Privacy Policy

Last updated: 28 July 2026

At Pain Relief Acupuncture, your privacy is important to us. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, book an appointment or receive treatment.

We are committed to handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Pain Relief Acupuncture
Based at By Jade
Weybridge Railway Station
Weybridge, Surrey KT13 8UD

Email: painreliefacupuncture.info@gmail.com
Website: www.painreliefacupuncture.co.uk

For the purposes of data protection law, Pain Relief Acupuncture is the Data Controller of your personal information.

What Information We Collect

Depending on your interaction with us, we may collect:

  • Name

  • Date of birth

  • Address

  • Telephone number

  • Email address

  • Emergency contact details

  • GP and/or dentist details (where relevant)

  • Medical history

  • Current medications

  • Allergies

  • Health conditions

  • Treatment notes

  • Treatment photography where appropriate

  • Appointment history

  • Payment information (processed securely by our payment provider)

  • Website usage information through cookies (see Cookie Policy)

Some of this information is considered special category health data, which requires additional protection.

Why We Collect Your Information

We collect your information in order to:

  • Provide safe and appropriate acupuncture treatment

  • Assess your suitability for treatment

  • Maintain accurate clinical records

  • Liase with other medical practitionaires (where relevant)

  • Contact you regarding appointments

  • Send appointment confirmations and reminders

  • Process payments

  • Respond to enquiries

  • Meet legal and professional obligations

  • Improve our services

We will only collect information that is necessary for these purposes.

Legal Basis for Processing

We process your personal information under one or more of the following lawful bases:

  • Performance of a contract (to provide treatment)

  • Legal obligation

  • Legitimate interests

  • Explicit consent when processing special category health information

How Your Information Is Stored

Patient records are securely stored using Cliniko, our practice management system.

Cliniko uses encrypted, secure cloud-based storage with appropriate technical and organisational safeguards to help protect your personal information.

Only authorised personnel have access to your records.

Sharing Your Information

Your information is kept confidential.

We will only share your information when:

  • You have provided your consent

  • It is clinically appropriate (for example with your GP, dentist or another healthcare professional involved in your care)

  • We are legally required to do so

  • It is necessary to protect you or another person from serious harm

We never sell your personal information to third parties.

How Long We Keep Your Information

Clinical records are retained in accordance with current legal and professional guidance.

Where appropriate, records may be retained for a minimum of 8 years after your last treatment, or longer where required by law or where treatment relates to a child.

After this period, records will be securely destroyed.

Appointment Communications

By booking an appointment, you agree that we may contact you regarding:

  • Appointment confirmations

  • Appointment reminders

  • Changes to your booking

  • Clinical follow-up where appropriate

We will not send marketing emails unless you have chosen to receive them.

You may opt out of marketing communications at any time.

Payments

Payments are processed securely through trusted third-party payment providers.

We do not store your full payment card details.

Cookies

Our website may use cookies to improve functionality, analyse website usage and enhance your browsing experience.

You can manage your cookie preferences through your web browser.

Your Rights

Under UK GDPR you have the right to:

  • Access your personal information

  • Request correction of inaccurate information

  • Request deletion of your information where legally appropriate

  • Restrict processing

  • Object to certain processing

  • Request transfer of your data where applicable

  • Withdraw consent where consent is the lawful basis

To exercise any of these rights, please contact us using the details above.

Complaints

If you are unhappy with how your personal information has been handled, please contact us first so we have the opportunity to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.

Continued use of our services after changes are published constitutes acceptance of the updated Privacy Policy.