Who We Are
Deanna Thomas - Acupuncture & Wellbeing (deannathomastherapies.com) is responsible for deciding how your personal data is processed and for what purposes. This privacy notice applies to information we collect from our patients, prospective patients, former patients, and visitors to our website.
What Is Personal Data?
Personal data refers to any information relating to a living individual who can be identified from that information. Examples include your contact details and appointment history. Special category data, a sub-category of personal data, includes sensitive information such as your health records, which we may collect to provide you with the best possible care.
How Do We Process Your Personal Data?
We take your privacy seriously and comply with GDPR by:
Keeping your data up to date.
Storing and destroying it securely.
Collecting only the necessary data.
Protecting personal data from unauthorised access, loss, misuse, and disclosure.
Ensuring appropriate technical measures are in place.
Patients, Prospective Patients, Former Patients, and Visitors to Our Clinic
We collect and process your personal data to manage appointments, provide treatment, and fulfil our legal obligations. This includes your name, contact details, medical history, and treatment records. We may also need to contact your GP in case of an emergency or as part of your treatment plan.
We store your health and wellbeing records on our secure booking and clinic management system, Fresha. This system is designed to ensure that your information is protected and only accessible by authorised personnel.
Website Users
Our website, hosted by Wavoto, collects minimal personal data, such as your name and email address, when you contact us through our contact form or you sign up to our mailing list. Please note that while we strive to protect your information, emails sent to us may not be encrypted.
Sharing Your Personal Data
Your personal data will be treated as confidential. We will only share it under the following circumstances:
With your explicit consent.
When required by law, such as with the police or a court order.
In emergencies, to protect your life or the life of another person.
With relevant authorities, like the British Acupuncture Council or our insurance company, in the event of a complaint or legal proceedings.
How Long Do We Keep Your Personal Data?
We retain your personal data only as long as necessary to fulfil the purposes for which it was collected. Patient records are kept for seven years after you cease to be a patient, in accordance with the British Acupuncture Code of Professional Conduct. This retention period ensures we can comply with legal, tax, and regulatory requirements.
Your Rights and Your Personal Data
Under the GDPR, you have the following rights regarding your personal data:
The right to access – You can request a copy of the personal data we hold about you.
The right to rectification – You can request that we correct any inaccurate or outdated data.
The right to erasure – You can request that your personal data be erased when it is no longer necessary for us to retain it.
The right to restrict processing – You can request that we restrict the processing of your data under certain conditions.
The right to data portability – You can request that your data be transferred to another data controller.
The right to object – You can object to the processing of your data in certain circumstances.
The right to be informed – You will be notified if your data is lost or accessed by an unauthorised party.
Further Processing
If we intend to use your personal data for a new purpose not covered by this notice, we will provide you with a new notice explaining this use and seek your consent where necessary.
Contact Details
If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact us:
Data Protection Officer
Deanna Thomas - Acupuncture & Wellbeing
For more information on your rights or to lodge a complaint, you can visit the Information Commissioner’s Office website at https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly.