Privacy Policy

Last Updated: 14 June 2025

As a Member of the British Acupuncture Council (BAcC) and the Register of Chinese Herbal Medicine (RCHM), I take your privacy and confidentiality very seriously. This Privacy Policy describes how your personal data is collected, used, and stored in accordance with the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Contact Details

Data Controller: Jasmin Reif
Clinic Name: TCM Clinic Jasmin Reif – MA LicAc HP MBAcC MRCHM
Clinic Address (UK): [Insert UK clinic address]
Email: clinic@jasminreif.com
Phone: 07879982175

2. The Purpose of This Notice

This privacy notice tells you what to expect when TCM Clinic Jasmin Reif collects and processes your personal information, and your rights in relation to it.

3. Lawful Basis for Holding and Using Client Information

The lawful basis under which I collect and process your information is:

  • Legitimate interests: to provide safe and effective treatment.

  • Special category data: health-related information is processed under the condition of providing healthcare.

  • Consent: for marketing communications (you may withdraw this at any time).

4. What Information I Hold and What I Do With It

I may collect the following information:

  • Name, address, phone number, email address, date of birth

  • Medical history, symptoms, treatment details

  • GP contact information (with your consent)

  • Payment history

This information is used to:

  • Provide safe and effective treatment

  • Maintain accurate and legally compliant records

  • Contact you regarding your care or appointments

5. How Long I Retain Your Information

In accordance with legal obligations:

  • Adult client records are retained for 7 years after the last treatment

  • Children’s records are retained until the child reaches 25 years of age

6. Sharing of Information

Your information will not be shared without your written consent unless required by law. Situations may include:

  • Legal obligations (e.g., court orders)

  • Public health interest (e.g., serious risk of harm)

7. Protecting Your Personal Data

Your data is stored securely and confidentially. Digital records are stored on password-protected devices or cloud platforms that meet UK GDPR security standards. Access is restricted solely to Jasmin Reif.

8. Your Rights

You have the right to:

  • Access your data

  • Correct inaccuracies

  • Request erasure (in some cases)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent for marketing communications

Requests will be responded to within one calendar month.

9. Complaints

If you are concerned about how your data is handled, please contact me in the first instance. You may also contact:

Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113

10. Website and Third-Party Services

Cookies

This website may use cookies to enhance your experience. You may disable cookies in your browser settings.

Analytics

Website usage data may be collected anonymously through standard analytics tools to improve site performance. No personal data is identified or stored.

11. Online Booking (Acuity)

If you book appointments via Acuity Scheduling, you will be asked to provide personal data including your name, email, phone number, and appointment preferences. This information is processed securely via Acuity’s platform, which is compliant with applicable data protection regulations.

12. Email Newsletter (MailPoet)

If you subscribe to my newsletter, your name and email address will be stored in MailPoet, a GDPR-compliant email marketing provider based in the EU. Your information will be used solely to send newsletters and clinic updates. You can unsubscribe at any time by clicking the unsubscribe link in any email.

13. Website Platform (WordPress, Elementor, Astra)

This website is built using WordPress and the Astra theme with Elementor. While these tools enable the display and performance of the website, they do not collect personal data unless you submit it via a form (e.g. booking, contact, newsletter sign-up). Data transmitted via the website is protected by SSL encryption (https://).

14. Contact Forms

When you submit a contact form, the data you provide (e.g. name, email, message) is securely transmitted to my clinic inbox and not stored on the website. This information is used solely to respond to your query.

15. External Links

My website may contain links to external websites. I am not responsible for the content or privacy practices of those third-party websites. Please review their policies if you choose to visit them.

16. Data Transfers Outside the UK

As of June 2025, MailPoet and Acuity Scheduling store data on servers located in the EU and/or USA. Both providers maintain GDPR-compliant data processing agreements, and appropriate safeguards are in place to ensure secure international data transfer under UK GDPR standards.

17. Children’s Privacy

I do not knowingly collect personal data from children without parental or guardian consent. For under-18s receiving treatment, records will be retained in line with legal and regulatory guidance (see section 5).

18. Data Breaches

In the unlikely event of a personal data breach, I will notify affected individuals without undue delay, and report to the ICO within 72 hours if required by law.

19. Automated Decision-Making and Profiling

No automated decision-making or profiling is conducted using your personal data.

20. Changes to This Privacy Policy

This Privacy Policy is reviewed regularly and may be updated to reflect legal, technical, or operational changes. The most current version will always be available on my website.

Last reviewed and updated: 14 June 2025

21. How to Contact Me

If you have questions about this policy, your data, or how your information is handled, please contact:

Jasmin Reif
TCM Clinic Jasmin Reif – MA LicAc HP MBAcC MRCHM
Email: clinic@jasminreif.com
Phone: 07879982175

 

Professional Associations – Jasmin Reif BAcC