Privacy Policy

This Privacy Policy explains how Darren Rose Acupuncture & Wellness (“we”, “us”, “our”) collects and uses personal data when you use acupunctureandwellness.co.uk, enquire about treatment, visit our clinics, or shop with us.

We are the data controller for personal data described in this policy. Contact us at darren@acupunctureandwellness.co.uk or 0207 126 8219, or write to us at 4th Floor, Lister House, 11–12 Wimpole Street, London, W1G 9ST.

1. What data we collect

• Identity and contact data — name, email, phone number, preferred clinic, and message content from enquiries.
• Health-related information — only where you choose to share it in an enquiry or during clinical care, so we can respond appropriately.
• Transaction data — order and checkout details when you buy products via our Shopify-powered shop.
• Technical and usage data — IP address, device/browser type, pages viewed, and similar analytics data if you consent to analytics cookies.
• Communications — emails or calls you make to us.

2. Why we use your data (lawful bases)

• Contract / steps prior to contract — to respond to enquiries and provide treatments or shop orders.
• Legitimate interests — to run and secure our website, improve our services, and keep business records, balanced against your rights.
• Consent — for optional analytics/marketing cookies and any non-essential marketing emails (you can withdraw anytime).
• Legal obligation — where we must keep records for tax, clinical, or regulatory reasons.
• Special category data (health) — where relevant to care, we process this under UK GDPR Article 9 conditions applicable to healthcare (including provision of health treatment and/or explicit consent where required).

3. Who we share data with

We do not sell your personal data. We may share it with trusted processors who help us operate, including:

• Hosting — Netlify (website hosting).
• Ecommerce — Shopify (shop, cart and checkout).
• Analytics — Dotwall site monitoring / analytics tools, only if you accept analytics cookies.
• Professional advisers — where needed (for example accountants or insurers).

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or adequacy regulations.

4. How long we keep data

We keep enquiry and website records only as long as needed for the purpose collected, then delete or anonymise them. Clinical records are retained in line with professional and legal requirements for healthcare records. Shop order records are kept for as long as required for accounting and consumer law.

5. Your rights

Under UK GDPR you can ask us to:

• access your personal data;
• correct inaccurate data;
• erase data (in certain cases);
• restrict or object to processing;
• receive data in a portable format; and
• withdraw consent where we rely on consent.

Contact darren@acupunctureandwellness.co.uk to exercise these rights. You can also complain to the Information Commissioner’s Office (ICO).

6. Cookies

See our Cookie Policy for categories, purposes, and how to change preferences. You can reopen preferences anytime via “Cookie preferences” in the website footer.

7. Updates

We may update this policy from time to time. The “Last updated” date at the top will change when we do.