Privacy Policy

Website: https://www.yukoacupuncture.co.uk/
Business: Yuko Nakamura Acupuncture Clinic
Last updated: 13 November 2026

1. Introduction

Yuko Nakamura Acupuncture Clinic ("we", "us" or "our") is committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, arrange an appointment or receive acupuncture treatment.

We comply with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

As an acupuncture practice, we may need to collect and process sensitive personal information relating to your health and wellbeing. We take particular care to ensure that this information is treated confidentially and only used for appropriate purposes.

2. Who we are

For the purposes of data protection legislation, the data controller is:

Yuko Nakamura Acupuncture Clinic

Address:
130 Braybrooke Road
Hastings
East Sussex
TN34 1TG

Telephone: 01424 721 875

Mobile: 07964 310 462

Email: yuko.clinic@gmail.com

Website: https://www.yukoacupuncture.co.uk/

If you have any questions about this Privacy Policy or how your personal information is handled, please contact us using the details above.

3. What personal information do we collect?

We may collect and process different types of personal information depending on how you interact with our practice.

Personal identification and contact information

This may include:

Your name.
Email address.
Telephone number.
Postal address.
Other contact details you provide to us.

Appointment and enquiry information

When you contact us or arrange an appointment, we may collect:

Details of your enquiry.
Appointment dates and times.
Communication between you and the practice.
Information relating to your appointment history.
Any other information you voluntarily provide.

Health and medical information

When you receive acupuncture treatment, we may collect information relevant to your health and treatment.

This may include:

Medical history.
Existing medical conditions.
Symptoms and health concerns.
Information about previous treatments.
Medication and relevant medical information.
Treatment notes and progress records.
Information relating to your general health and wellbeing.

This information is considered special category personal data under UK GDPR and receives additional protection.

We only collect health information that is relevant and necessary for providing appropriate care and maintaining accurate treatment records.

Website and technical information

When you visit our website, certain technical information may be collected automatically, including:

IP address.
Browser type and version.
Device and operating system information.
Pages visited.
Time spent on individual pages.
General website usage and interaction information.
How you arrived at our website.

Some of this information may be collected through cookies and analytics technologies, including Google Analytics 4.

Further information is available in our Cookie Policy.

4. How do we use your personal information?

We use your personal information for legitimate business and clinical purposes, including:

Responding to enquiries.
Arranging and managing appointments.
Providing acupuncture treatments and related services.
Understanding your health history and treatment requirements.
Maintaining accurate clinical and treatment records.
Communicating with you about appointments.
Managing administrative and business activities.
Meeting legal, regulatory and professional obligations.
Maintaining the security and functionality of our website.
Analysing website performance and improving our online services.

We will only use your personal information for purposes that are lawful, fair and relevant to the services we provide.

5. Our lawful basis for processing personal information

Under UK GDPR, we must have a lawful basis for collecting and processing personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Contractual necessity (Article 6(1)(b))

We may process your personal information where it is necessary to take steps at your request before entering into an agreement or to provide services you have requested.

Legal obligation (Article 6(1)(c))

We may process personal information where necessary to comply with legal obligations, including applicable financial, accounting and record-keeping requirements.

Legitimate interests (Article 6(1)(f))

We may process certain personal information where it is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.

Examples may include managing enquiries, maintaining business records and improving our website.

Consent (Article 6(1)(a))

Where appropriate, we may rely on your consent to process personal information for specific purposes, such as certain optional communications or marketing activities.

Processing health and medical information

Health information is classified as special category personal data and requires an additional condition under Article 9 of UK GDPR.

Depending on the applicable professional and legal requirements, we may rely on:

Article 9(2)(h), where processing is necessary for the provision of health or social care and the relevant legal and confidentiality requirements are met; or
Article 9(2)(a), where you have provided explicit consent to the processing of your health information.

We will ensure that an appropriate condition is identified and documented before processing this information.

6. How do we store and protect your information?

We take appropriate technical and organisational measures to protect your personal information against:

Unauthorised access.
Accidental loss or destruction.
Unauthorised disclosure.
Alteration or misuse.

Access to personal and clinical information is restricted to those who need it for legitimate business or treatment-related purposes.

We take particular care with health and medical information because of its sensitive nature.

While we take reasonable steps to protect the information we hold, no method of electronic storage or internet transmission can be guaranteed to be completely secure.

7. How long do we keep your information?

We only retain personal information for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, professional or regulatory requirements.

Different categories of information may be retained for different periods.

For example:

Enquiry information: Retained for as long as necessary to respond to and manage your enquiry.
Appointment information: Retained for as long as necessary for appointment administration and business records.
Clinical and treatment records: Retained in accordance with applicable professional guidance, insurance requirements and legal obligations.
Financial records: Retained for the periods required by applicable tax and accounting legislation.
Website analytics information: Retained in accordance with the relevant analytics settings and provider retention policies.

When personal information is no longer required, it will be securely deleted or destroyed.

8. Do we share your personal information?

We treat your personal information confidentially and do not sell, rent or trade your personal information to third parties.

We may share information where necessary for legitimate purposes, including:

With professional advisers, insurers or relevant regulatory bodies where appropriate.
With service providers who support the operation of our website and business.
Where disclosure is required by law or necessary to protect someone's vital interests.
Where you have provided permission for information to be shared.
Where necessary for the provision of appropriate healthcare, subject to applicable confidentiality requirements.

Any third parties who process personal information on our behalf are expected to maintain appropriate security and confidentiality arrangements.

9. Website analytics – Google Analytics 4 and Google Tag Manager

We use Google Analytics 4 (GA4) to understand how visitors interact with our website and to help us improve its performance and content.

Google Analytics may collect information such as:

Pages visited.
Time spent on the website.
Browser and device information.
General website interactions.
How visitors arrive at the website.

We use Google Tag Manager (GTM) to manage and deploy website tracking and measurement technologies.

Google Tag Manager itself does not inherently collect personal information or place cookies on your device. However, it can be used to load services such as Google Analytics 4.

Non-essential analytics cookies and associated tracking technologies will only be used where the appropriate consent has been obtained.

We do not intend to collect or transmit patient medical records, treatment notes or other confidential clinical information through Google Analytics or Google Tag Manager.

Google may process certain information on our behalf in accordance with its applicable data protection arrangements.

You can find further information about Google's privacy practices here:

https://policies.google.com/privacy

For further information about cookies and how to manage your preferences, please refer to our Cookie Policy.

10. International transfers of personal information

Some third-party service providers, including Google, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection legislation.

This may include relying on UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, where applicable.

11. Your data protection rights

Under UK GDPR, you have several rights in relation to your personal information.

These include:

Right of access

You can request a copy of the personal information we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you can request that we delete your personal information.

Right to restrict processing

You can ask us to restrict the processing of your personal information in certain circumstances.

Right to data portability

Where applicable, you can request that certain personal information is provided to you or transferred to another organisation in a structured, commonly used and machine-readable format.

Right to object

You can object to certain types of processing, including processing based on legitimate interests.

Right to withdraw consent

Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.

Some of these rights are subject to legal limitations, particularly where information needs to be retained to comply with legal or professional obligations.

To exercise any of these rights, please contact us using the details provided in Section 2.

We may need to verify your identity before responding to a request.

12. Complaints and concerns

If you have concerns about how we collect, use or store your personal information, please contact us in the first instance so that we can try to resolve the matter.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Website: https://ico.org.uk/

Telephone: 0303 123 1113

You can find further information about your data protection rights on the ICO website.

13. Links to other websites

Our website may contain links to external websites or third-party services.

We are not responsible for the privacy practices, content or security of external websites.

If you visit another website through a link on our website, we recommend reviewing its privacy policy before providing any personal information.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, website functionality or applicable data protection legislation.

Any updates will be published on this page, with the revised date displayed at the top.

We recommend reviewing this policy periodically to remain informed about how we protect your personal information.

15. Contact us

If you have any questions about this Privacy Policy, how your personal information is used or wish to exercise your data protection rights, please contact: