Privacy Notice
Jocelyn Dudley-Smith Acupuncture
Viking House, Denmark Street, Maidenhead, SL6 7BN
Last updated: September 2026
About this Privacy Notice
This Privacy Notice explains how I collect, use, store and protect your personal information when you contact me or receive acupuncture or other treatments from me. I am committed to protecting your privacy and handling your personal information responsibly and in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information I collect
Depending on the services you receive, I may collect:
● your name and contact details, such as telephone number, email address and address;
● appointment and booking information;
● information about your health, medical history, symptoms, medication and treatment;
● information contained in my clinical treatment records;
● payment and treatment history where necessary for managing your appointments and accounts;
● correspondence between you and me relating to your treatment.
Health information is classed as special category data under UK data protection law and is given additional protection.
How I use your information
I use your personal information only where it is necessary to:
● arrange and manage your appointments;
● provide and manage your treatment;
● maintain appropriate clinical records;
● communicate with you about your appointments or treatment;
● process payments and maintain appropriate financial records;
● meet my legal, professional and regulatory responsibilities;
● respond to any concerns, complaints or legal matters where necessary.
I do not sell your personal information and I do not use your information for unrelated marketing purposes.
Lawful basis for using your information
I process your personal information because it is necessary for providing and managing your treatment and for the administration of my practice. Where I process information about your health, this is special category data. UK data protection law requires both a lawful basis under Article 6 of the UK GDPR and an appropriate condition under Article 9. I only collect and use information that is relevant and necessary for these purposes.
How I store your information
Your information may be held:
● in paper clinical records;
● electronically on my password-protected devices;
● in my dedicated practice email account;
● in my electronic calendar for appointment management.
I take reasonable steps to keep personal information secure and to prevent unauthorised access, loss or disclosure. Electronic devices used to hold patient information are protected by appropriate passwords, device security and access controls. I use additional account security measures where available. I aim to keep information to the minimum necessary for the purpose for which it is being used.
Email and electronic communication
I may use email and telephone messaging to communicate with you about appointments and, where appropriate, your treatment. Please be aware that ordinary electronic communications can carry some privacy and security risks. I therefore avoid including unnecessary clinical or sensitive information in appointment communications. Appointment information stored in my electronic calendar is kept to the minimum necessary for managing your appointment.
Who I share your information with
I do not routinely share your personal information with third parties. I may share relevant information where this is necessary and lawful, for example:
● with another healthcare professional involved in your care, where appropriate;
● where I am legally required to provide information;
● where necessary to protect someone’s vital interests or comply with a legal obligation;
● where necessary in connection with professional, regulatory or legal matters.
I will only share information that is relevant and necessary for the particular purpose.
How long I keep your information
I retain clinical records for seven years from the date of your last treatment or contact with me. This is to allow me to meet my professional, legal and insurance requirements. After seven years, records will be securely destroyed or permanently deleted, unless there is a specific reason why they need to be retained for longer.
Your rights
Under UK data protection law, you may have rights including:
● the right to be informed about how your information is used;
● the right to request access to the personal information I hold about you;
● the right to ask for inaccurate information to be corrected;
● the right to request deletion of information in certain circumstances;
● the right to ask for processing to be restricted in certain circumstances;
● the right to object to certain types of processing;
● the right to data portability in certain circumstances.
These rights are subject to certain legal exemptions and limitations. If you would like to exercise a data protection right, please contact me using the details below.
Contact me
Jocelyn Dudley-Smith Acupuncture
Viking House
Denmark Street
Maidenhead
SL6 7BN
Telephone: 07788 713193
Email: [email protected]
Complaints
If you have any concerns about the way I have handled your personal information, please contact me in the first instance so that I can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection. Information about the ICO and how to make a complaint is available on its website.
Changes to this Privacy Notice
I may update this Privacy Notice from time to time to reflect changes in my practice, the information I collect or applicable data protection requirements. The latest version will always be made available on this website.
Jocelyn Dudley-Smith Acupuncture
Viking House, Denmark Street, Maidenhead, SL6 7BN
Last updated: September 2026
About this Privacy Notice
This Privacy Notice explains how I collect, use, store and protect your personal information when you contact me or receive acupuncture or other treatments from me. I am committed to protecting your privacy and handling your personal information responsibly and in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information I collect
Depending on the services you receive, I may collect:
● your name and contact details, such as telephone number, email address and address;
● appointment and booking information;
● information about your health, medical history, symptoms, medication and treatment;
● information contained in my clinical treatment records;
● payment and treatment history where necessary for managing your appointments and accounts;
● correspondence between you and me relating to your treatment.
Health information is classed as special category data under UK data protection law and is given additional protection.
How I use your information
I use your personal information only where it is necessary to:
● arrange and manage your appointments;
● provide and manage your treatment;
● maintain appropriate clinical records;
● communicate with you about your appointments or treatment;
● process payments and maintain appropriate financial records;
● meet my legal, professional and regulatory responsibilities;
● respond to any concerns, complaints or legal matters where necessary.
I do not sell your personal information and I do not use your information for unrelated marketing purposes.
Lawful basis for using your information
I process your personal information because it is necessary for providing and managing your treatment and for the administration of my practice. Where I process information about your health, this is special category data. UK data protection law requires both a lawful basis under Article 6 of the UK GDPR and an appropriate condition under Article 9. I only collect and use information that is relevant and necessary for these purposes.
How I store your information
Your information may be held:
● in paper clinical records;
● electronically on my password-protected devices;
● in my dedicated practice email account;
● in my electronic calendar for appointment management.
I take reasonable steps to keep personal information secure and to prevent unauthorised access, loss or disclosure. Electronic devices used to hold patient information are protected by appropriate passwords, device security and access controls. I use additional account security measures where available. I aim to keep information to the minimum necessary for the purpose for which it is being used.
Email and electronic communication
I may use email and telephone messaging to communicate with you about appointments and, where appropriate, your treatment. Please be aware that ordinary electronic communications can carry some privacy and security risks. I therefore avoid including unnecessary clinical or sensitive information in appointment communications. Appointment information stored in my electronic calendar is kept to the minimum necessary for managing your appointment.
Who I share your information with
I do not routinely share your personal information with third parties. I may share relevant information where this is necessary and lawful, for example:
● with another healthcare professional involved in your care, where appropriate;
● where I am legally required to provide information;
● where necessary to protect someone’s vital interests or comply with a legal obligation;
● where necessary in connection with professional, regulatory or legal matters.
I will only share information that is relevant and necessary for the particular purpose.
How long I keep your information
I retain clinical records for seven years from the date of your last treatment or contact with me. This is to allow me to meet my professional, legal and insurance requirements. After seven years, records will be securely destroyed or permanently deleted, unless there is a specific reason why they need to be retained for longer.
Your rights
Under UK data protection law, you may have rights including:
● the right to be informed about how your information is used;
● the right to request access to the personal information I hold about you;
● the right to ask for inaccurate information to be corrected;
● the right to request deletion of information in certain circumstances;
● the right to ask for processing to be restricted in certain circumstances;
● the right to object to certain types of processing;
● the right to data portability in certain circumstances.
These rights are subject to certain legal exemptions and limitations. If you would like to exercise a data protection right, please contact me using the details below.
Contact me
Jocelyn Dudley-Smith Acupuncture
Viking House
Denmark Street
Maidenhead
SL6 7BN
Telephone: 07788 713193
Email: [email protected]
Complaints
If you have any concerns about the way I have handled your personal information, please contact me in the first instance so that I can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection. Information about the ICO and how to make a complaint is available on its website.
Changes to this Privacy Notice
I may update this Privacy Notice from time to time to reflect changes in my practice, the information I collect or applicable data protection requirements. The latest version will always be made available on this website.