Gentle Healing M25 Privacy Policy

About this policy

Your privacy is a top priority. This privacy policy outlines how I collect, use, and protect your personal information when you visit my website or engage with my services. This policy is in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. I reserve the right to modify this privacy policy at any time, so please review it if you require to do so. Changes will take effect immediately upon their posting on the website.

1. Data Controller Information

The data controller responsible for your personal data is: Karen Ahmed

—

2. Information I Collect

When you interact with my website or services, I may collect the following types of personal data:

Contact Information: Name, age, email address, phone number, and postal address.

Payment Details: If you purchase services, payment processing may involve collecting billing information (handled securely via third-party payment processors).

Health Information: For clients seeking homeopathy or consultations, I may collect health-related information provided by you.

Technical Data: IP address, browser type, operating system, and other metadata collected through cookies and analytics tools.

—

3. How I Use Your Information

Your personal data is used for the following purposes:

Providing Services: To schedule appointments, offer consultations, and deliver homeopathy services

Communication: To respond to your enquiries, provide updates, and send relevant information.

Transaction Processing: To process payments securely.

Legal Compliance: To comply with legal obligations, such as tax or accounting requirements.

Improving Services: To monitor and improve the performance of the website.

—

4. Legal Basis for Processing

I process your personal data based on the following legal grounds under GDPR:

Consent: When you voluntarily provide your information for consultations or subscribe to newsletters.

Contractual Obligation: To deliver the services you request. Legal Obligation: To comply with applicable laws.

Legitimate Interests: To improve services and website functionality.

—

5. Sharing Your Data

Your data is treated confidentiality. I will never sell or share your data for marketing purposes. I may share your data with:

Service Providers: Trusted third parties for payment processing, or analytics (all GDPR-compliant).

Legal Authorities: If required to comply with legal obligations.

—

6. Data Retention

Your information will be stored for 7 years after your last consultation. For children, I will keep the health records for a period of 7 years after their 18th birthday, as is required by law. At that point, your file will be securely destroyed and any digital information will be erased from my computer systems. All health-related information is stored securely and deleted upon your request or when it is no longer needed. Initial contact details received digitally will be printed, deleted and stored with other paper records in a locked cabinet. Names and other identifiable data will be stored separately and a number system used to protect privacy.

—

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of access – the right to access and receive a copy of your personal data, and other supplementary information.

Rectification – the right to have your inaccurate personal data rectified, or completed if it is incomplete.

Erasure – the right to have your personal data erased (subject to legal requirements).

Restrict processing: the right to request the restriction or suppression of their personal data.

Portability: the right to obtain and reuse your personal data for their own purposes across different services

Objection: the right to object to the processing of your personal data in certain circumstances.

Withdrawal of Consent: You can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

Please contact me if you have any concerns or wish to exercise your rights.

—

8. Cookies and Analytics

This website uses cookies to enhance your browsing experience and track site performance. You can manage your cookie preferences via your browser settings.

—

9. Third-Party Links

My website may contain links to external sites. I am not responsible for the privacy practices or content of third-party websites.

—

10. Concerns and Complaints

If you have any concerns about how your personal data is handled, you may submit a complaint using the contact details provided on this website. I will acknowledge receipt of your complaint within 30 days and investigate and respond without undue delay in accordance with applicable UK data protection laws.

If you are dissatisfied with the response, you may also raise your concern with the Information Commissioner’s Office (ICO).