​

ELAINE GORRIE ACUPUNCTURE – PRIVACY NOTICE  

 

This notice explains how Elaine Gorrie Acupuncture collects, uses, stores and protects your personal information, in line with UK GDPR and data protection law.    

 

Who we are  

Elaine Gorrie Acupuncture is the data controller responsible for your personal data. Contact details:Elaine Gorrie Acupuncture16 Queens Road, Brentwood, Essex CM14 4HETel: 07984 434373Email: info@elainegorrie.com    

 

What information we collect  

We may collect and process the following information: 

Contact details (name, address, email, telephone number)

Appointment and attendance records

Clinical information relevant to your treatment (including health history and treatment notes)

GP details where required by professional standards

Consent records

Correspondence, enquiries or complaints

Website usage data (see below)

  Clinical information is treated as special category data and handled with additional care.    

 

Why we use your information  

We use your personal data to: 

Provide safe and appropriate acupuncture treatment

Arrange and manage appointments

Maintain accurate clinical records

Comply with professional, legal and insurance obligations

Respond to enquiries or complaints

Send newsletters or marketing communications only with your consent

Maintain financial records for tax purposes

 

Lawful basis for processing  

We process your data under the following lawful bases: 

Consent (e.g. marketing communications)

Contract (providing treatment services)

Legal obligation (e.g. tax, professional requirements)

Vital interests (in medical emergencies)

Legitimate interests (clinical record-keeping and service management)

     

How we store and protect your data  

Your information is stored securely in electronic systems protected by passwords, device security and biometric access where available.We take reasonable technical and organisational measures to prevent unauthorised access, loss or misuse.    Sharing your information  We only share your data where necessary and appropriate, including: 

With your GP or other healthcare professionals (with consent or where required)

With our professional body or insurers in the event of a complaint or claim

With legal or regulatory authorities where required by law

With trusted third-party service providers (e.g. online booking or mailing services) who are GDPR-compliant

  We never sell your data.    

 

Website data  

Our website uses cookies and analytics tools (such as Google Analytics and Wix analytics) to collect anonymous information about website usage. This helps us improve the site and does not identify individual visitors.    

 

How long we keep your data  

Adult patient records: 7 years

Records relating to minors: until age 25

Financial records: 6 years after the relevant tax year

Complaint records: 2 years after closure

  Records are securely deleted or destroyed once retention periods expire.    

 

Your rights  

You have the right to: 

Access your personal data

Request correction of inaccurate information

Request erasure where appropriate

Withdraw consent (where processing is based on consent)

Request restriction or object to processing in certain circumstances

Lodge a complaint with the Information Commissioner’s Office (ICO)

​

Contacting the ICO  

Information Commissioner’s OfficeWycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AFTel: 0303 123 1113www.ico.org.uk   Last reviewed: January 2026