This explains why I collect your personal data, and how I store and use it. This is to make sure I am following the EU General Data Protection Regulation (GDPR), and show you how I maintain confidentiality.

When we’re in contact by email or you provide me with your personal details, including those needed to make notes in clinic, this is stored for the following reasons:

1. I make assessments about your condition and how I will treat it from the information you provide me. When you ask for treatment and I agree to treat you, that agreement constitutes a verbal contract in law.
2. I have a legitimate interest in collecting your information, to ensure I can treat you safely, and we can communicate with each other where necessary. This is in your legitimate interest too.
3. I may send you information by email regarding your particular condition, such as lifestyle advice, discussed in clinic. I may also occasionally tell you about special offers or discounts. You may withdraw consent at any time.
4. I have a legal requirement to retain your records for 8 years after your most recent appointment. For anyone under the age of 18, this is stored up to the age of 25. Your online clinical records are password protected. Emails are also stored on a password protected laptop.

Any hard copies of your records are stored in a locked and fire proof container in a secure address. If I need to travel with your records, they are also in a locked and fireproof container during the transit from home to clinic.

Your personal data will be treated as strictly confidential, and will be shared only in the following circumstances:

1. With an acupuncture supervisor if necessary to ensure that you receive safe and appropriate treatment. This may also be the case for academic research purposes. Your personal data however, in both these cases, is anonymised.
2. If I need to pass you onto another acupuncturist (with your consent) if I am unable to treat you or you choose to see someone else.
3. If necessary, with an authority such as the police or a court, in exceptional circumstances to comply with a legal obligation that I may be required to abide by.
4. With your doctor or the police if necessary to protect your life or another person’s life.
5. With the police or a local authority to safeguard children or vulnerable adults.
6. In the event of an investigation into my conduct, I may need to pass information on to my professional body, the Association of Acupuncture Clinicians , my insurance company, or my solicitor. However, your anonymity would be preserved wherever possible.

Your confidentiality is maintained even after death, unless you have consented otherwise. It is not subject to the power of attorney.

You have the right to see your personal data and to correct any factual errors.

If you feel at any point, your data has been mishandled, then please let me know.