Privacy Policy

I respect your privacy and the personal information you share with me before and during treatment.

This notice explains what data I collect, why I collect it, and how it is used, in line with the UK GDPR.

​

Why I collect your data

​

• I need information about your health to provide safe, effective treatment. By requesting treatment and attending appointments, you enter into an (unwritten) contract for this care.

• I have a legitimate interest in collecting relevant health and contact information so I can practise safely and communicate with you about appointments.

• With your consent (verbal consent is sufficient), I may send you occasional personalised health information. You can withdraw this consent at any time.
   

How your data is stored

Your records are kept on a password-protected laptop used only for clinical purposes. I am the only person with access to your records, receipts, and emails. I will only share information with your GP or another medical professional with your knowledge and consent.
 

How long I keep your data

As a member of the British Acupuncture Council (BAcC), I am required to keep your records for 8 years after your last appointment (or until you turn 25 if you were treated as a child). After this period, you may ask for your records to be deleted. Otherwise, they may be retained to support future care if you return.
 

Your rights

You can request access to the personal data I hold about you, or ask for factual corrections. I am legally required to respond within 30 days.
 

SJL Acupuncture

Sara Lacey, 2025