Privacy Policy

We collect information you provide directly when you book treatments, enrol on courses, complete contact forms, or create an account. This may include your name, email address, phone number, postal address, date of birth, and relevant health information required for treatments.

We also collect certain information automatically when you visit our website, including your IP address, browser type, device information, pages visited, and referring URLs. This data helps us improve your experience and the performance of our services.

Where treatments involve acupuncture, Chinese medicine, or other clinical services, we may collect health-related information with your explicit consent. This data is treated with the highest level of confidentiality and is processed only for the purpose of providing safe and effective care.

We use your personal data to provide and improve our services, including processing bookings, delivering courses, communicating about your treatments, and responding to enquiries. Your data enables us to personalise your experience and ensure continuity of care.

We may use your email address to send service-related communications, appointment reminders, and — where you have opted in — information about new courses, treatments, and wellbeing resources. You can unsubscribe from marketing communications at any time.

We process health data exclusively for the purpose of delivering clinical treatments safely. This information is never used for marketing purposes or shared with third parties for commercial gain.

Your personal data is stored securely using industry-standard encryption and security measures. We use encrypted databases with AES-256 encryption for sensitive information, and all data transmitted between your browser and our servers is protected by TLS/SSL encryption.

Access to personal data is restricted to authorised personnel only, on a need-to-know basis. Our systems are regularly reviewed and updated to maintain the highest standards of data protection.

Health records and clinical notes are stored separately from general account data and are subject to additional security controls in accordance with healthcare data protection best practices.

We use essential cookies to ensure the proper functioning of our website, including session management and security features. These cookies are strictly necessary and cannot be disabled.

With your consent, we may also use analytics cookies to understand how visitors interact with our website. This helps us improve content, navigation, and the overall user experience. You can manage your cookie preferences at any time through your browser settings.

We do not use cookies for behavioural advertising or sell cookie data to third parties.

We use carefully selected third-party services to support our operations, including payment processing (Stripe), email communications, and website analytics. Each of these providers is contractually obligated to protect your data in accordance with applicable data protection legislation.

We do not sell, rent, or trade your personal information to third parties. Data is shared with service providers only to the extent necessary to deliver our services to you.

Where we integrate with third-party platforms for course delivery or booking management, we ensure appropriate data processing agreements are in place.

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of Access — You may request a copy of the personal data we hold about you.
• Right to Rectification — You may request correction of inaccurate or incomplete data.
• Right to Erasure — You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing — You may request that we limit how we use your data.
• Right to Data Portability — You may request your data in a structured, commonly used, machine-readable format.
• Right to Object — You may object to processing based on legitimate interests or for direct marketing purposes.
• Rights Related to Automated Decision-Making — You have the right not to be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one calendar month.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Account data is retained for the duration of your active relationship with us, and for a reasonable period thereafter to comply with legal obligations.

Health and clinical records are retained in accordance with professional regulatory requirements, typically for a minimum of eight years from the date of last treatment. Course completion records and certifications are retained indefinitely to support ongoing professional development verification.

When data is no longer required, it is securely deleted or anonymised in accordance with our data retention schedule.

The data controller for the purposes of UK GDPR is Beauty & Wellbeing Education by Laura Jones. If you have any questions about this privacy policy, wish to exercise your data rights, or have concerns about how your data is being handled, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. The ICO can be contacted at ico.org.uk.