PRIVACY POLICY
Data Collected
The Practitioner may collect:
Contact details (name, address, telephone number, email).
Health information necessary for treatment.
Booking and payment details.
Client images, only with explicit prior consent.
Lawful Basis & Use
Health data is processed under Article 9 GDPR on the basis of explicit consent and/or contractual necessity to deliver safe treatment.
Data will only be used for booking, treatment, payment, and aftercare purposes.
Retention & Security
Health and treatment records are retained for 7 years in line with professional guidelines.
All records are stored securely with restricted access.
Client Rights
You have the right to request access, correction, deletion, restriction, or portability of your personal data. Requests may be made in writing to the Practitioner.