Privacy Policy

Emma Hart Acupuncture | Effective date: 12 July 2025

Emma Hart Acupuncture is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how your personal information is collected, used, and protected when you engage with our clinic, website, or services.

Who Am I?

Emma Hart Acupuncture is owned and operated by Emma Hart. The business is registered with the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

ICO contact: 0303 123 1113 or https://ico.org.uk/global/contact-us/

What Personal Data Do I Collect?

- Contact details (name, phone number, email, address)

- Date of birth

- Emergency contact

- GP details

- Medical history, symptoms, medications

- Session notes

- Communications (email/messages)

- Website usage via cookies or analytics

Legal Basis for Processing

I collect and process your data under the following lawful bases:

- Consent

- Legitimate interest (e.g. for providing care)

- Legal obligation (e.g. insurance/tax purposes)

- Vital interest (in case of medical emergency)

How I Use Your Data

I use your data to:

- Provide safe and effective acupuncture treatment

- Maintain clinical and financial records

- Contact you regarding appointments or emergencies

- Send optional newsletters (with your consent)

- Meet regulatory, legal, and insurance requirements

Data Storage and Security

Your data is stored securely in fully encrypted digital systems. Data is:

- Kept confidential

- Accessed only by authorised individuals

- Retained for 7 years (as per The British Acupuncture Council Code of Safe Practice)

- Securely destroyed thereafter


Marketing and Newsletter Subscribers

If you have opted in to receive my newsletter, your name and email will be processed using Mailchimp. We track engagement (e.g. open rates) to improve communication.

Mailchimp’s privacy policy can be found at https://mailchimp.com/legal/privacy.

Website and Cookies

My website is hosted by Squarespace. We use:

- Google Analytics to collect anonymous visitor data

- Cookies to improve user experience

- Squarespace Search to analyse queries anonymously

I do not collect personal data without your consent.

In the event of (my) personal illness or death, a designated professional will handle records in line with GDPR and professional guidelines.

Sharing Your Data

I only share your information when necessary:

- With named third parties with your explicit consent

- With emergency contacts or healthcare providers in a crisis

- With my regulatory body (BAcC) or insurers if legally required

- With legal authorities in cases of safeguarding or court orders

Your Rights Under UK GDPR

You have the right to:

- Access your data

- Correct any errors

- Request data erasure

- Withdraw consent

- Data portability (where applicable)

- Object to certain types of processing

- Lodge a complaint with the ICO

More information: https://ico.org.uk/for-the-public/

Changes to This Policy

I may update this privacy policy. The most current version will always be available on my website.

Contact

To exercise your data rights or for any queries, please contact: Emma Hart at hello@emmahartacupuncture.co.uk

I respect your privacy and will only process your personal data in accordance with UK GDPR.