Privacy Notice

Privacy Notice


This privacy notice documents how Harefield Acupuncture complies with the data protection requirements laid out by the General Data Protection Regulations (GDPR) which came into effect on 25th May 2018. The person responsible for your data is Victoria Quinan.

The privacy notice applies to former, current and prospective patients.

What we collect

For appointment bookings we will collect your name and contact number.

In the first consultation we will also collect your address, email and GP’s name and contact details. We will also ask you to provide us with information regarding your medical history and current health conditions, your personal interests and lifestyle – this is to ensure Harefield Acupuncture can deliver the best service to you – this information will not be disclosed or used for any marketing purposes.

How we use your information

We use your name, telephone number and/or email to make and rearrange appointments.

Some patients and prospective patients send us information via email about their medical condition, medication or test results. In some cases Harefield Acupuncture will send out information via email containing relevant information to your case. We are unable to send or receive encrypted emails so you should be aware these emails may not be protected in transit.

We keep a permanent attendance register recording all appointments for tax purposes or for complaints procedures.

We use your medical and history, current health conditions and personal wellbeing and lifestyle information for the purpose of making a full traditional diagnosis and to formulate a treatment plan personalised for you. We record any treatment or advice given and the progress of your case along with any joint decisions made with regards to your treatment. This is so we can provide the best service for you and to secure evidence in the event of a complaint.

We use your GP’s name and address in in the unlikely event we need to contact them in an emergency. This is also a mandatory requirement in the British Acupuncture Code of Professional Conduct.

We will never use your information for marketing purposes.

How long do we keep your personal data?

In accordance with the British Acupuncture Code of Professional Conduct your data is kept for 7 years after your last treatment. If you are under 18 at the time of finishing your treatment your data is stored until you reach 25 years of age.

Sharing your information

Harefield acupuncture will never share your information for marketing purposes. We will only share your information if required to do so by law. If we feel we need to share information with your GP or other health care professional we will only do this with your explicit consent.