Privacy Policy

Effective Date: April 2026

Elise Sullivan Acupuncture (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. It is designed to comply with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, while also being accessible to users worldwide.

1. Who We Are

Elise Sullivan Acupuncture is a registered business operating in the United Kingdom, providing acupuncture and related wellness services.

Data Controller:
Elise Sullivan Acupuncture

2. Information We Collect

We may collect and process the following types of personal data:

a. Information You Provide Directly

Name
Email address
Phone number
Health-related information (if you submit it via forms or consultations)
Appointment details
Any information you provide via contact forms or email

b. Automatically Collected Information

IP address
Browser type and version
Time zone setting
Pages visited and interaction data (via cookies or analytics tools)

c. Special Category Data

As a healthcare provider, we may collect sensitive health information. This will only be done with your explicit consent and handled with strict confidentiality.

3. How We Use Your Information

We use your personal data for the following purposes:

To respond to enquiries and provide customer support
To manage appointments and provide acupuncture services
To maintain medical records (where applicable)
To improve our website and services
To comply with legal and regulatory obligations
To send relevant communications (only where lawful and with your consent where required)

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Consent – for collecting and processing health data and for marketing communications
Contract – to provide services you request
Legal obligation – for record-keeping and compliance
Legitimate interests – for improving services and website functionality

5. How We Share Your Information

We do not sell your personal data. We may share your data with:

Professional service providers (e.g. booking systems, IT providers)
Legal or regulatory authorities where required
Healthcare professionals (only with your consent)

All third parties are required to respect the security of your data and comply with applicable laws.

6. International Data Transfers

As our website is accessible worldwide, your data may be transferred outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

Transfers to countries deemed to provide adequate protection
Use of standard contractual clauses approved under UK law

7. Data Retention

We retain personal data only as long as necessary:

General enquiries: up to 12 months
Client and health records: in line with professional and legal requirements (typically 7 years or as required)

8. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion (where applicable)
Restrict or object to processing
Data portability
Withdraw consent at any time

To exercise your rights, contact us at [Insert Email].

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

9. Cookies and Website Tracking

Our website may use cookies to improve user experience. These may include:

Essential cookies (site functionality)
Analytics cookies (to understand website usage)

You can manage or disable cookies through your browser settings.

10. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

Secure storage systems
Encrypted communications where appropriate
Access controls and confidentiality practices

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of these sites. Please review their policies separately.

12. Children’s Privacy

Our services are not directed at children under 16 without parental consent. We do not knowingly collect data from children without appropriate consent.

13. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

14. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Elise Sullivan Acupuncture using the contact details provided.