Privacy Policy

Who we are

This website is operated by sylvyn herbs & acupuncture, a provider of herbal medicine and acupuncture services in the UK. We are the data controller for the personal information collected through this website and in the course of providing our services.

What information we collect

We may collect and process the following information:

  • Contact details such as your name, email address, telephone number and postal address.
  • Information you provide when you complete enquiry or booking forms on our website.
  • Health‑related information you share with us when you book or receive treatment (for example, symptoms, medical history, current medication and GP details).
  • Technical data such as IP address, browser type, and pages viewed, collected through cookies and similar technologies.

How we use your information

We use your personal information to:

  • Respond to your enquiries and manage appointments.
  • Provide safe and appropriate herbal and acupuncture treatment, including assessing your needs and keeping clinical records.
  • Manage our business operations (for example, accounting and administration).
  • Comply with our legal and regulatory obligations.

We rely on the following legal bases under UK GDPR and the Data Protection Act 2018: performance of a contract, compliance with legal obligations, legitimate interests, and, for special category health data, your explicit consent and/or the provision of health care.

Sharing your information

We will keep your information confidential and only share it when necessary to:

  • Communicate with your GP or other healthcare professionals involved in your care, where appropriate and usually with your consent.
  • Comply with legal obligations or requests from regulators or insurers.

We do not sell your personal data and do not share it with third parties for their own marketing.

How long we keep your information

We keep your personal information only for as long as necessary for the purposes set out in this policy, and in line with professional and legal retention requirements. Health records are typically kept for at least 7 years after your last appointment.

Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or misuse, including secure storage of electronic and paper records and limiting access to those who need it for their role.

Your rights

Under UK data protection law, you have rights which may include:

  • The right to access a copy of your personal data.
  • The right to request correction of inaccurate or incomplete data.
  • The right to request deletion or restriction of your data in certain circumstances.
  • The right to object to certain types of processing, including direct marketing.
  • The right to withdraw consent where we rely on consent.

To exercise these rights, please contact us.

Cookies

Our website may use cookies and similar technologies to improve your browsing experience and understand how the site is used. You can control cookies through your browser settings.