Introduction

This Privacy Policy explains what I do with your personal data, whether I am in the process of treating you, providing you with a service, receiving a service from you, using your data to ask for your assistance in relation to one of my clients, or you are visiting my website.

It describes how I collect, use and process your personal data and how I comply with my legal obligations to you. Your privacy is important to me and I am committed to protecting and safeguarding your data privacy rights.

This Privacy Policy applies to the personal data of my website users, clients, suppliers annd others I may contact or emergency contacts.

For the purpose of applicable data protection legislation, including but not limited to, the General Data Protection Regulation (the “GDPR”), the individual responsible for your personal data (Mira Britton or “me”) can be found here.

It is important to point out that I may amend this Privacy Policy from time to time. Please just visit this page if you want to stay up to date.

If you are dissatisfied with any aspect of my Privacy Policy, you may have legal rights and where relevant, I have described these as well.

What kind of personal data do I collect?
Clients: To provide personalised treatments, I need to process certain information about you. I only ask for details that are genuinely needed to carry out this task, such as your name, age, contact details and the condition to be treated.  Regarding acupuncture treatment, in addition to your presenting complaint and symptoms reported by you, I use any relevant medical and family history you have told me about for the purposes of making a full traditional diagnosis.  This enables me to formulate a treatment strategy and treatment plan.  

The main reason for using your personal details is to help me treat you most effectively. The more information I have about you,  the more bespoke I can make my service. Where appropriate and in accordance with local laws and requirements, I may also use your personal data for things like marketing. Where appropriate, I will seek your consent to undertake some of these activities.

Suppliers: I need a small amount of information from my suppliers to ensure that I can carry out business. I need contact details of relevant individuals at your organisation so that I can communicate with you. I also need other information such as your bank details so that I can pay for the services you provide (if this is part of the contractual arrangements between us).

Other (for example, general practitioners): I collect your contact details only where a Client gives them to me in order for you to advise on suitability of treatment.

Website and email Users: I collect a limited amount of data from my website and some email users which I use to help me to improve your experience when using my digital services and to help me manage the services I provide. This includes information such as how you use my website, the frequency with which you access my website, the times that my website is most popular and to see if you have read my newsletter.

A number of elements of the personal data I collect from you are required to enable me to fulfil my contractual duties to you. Other items may simply be needed to ensure that our relationship can run smoothly.

Depending on the type of personal data in question and the grounds on which I may be processing it, should you decline to provide me with such data, I may not be able to fulfil my contractual requirements or, in extreme cases, may not be able to continue with our relationship.

How do I collect your personal data?

Client Data: I collect data directly from you.

Supplier Data: I collect your personal data during the course of my work with you.

Other Data (for example, general practitioners): I collect your contact details only where a Client gives them to me in order for you to advise on suitability of treatment.

Website and email Users: I collect your data automatically via cookies when you visit my website, in line with cookie settings in your browser. I automatically collect information when I use my bulk email service for job offers and newsletters to see, for example, if the email has been delivered, opened and if you wish to unsubscribe.

Please note that communications to and from me including emails may be reviewed as part of internal or external investigations or litigation.

Who do I share your personal data with?
Client Data: I will share your personal data in very limited circumstances, primarily to ensure that your primary medical practitioner agrees that it is safe for me to treat you and always with your explicit consent or to meet my legal obligations.

Supplier Data: I will not share your personal data with third parties, other than to meet my legal obligations.

Other Data (for example, general practitioners):  I will not share your personal data with third parties, other than to meet my legal obligations.

Website and email Users:  Unless you specify otherwise, I may share your information with providers of web analytics services, marketing automation platforms and social media services to make sure any advertising you receive is targeted to you.

How do I safeguard your personal data?
I care about protecting your information. That’s why I put in place appropriate measures that are designed to prevent unauthorised access to, and misuse of, your personal data.

How long do I keep your personal data for?
If I have not had meaningful contact with you (or, where appropriate, the company you are working for or with) for a period of two years, I will delete your personal data from my systems unless I believe in good faith that the law or other regulation requires me to preserve it (for example, because of my obligations to tax authorities or in connection with any anticipated litigation).  I will keep patient records for a period of 7 years in accordance with the British Acupuncture Code of Professional Conduct.

How can you access, amend or take back the personal data that you have given to me?
Even if I already hold your personal data, you still have various rights in relation to it. To get in touch about these, please contact us. I will seek to deal with your request without undue delay, and in any event in accordance with the requirements of any applicable laws. Please note that I may keep a record of your communications to help me resolve any issues which you raise.

Right to object: If I am using your data because I deem it necessary for my legitimate interests to do so, and you do not agree, you have the right to object. I will respond to your request within 30 days (although I may be allowed to extend this period in certain cases). Generally, I will only disagree with you if certain limited conditions apply.

Right to withdraw consent: Where I have obtained your consent to process your personal data for consent to market to you, you may withdraw your consent at any time.

Data Subject Access Requests: Just so it’s clear, you have the right to ask me to confirm what information I hold about you at any time and you may ask me to modify, update or Delete such information. At this point I may comply with your request or, additionally do one of the following:
– I may ask you to verify your identity, or ask for more information about your request; and
– where I am legally permitted to do so, I may decline your request, but I will explain why if I do so.

Right to erasure: In certain situations (for example, where I have processed your data unlawfully), you have the right to request me to “erase” your personal data. I will respond to your request within 30 days (although I may be allowed to extend this period in certain cases) and will only disagree with you if certain limited conditions apply. If I do agree to your request, I will Delete your data but will generally assume that you would prefer me to keep a note of your name on my register of individuals who would prefer not to be contacted. That way, I will minimise the chances of you being contacted in the future where your data are collected in unconnected circumstances. If you would prefer me not to do this, you are free to say so.

Right of data portability: If you wish, you have the right to transfer your data from me to another data controller. I will help with this – either by directly transferring your data for you, or by providing you with a copy in a commonly used machine-readable format.

Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority, details of which can be found here.

If your interests or requirements change, you can unsubscribe from part or all of my marketing content (for example, newsletters) by clicking the unsubscribe link in the email.

Who is responsible for processing your personal data on the Mira Britton website?
Mira Britton controls the processing of personal data on her website.

What are cookies and how do I use them?
A “cookie” is a bite-sized piece of data that is stored on your computer’s hard drive. They are used by nearly all websites and do not harm your system. I use them to track your activity to help ensure you get the smoothest possible experience when visiting my website. I can use the information from cookies to ensure I present you with options tailored to your preferences on your next visit. I can also use cookies to analyse traffic and for advertising purposes.

If you want to check or change what types of cookies you accept, this can usually be altered within your browser settings.

How to reject cookies
If you don’t want to receive cookies that are not strictly necessary to perform basic features of my site, you may choose to opt-out by changing your browser settings

Most web browsers will accept cookies but if you would rather I didn’t collect data in this way you can choose to accept all or some, or reject cookies in your browser’s privacy settings. However, rejecting all cookies means that you may not be able to take full advantage of all my website’s features. Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences.