Privacy policy

At Kallos Acupuncture, we are committed to safeguarding the privacy of all visitors, clients, and corporate partners. This Notice explains how we collect, use, and store personal information, including health-related data, and how cookies are used on our website. We may update this Notice from time to time, and we encourage you to review it periodically.

Information we collect

In the course of providing treatments and managing our business, we may collect:

Basic contact details such as your name, address, telephone number, and email.
Health and medical information you provide through consultation forms, intake questionnaires, or treatment notes. This is classed as Special Category Data under UK GDPR and is processed only with your explicit consent.
Information you provide when enquiring about services, subscribing to updates, or making a booking.

We only collect address details if you provide them directly. We do not track or store live location data from your devices.

Why we need this information

We process your personal and health information to:

Provide safe and effective treatments tailored to your needs.
Manage bookings, client records, and follow-up care.
Fulfil our legal and professional obligations, including record-keeping and taxation requirements.

We do not use your information for any purpose that is not connected to your care or our business operations.

Marketing Communication

With your consent, we may use your name and email address to inform you of future offers, events, or updates from Kallos Acupuncture. You may unsubscribe at any time by contacting us directly or using the opt-out options provided. We will never share your details with third parties for marketing purposes.

How long we keep your data

Client health records: Held securely for a minimum of seven years after your last treatment (or until age 25 if you were under 18 at the time of treatment), in line with professional standards.

Basic personal data for tax purposes: Retained for six years, as required under UK law.
Marketing data: Retained until you withdraw consent.

After these periods, records will be securely destroyed.

Use of your information

Your information is used solely for the purposes of providing treatments, managing appointments, and fulfilling our legal obligations. We never disclose personal or health data to employers, insurers, or third parties, except where required by law. For corporate clients, only anonymised or aggregated information (e.g. number of participants) may be shared with companies.

Storing your personal data

All personal data is processed in the UK or securely by trusted third-party providers (such as our booking platform and cloud storage providers) who comply with GDPR and industry standards.

We use secure systems, password protection, and two-factor authentication where available. No system is entirely immune to breaches; however, we take all reasonable measures to protect your data.

Payment information

We do not store payment card details. Payments are processed via secure, GDPR-compliant third-party providers.

Third-party links

Our website may occasionally include links to other websites. Where we provide a link, this does not imply endorsement. You should review the privacy notice of any external site before sharing personal data with them.

Cookies

Our website uses cookies to improve functionality and to provide anonymous statistical information about browsing behaviour. These cookies do not identify you personally.

You can adjust your browser settings to refuse cookies if you wish. For further details, please visit AboutCookies.org.

Your rights

Under UK data protection law, you have the right to:

Access the personal data we hold about you.
Request corrections or deletions where appropriate.
Withdraw consent to marketing communications.
Raise a complaint with the Information Commissioner’s Office (ICO) if you believe your data is being processed unlawfully.

To exercise any of these rights, please contact us directly at hello@kallosacupuncture.com