JCH Homeopathy processes personal data in accordance with the UK GDPR and DPA 2018, meaning personal data must be:
JCH Homeopathy processes personal data on one or more lawful bases under the UK GDPR, including:
Where consent is used as the basis for processing, individuals can withdraw consent at any time. Written evidence of consent is maintained in our systems.
We may process:
Sensitive health data is categorised as a “special category” under UK GDPR and given additional protection. We process it only when necessary for providing care and with explicit consent.
Your data is used to:
We do not share data with third parties for marketing purposes.
Under the UK GDPR, you have the right to:
You also have the right to complain to the ICO if you believe your data rights have been violated.
Personal data is retained only as long as necessary. As a registered homeopath, I am required to keep clinical records for a minimum of 7 years, in line with professional guidelines and legal obligations.
JCH Homeopathy implements appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss or unlawful processing. This includes secure storage systems and controlled access.
We may share personal data only when necessary for treatment, legal compliance, or administration (e.g., secure postage of remedies). We do not share personal data for marketing or commercial use.
In the event of a personal data breach, JCH Homeopathy will assess the risk to individuals and report to the Information Commissioner’s Office (ICO) where required under UK GDPR.