Privacy policy

When you supply your personal details to this clinic they are stored and processed for the following reasons in line with Data Protection Act 2018, which includes the General Data Protection Regulation (GDPR):

1. I need to collect personal information about your health in order to provide you with the best possible treatment. Your requesting treatment and my agreement to provide it constitutes a contract. You can, of course, refuse to provide the information, but in that case I would not be able to provide treatment.
2. I have a “Legitimate Interest” in collecting that information, because without it I couldn’t do my job effectively and safely.
3. It is important for me to be able to contact you in order to confirm your appointments or to update you on matters related to your medical care. This constitutes your “Legitimate Interest”.

I  have a professional obligation to retain your records for seven years after your most recent appointment, but after this period you can ask me to delete your records if you wish. Otherwise, I will retain your records in order to provide you with the best possible care should you need to see me in the future. Your records are stored electronically on my personal device, access to which is password protected, and/or on paper, in locked filing cabinets. Electronically, the security is fully compliant with GDPR.

I will never share your data with anyone who does not need access without your written consent. You have the right to see what personal data of yours I hold and you can ask me to correct any factual errors. Provided the professional minimum period has elapsed, you can ask me to erase your records. 

​You have the right to complain if you believe that I am mishandling your data. Please send your complaint to Victoria Moss, info@blueturtleacupuncture.com.