​Privacy Policy
Your privacy matters to us. This policy explains what personal information we collect, why we collect it, how we protect it, and what your rights are. We are committed to handling your data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Because we handle health-related information, your data is treated as special category data — the most protected category under UK law.
1. Who We Are
Forest Row Community Clinic is a community acupuncture and craniosacral therapy clinic based at The Garden Room, Forest Row Community Centre, Hartfield Road, Forest Row, RH18 5DZ.
The clinic is run by three independent practitioners who act as joint data controllers:
Eoni Blaxland-de Lange — Acupuncturist (BSc Hons LIC AC, MBAcC) Kirsten Germann — Acupuncturist (LIC AC, MBAcC) Dorothea Leber — Craniosacral Therapist (RCST LIC TCL)
Contact us: 07958 804123 | www.forestrowcommunityclinic.co.uk
2. What Personal Data We Collect
Contact information (name, email, phone number) — to manage your appointment and contact you if needed.
Appointment information (date, time, treatment type, practitioner) — to provide your treatment and keep records.
Health information (any health details shared during treatment) — to provide safe and appropriate treatment. This is special category data.
Payment information (bank transfer reference) — to confirm receipt of payment.
Website usage data (browser type, pages visited, cookies) — collected automatically by Wix. See section 5.
We do not collect payment card details. All payments are made by bank transfer directly to your practitioner.
3. Our Legal Basis for Processing Your Data
Contract — processing your booking is necessary to provide your appointment. Legitimate interests — keeping appointment records and managing our clinic. Health care — for health information, we rely on Article 9(2)(h) of UK GDPR. Legal obligation — where required by our professional regulatory bodies (BAcC, CST Association).
4. How Long We Keep Your Data
Appointment and health records — 8 years from your last treatment; until age 25 for children. Booking system data — managed by Cal.com in line with their data retention policy. Website visitor data — managed by Wix in line with their privacy policy.
After the retention period, your data is securely deleted.
5. Third-Party Services We Use
Cal.com — Online Booking System. Processes your name, contact details and appointment information to manage bookings. GDPR compliant, Data Processing Agreement in place. Privacy policy: cal.com/privacy
Wix — Website Platform. Our website host. Collects standard usage data and cookies. GDPR compliant. See wix.com/about/privacy
Google Calendar — Internal Scheduling. Used internally to manage practitioner schedules. Patient names and appointment times may appear in our private calendars. GDPR compliant.
We do not sell, rent, or share your personal data with any third parties for marketing purposes. Ever.
6. Special Category Health Data
Any health information you share with us is treated as special category data under UK GDPR and given the highest level of protection.
Health information is only shared between practitioners on a strictly need-to-know basis to ensure your safety and continuity of care.
It is never shared outside the clinic without your explicit consent, except where we are legally required to do so.
Our practitioners are bound by their professional codes of ethics regarding patient confidentiality.
Our clinic is a shared multi-bed space. While we maintain screens for physical privacy, other patients may be present during your treatment. All patients are asked to respect the confidentiality of others.
7. Your Rights
Right of Access — request a copy of all personal data we hold about you. Right to Rectification — ask us to correct any inaccurate or incomplete data. Right to Erasure — request deletion of your data, subject to our legal retention obligations. Right to Restriction — ask us to limit how we use your data in certain circumstances. Right to Object — object to processing based on legitimate interests. Right to Portability — request your data in a portable, machine-readable format.
We will respond to all requests within one calendar month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.
8. Cookies
Our website uses cookies managed by Wix, including essential cookies (necessary for the site to function), analytics cookies (anonymised visitor data), and booking cookies (to manage your session). You can control cookies through your browser settings at any time.
9. Contact Us
Forest Row Community Clinic The Garden Room, Forest Row Community Centre, Hartfield Road, Forest Row, RH18 5DZ Phone: 07958 804123 Website: www.forestrowcommunityclinic.co.uk
10. Changes to This Policy
We may update this policy from time to time. The date at the top of this page will always show when it was last updated.