Data Protection Policy
Effective Date: 17/10/25
Purpose
This Data Protection Policy sets out how Homeopathy With Sherie ("the Practice", "we", "our", or "us") handles personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
​
We are committed to ensuring that all personal data collected, stored, and processed through our homeopathy practice is handled responsibly and in accordance with data protection laws.
Scope
This policy applies to all personal data processed by the Practice, including data collected via:
​
-
Our website and booking system
-
Online consultations (video calls)
-
Email and messaging systems
-
Payment processing platforms
-
Electronic health records and client notes
It applies to all employees, contractors, practitioners, and data processors acting on our behalf.
Data Protection Principles
We comply with the data protection principles set out in the UK GDPR:
​
-
Lawfulness, fairness, and transparency
-
Purpose limitation
-
Data minimisation
-
Accuracy
-
Storage limitation
-
Integrity and confidentiality (security)
-
Accountability
Lawful Basis for Processing
We request personal information from patients and potential patients for the purpose of consulting with them and providing them with advice and guidance on homeopathic treatments.
​
To ensure our processing of data is lawful, fair and transparent, we will maintain a Register of Systems which will be reviewed at least annually. We are registered with the Information Commissioner’s Office as an organisation that processes personal data.
What Data We Collect
We collect the following types of personal data:
​
-
Contact details: Name, address, phone number, email
-
Health data: Medical history, current health conditions, medications, lifestyle
-
Consultation records: Notes from appointments
-
Payment data: Processed through third-party providers (we do not store card details)
How We Use Your Data
We use personal data to:
​
-
Provide homeopathy consultations and services
-
Maintain accurate client records
-
Communicate with clients regarding appointments and follow-up care
-
Comply with legal and professional obligations
-
Improve the quality of our services
Data Sharing
We only share personal data when necessary and with appropriate safeguards in place. This includes:
​
-
Third-party service providers (e.g. booking platforms, email, video conferencing, and payment processors)
-
Regulatory bodies or professional associations, if required
-
Emergency services, if there is a risk to life or safety
We never sell or share data for marketing purposes without explicit consent.
Data Retention
We retain personal data only as long as necessary:
​
-
Health records: Held for a minimum of 7 years after the last consultation (or until the client turns 25 if under 18), in line with guidance from the Professional Standards Authority and Complementary and Natural Healthcare Council (CNHC).
-
Contact and administrative data: As long as necessary to manage our services and comply with legal obligations.
Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
​
-
Encrypted storage systems
-
Secure video conferencing platforms
-
Appropriate data backups
Your Rights
Under UK GDPR, you have the right to:
​
-
Access your personal data
-
Correct inaccurate data
-
Request erasure ("right to be forgotten")
-
Restrict or object to processing
-
Data portability
-
Withdraw consent (where applicable)
-
Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise your rights, please contact us at:
info@homeopathywithsherie.co.uk
Cookies and Website Tracking
Our website may use cookies to enhance user experience and analyse site traffic. Where required, we seek your consent before using non-essential cookies.
Changes to This Policy
We may update this policy from time to time to reflect changes in legal, regulatory, or operational requirements.
The latest version will always be available on our website.
Contact Us
If you have any questions or concerns about how we handle your data, please contact:
​
Supervisory Authority
If you believe we have not handled your data properly, you can lodge a complaint with the Information Commissioner’s Office (ICO).
