Legal

Privacy Policy

Template draft. This document is a starting point only and must be reviewed and completed by the business (and ideally a legal professional) before launch.

H&G Hijamah (“we”, “us”) is committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

H&G Hijamah is the data controller. Contact details: [business legal name, address, email — to be completed]. [ICO registration number, if applicable.]

What we collect

Booking information: your name, mobile number, email address, whether you are a new or returning customer, appointment details and any non-medical notes you provide.
Health information: collected separately and securely through our consultation and consent process, only where necessary to provide treatment safely. Health data is “special category” data and is handled with additional safeguards.
Contact form messages and basic technical data needed to run the website.

How we use it

To manage your booking and send confirmations, reminders and cancellations (lawful basis: contract).
To provide treatment safely (lawful basis: contract and, for health data, explicit consent / provision of health care as applicable).
To ask, optionally, for feedback or a review (lawful basis: legitimate interests — you can opt out at any time).

Sharing

We do not sell your data. We use trusted service providers (for example website hosting, booking database, email and messaging services) who process data on our behalf under appropriate agreements. [List providers once confirmed.]

How long we keep it

[Retention periods to be confirmed — e.g. booking records for X years; consultation and consent records in line with professional guidance.]

Your rights

You have the right to access, correct, delete or restrict the use of your data, to object to processing, to data portability and to withdraw consent. To exercise these rights, contact us. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

This website currently uses only essential browser storage needed for it to function. If analytics or marketing cookies are added, this policy and a consent banner will be updated.