Professional Integrated Healthcare

E: charlotte@transformacupuncture.co.uk

07797764582

Call us:  07797764582

Transform Acupuncture — Privacy Notice (Data Protection (Jersey) Law 2018)

1. Introduction

Your privacy is very important to me. This notice explains how I collect, use, store, and protect your personal information when you receive acupuncture or massage treatment at Transform Acupuncture or when you contact me through my website. I follow the Data Protection (Jersey) Law 2018, which gives you rights over your personal data and places legal obligations on me as a data controller.

This privacy notice applies to:

  • Acupuncture and massage patients
  • Prospective patients
  • Former patients
  • People who contact me by email, phone, or online forms
  • Visitors to my website


2. Data Controller

Transform Acupuncture 39 Hill Street, St Helier, Jersey JE2 4UA Email: charlotte@transformacupuncture.co.uk

3. The Personal Data I Collect

Personal data

  • Name
  • Address
  • Email address
  • Telephone number
  • Date of birth
  • Appointment history
  • GP details
  • Information submitted through website forms
  • Emergency contact information


Special category data (health information)

  • Presenting complaint
  • Medical history
  • Medication
  • Clinical notes
  • Treatment plans
  • Progress notes


4. How Your Data Is Collected

I collect information:

  • Directly from you (in person, email, phone, online forms)
  • Through Cliniko, my online booking and clinical records system
  • Through GoDaddy, which hosts my website
  • Through Google Analytics, which collects anonymous website usage data


5. Why I Process Your Data & Legal Bases

I must have a lawful basis for processing your personal data. These are:

Providing acupuncture or massage treatment

  • Booking and managing appointments
  • Assessing your health
  • Creating treatment plans
  • Recording clinical notes
  • Contacting your GP if needed


Legal bases:

  • Contract
  • Vital interests (in emergencies)
  • Legal obligation (BAcC Code of Professional Conduct)
  • Special category condition: health data for treatment


Managing my business

  • Tax and accounting records
  • Insurance requirements
  • Complaint handling
  • Regulatory compliance


Legal bases:

  • Legal obligation
  • Legitimate interests


Website analytics

  • Understanding how visitors use my website
  • Improving website performance


Legal basis:

  • Legitimate interests



Marketing (only if you opt in)

  • Sending occasional updates or information


Legal basis:

  • Consent


You can withdraw consent at any time.

6. How Your Data Is Stored

Your data is stored securely in the following ways:

  • Cliniko (encrypted, password‑protected clinical records system)
  • Paper notes stored in a locked filing cabinet
  • Email (not encrypted in transit, but stored securely once received)
  • Website data stored on GoDaddy servers
  • On my password protected devices (receipts and invoices are saved as word documents or PDF's)


Only I have access to your clinical records.

7. International Transfers

To provide my services, some data is processed outside Jersey:

  • Cliniko stores data in Australia
  • GoDaddy may store data in the EU, UK, or USA
  • Google Analytics processes data internationally


These providers use recognised safeguards such as Standard Contractual Clauses.

8. Sharing Your Personal Data

Your information is treated as strictly confidential. It may be shared only:

  • With your GP if necessary for your safety or wellbeing.
  • With emergency services if required to protect life.
  • With the police or relevant authorities if necessary to protect my safety or the safety of others, including situations involving threatening, abusive, or sexually inappropriate behaviour towards me.
  • With the police or a local authority for safeguarding concerns involving children or vulnerable adults.
  • With my regulatory body (BAcC) or my insurer if a complaint or claim is made.
  • With my solicitor if legal proceedings arise.
  • With named third parties only with your explicit consent.


I do not sell or share your data for marketing purposes.

9. Cookies & Website Tracking

My website uses:

  • Essential cookies (to make the site work)
  • Analytics cookies (Google Analytics)


Google Analytics collects anonymous information such as:

  • Page views
  • Time spent on the site
  • Device type


You can manage cookies through your browser settings.

10. How Long Your Data Is Kept

Data Type                                         Retention Period

Clinical records                               7 years from last appointment (BAcC requirement)

Attendance records                      7 years

Complaint records                        2 years from closure

Email enquiries                              1 year

Website analytics                          26 months (Google default)

Marketing consent records         Until consent is withdrawn

If I am unable to practise due to illness or death, your records will continue to be stored securely for the required retention period.


11. Your Rights

Under the Data Protection (Jersey) Law 2018, you have the right to:

  • Access your data
  • Request corrections
  • Request deletion (where legally permissible)
  • Withdraw consent
  • Request restriction of processing
  • Object to processing
  • Request data portability (where applicable)
  • Be informed of data breaches
  • Lodge a complaint with JOIC


I will respond to all requests within one month.

12. JOIC Contact Details

Jersey Office of the Information Commissioner (JOIC) Turing House, La Grande Route de St Laurent, St Lawrence, Jersey JE3 1NH Website: www.joic.org Telephone: +44 (0)1534 716530

13. Contact Me

To exercise your rights or ask questions: charlotte@transformacupuncture.co.uk Transform Acupuncture, 39 Hill Street, St Helier, Jersey JE2 4UA

End

Updated August 2026