Privacy Policy

1 Information We Collect

We collect information that you provide to us directly and information that is automatically collected when you use our website and services.

Personal Information:

• Name, email address, phone number, and contact details
• Date of birth and gender
• Medical history and health information relevant to treatments
• Payment and billing information
• Appointment preferences and treatment history

Automatically Collected Information:

• IP address, browser type, and device information
• Pages visited and time spent on our website
• Cookies and similar tracking technologies
• Referral sources and navigation patterns

2 How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our wellness services
• To process appointments, bookings, and payments
• To communicate with you about your appointments and treatments
• To send you important updates, newsletters, and promotional materials (with your consent)
• To personalise your experience and tailor our services to your needs
• To maintain accurate health and treatment records
• To comply with legal obligations and industry regulations
• To analyse website usage and improve our digital platforms
• To prevent fraud and ensure the security of our services

3 Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill our service agreements with you
• Consent: When you have given explicit permission for specific processing activities
• Legitimate Interests: To improve our services and communicate with you about relevant offerings
• Legal Obligations: To comply with healthcare regulations and legal requirements
• Vital Interests: To protect your health and safety in emergency situations

4 Information Sharing & Disclosure

We respect your privacy and do not sell your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorise us to share your information
• Service Providers: With trusted third-party vendors who help us operate our business (e.g., payment processors, appointment systems)
• Healthcare Professionals: With other healthcare providers involved in your care, when necessary and appropriate
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• Protection of Rights: To protect the safety, rights, or property of The Cure, our clients, or others

5 Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

• Secure SSL encryption for data transmission
• Regular security assessments and updates
• Restricted access to personal information on a need-to-know basis
• Secure storage of physical and electronic records
• Staff training on data protection and confidentiality
• Regular backups and disaster recovery procedures

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to maintain the highest standards of data protection.

6 Your Privacy Rights

Under UK data protection law, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to certain types of processing, including direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where we rely on consent

To exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to your request within one month.

7 Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website usage.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function properly
• Performance Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your browsing to show relevant advertisements (with consent)

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect website functionality.

8 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law.

• Health Records: Retained for a minimum of 8 years after your last treatment, in accordance with healthcare regulations
• Booking Information: Retained for 7 years for accounting and legal purposes
• Marketing Consent: Retained until you withdraw consent or we determine it's no longer relevant
• Website Analytics: Typically retained for 2-3 years

When information is no longer needed, we securely delete or anonymise it in accordance with our data retention schedule and legal requirements.

9 Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these external sites.

We encourage you to review the privacy policies of any third-party sites you visit. This privacy policy applies only to information collected by The Cure.

10 Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

11 International Data Transfers

Your information is primarily stored and processed within the United Kingdom. If we need to transfer your data outside the UK or European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by regulatory authorities
• Transfers to countries with adequate data protection laws
• Your explicit consent for the transfer

12 Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

When we make significant changes, we will notify you by email (if you have provided your email address) or by posting a prominent notice on our website.

We encourage you to review this privacy policy periodically to stay informed about how we protect your information.