Privacy Notice: Appleyard Acu

What I collect

• Contact details: name, address, email, phone and date of birth.

• Health information: medical history, medications and supplements, symptoms, lifestyle information, and notes from each treatment or consultation.

• Emergency contact and GP details, if you choose to provide them.

• Booking records.

• Purchase records for products you buy from me: name, items purchased and payment confirmation. Card payments are taken through PayPal POS, and I do not see or store your full card details.

Why I use it

• To assess, treat and advise you safely (acupuncture, fire cupping, gua sha and medicinal mushroom consultations). Knowing your medications and conditions is essential for safe practice.

• To manage appointments and keep records that meet my legal and insurance obligations.

• To take payment, provide receipts and keep accounting records.

• Where I recommend a product during a consultation, I may note it in your treatment record.

Legal basis

• Contact, booking and purchase details: processing is necessary to provide the service or products you have asked for (contract).

• Health information: your explicit consent, which I ask you to give on the intake form. You can withdraw it at any time, although I may then be unable to treat you safely.

• Marketing: newsletters and retreat announcements are sent only if you separately opt in, and you can opt out at any time.

Who sees it

Only I see your treatment records. Some services help me run the practice and handle limited information on my instructions: Google and Wix.

PayPal processes card payments and receipts, and handles payment data under its own privacy policy.

I will not share your health information with anyone else, including your GP, unless you ask me to, except where the law requires it or there is a serious risk to your safety or that of others.

How long I keep it

• Adult treatment records: 8 years after your last appointment.

• Children's records: until the child reaches 25, or 26 if they were 17 when treatment ended.

• Sales and payment records: 6 years, for tax and accounting purposes. These are held separately from treatment records.

After these periods I securely delete or shred the records.

How it is protected

Records are stored on password-protected accounts with multi-factor authentication / in a locked cabinet. Intake forms received by email are moved to your record and deleted from my inbox, including sent and deleted items.

Your rights

You can ask to see, correct or receive a copy of your information, ask me to restrict how I use it, or object to its use. You can also ask me to delete it, but I may need to keep treatment and accounting records for the periods above.

Contact me using the details at the top of this notice and I will respond within one month.

Complaints

If you are unhappy with how I have handled your information, please speak to me first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Last updated: 2/22/26