Privacy and Cookies Policy

This policy explains how Acupuncture Crowthorne (operated by Dr (TCM) Attilio D'Alberto) collects, uses and protects your personal information when you visit this website or receive treatment. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The data controller for this website is Dr (TCM) Attilio D'Alberto, operating as Acupuncture Crowthorne. For any data-related enquiries, please contact us via the booking system at drattiliodalberto.as.me.

What information we collect

• Booking information — your name, email address, phone number and appointment details, collected via Acuity Scheduling when you book online
• Clinical records — medical history, symptoms, diagnosis and treatment notes, which we are professionally obliged to maintain
• Website analytics — anonymous data about how you use this website, collected via Google Analytics

How we use your information

• To manage your appointments and provide acupuncture treatment
• To maintain clinical records as required by the British Acupuncture Council (BAcC)
• To contact you regarding appointments where necessary
• To improve our website using anonymised analytics data

We never sell your personal data to third parties or use it for marketing without your explicit consent.

Legal basis for processing

• Contract — to fulfil our obligations when you book and receive treatment
• Legal obligation — to maintain clinical records as required by the BAcC
• Legitimate interests — to manage our practice and improve our services

Data retention

Clinical records are retained for a minimum of seven years from your last appointment, in accordance with BAcC guidelines. Booking and contact information is retained for as long as necessary to manage your care.

Your rights

Under UK GDPR you have the right to access, correct or request deletion of your personal data, to object to certain processing, and to complain to the Information Commissioner's Office at ico.org.uk.

Third-party services

• Acuity Scheduling — our booking system. See their privacy policy at acuityscheduling.com
• Google Analytics — anonymous website usage data. Opt out via the Google Analytics opt-out add-on
• Google Fonts — fonts loaded from Google's servers. See Google's privacy policy

Cookies

This website uses Google Analytics cookies (_ga, _gid) to collect anonymous information about website visits. These do not identify you personally. You can manage cookies through your browser settings — for more information visit aboutcookies.org.

Security

This website is served over HTTPS. Our booking system is PCI-compliant and uses industry-standard encryption to protect your data.