not sell or rent your personal data to third parties. We may share your information with trusted third-party service providers who assist us in operating our business, including payment processors (Revolut), email service providers, and our booking platform. All third parties are required to handle your data securely and in accordance with applicable law.
Under UK GDPR, you have the right to:
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is handled entirely by Revolut and is never stored on our servers.
our contact page