Privacy Notice

Last updated: July 2026
 
Your Privacy Matters to Us
At Dr Sally's Clinic, we understand that your personal and health information is highly confidential. Protecting your privacy is an important part of the trust you place in us. We are committed to handling your personal information responsibly, transparently and securely, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all other applicable data protection legislation.

This Privacy Notice explains:

• what personal information we collect

• why we collect it

• how we use and protect it

• who we may share it with

• how long we keep it

• your rights regarding your personal information.

If you have any questions about this Privacy Notice or how your information is handled, please contact us using the details provided at the end of this document.
 
Privacy at a Glance
We know privacy policies can be lengthy, so here's a quick summary of the most important points:

• We only collect information that is necessary to provide safe, personalised healthcare and manage our services.

• Your health information is treated as strictly confidential and is only shared when necessary for your care, where required by law, or with your consent.

• We never sell your personal information or share it with third parties for their own marketing purposes.

• We use secure systems to protect your information, including encrypted clinical software and trusted service providers.

• You are in control of your personal information. You have rights under UK data protection law, including the right to access, correct and, in some circumstances, request deletion of your personal information.

• If you have any questions or concerns, we're here to help. Please contact us using the details provided at the end of this Privacy Notice.

Who We Are
Dr Sally's Clinic is an independent integrative and functional medicine clinic providing personalised healthcare for adults and children. 

Our services include:

• Integrative Medicine

• Functional Medicine

• Women's Health

• Gut Health

• Medical Herbal Medicine

• Homeopathy

• Nutritional Medicine

• Lifestyle Medicine

• Functional laboratory testing

• Preventative healthcare

• Health optimisation

• Practitioner education

• Professional mentoring

• Educational webinars and events
   

For the purposes of UK data protection law, Dr Sally's Clinic is the Data Controller responsible for the personal information collected through our clinic website, consultations and healthcare services.

The Information We Collect
Depending on the services you use, we may collect the following information.
Personal Information
This may include:

• your name

• date of birth

• postal address

• telephone number

• email address

• emergency contact details

• GP details

• occupation (where relevant to your health)

• payment information

• appointment history

• correspondence with us
   

Health Information
As a healthcare provider, we process special category personal data, including information relating to your physical and mental health.

This may include:

• medical history

• current symptoms

• previous diagnoses

• medications

• allergies

• nutritional information

• dietary habits

• lifestyle information

• sleep patterns

• exercise habits

• herbal medicines

• supplements

• homeopathic medicines

• laboratory test results

• functional medicine investigations

• consultation notes

• treatment recommendations

• personalised health plans

• correspondence with your GP or other healthcare professionals (with your consent where appropriate)

We only collect information that is relevant to providing safe, effective and personalised healthcare.

How We Collect Your Information
We may collect information directly from you when you:

• complete an enquiry form on our website

• book an appointment

• complete health questionnaires

• register as a patient

• attend consultations

• contact us by email or telephone

• purchase educational services

• register for webinars

• participate in mentoring programmes

We may also receive information from:

• your GP

• consultants

• other healthcare professionals

• laboratory providers

• diagnostic testing companies

• healthcare practitioners involved in your care

• when you subscribe to our newsletter

• when you purchase educational resources

• when you contact us via social media 

• where you have provided consent or where there is another lawful basis for doing so

Functional Laboratory Testing
As part of providing personalised healthcare, we may recommend specialist laboratory testing.
Where appropriate, your information may be shared securely with laboratory providers to arrange testing or obtain results.
These laboratories may include (but are not limited to):

• Regenerus Laboratories

• Nordic Laboratories

• Invivo Healthcare/ Microbia

• Genova Diagnostics

• DUTCH (Precision Analytical)

• Medichecks

We only share the information necessary to arrange testing or interpret results as part of your care.

Why We Collect Your Information
We use your personal information to:

• provide safe and effective healthcare

• assess your health

• develop personalised treatment plans

• monitor your progress

• communicate with you regarding appointments

• respond to enquiries

• manage payments

• maintain clinical records

• comply with professional, legal and regulatory obligations

• improve our services

• protect the safety of our patients and staff

We will only use your information where there is a lawful reason for doing so.

Our Legal Basis for Processing Your Information
Under UK GDPR, we process your information using one or more of the following lawful bases.
Healthcare Provision
The majority of processing is necessary:

• to provide healthcare services requested by you

• to fulfil our contract with you

• to comply with our legal obligations as healthcare professionals

• because processing health information is necessary for the provision of healthcare under Article 9 of UK GDPR.

Legitimate Interests
We may also process certain information where it is necessary for the legitimate interests of running and improving our clinic, provided those interests do not override your rights and freedoms.
Examples include:

• responding to enquiries

• maintaining secure systems

• preventing fraud

• improving our services

• managing appointments
  
  
  Consent

Where required, we will ask for your explicit consent.
This may include:

• contacting your GP or consultant where appropriate

• sending marketing communications

• educational newsletters

• sharing information with other healthcare providers outside your direct care

• using patient testimonials or case studies

You may withdraw your consent at any time.

Working With Your Healthcare Team
Providing safe, integrated healthcare sometimes requires communication with other healthcare professionals involved in your care. With your consent, we may communicate with:

• your GP

• consultants

• other healthcare practitioners involved in your treatment

This helps ensure your care is coordinated, safe and based upon the best available information.
Where there is a serious risk to your health or the safety of another individual, we may disclose relevant information without consent where permitted or required by law.

Sharing Your Information
We treat all personal information as confidential.
We will never sell your personal information.
We only share information where it is necessary to provide healthcare, comply with legal obligations or where you have asked us to do so.
Your information may be shared with trusted third-party providers including:

• Practice Better (our clinical records and appointment management system)

• Stripe (secure payment processing)

• accredited laboratory providers

• healthcare professionals involved in your care

• professional advisers where legally required

• regulatory authorities where required by law

All third-party providers are required to handle your information securely and in accordance with applicable data protection legislation.

 
How We Keep Your Information Secure
Protecting your personal information is a fundamental part of the care we provide.
We take appropriate technical and organisational measures to protect your information against unauthorised access, loss, misuse, alteration or disclosure.
These measures include:

• secure electronic clinical records

• encrypted data storage where appropriate

• password-protected systems

• secure, locked storage of paper based documents

• secure cloud-based healthcare software

• restricted staff access based on role

• secure backup procedures

• secure disposal of confidential information

• regular review of our data protection procedures

Although no system can ever be completely secure, we continually review our security measures to ensure your information remains protected.
 
Practice Better
We use Practice Better as our secure clinical management system.
Practice Better is used to manage:

• appointment bookings

• clinical records

• health questionnaires

• consultation notes

• treatment plans

• secure messaging

• file sharing

• patient resources

Practice Better stores personal information securely and acts as a Data Processor on our behalf.
Further information about Practice Better's privacy and security arrangements can be found on their website.

Payments
We use trusted third-party payment providers to process payments securely.
Depending on the service you purchase, payments may be processed by:

• Stripe

• Wix Payments

• Shopify Payments

Each payment provider processes your payment information in accordance with its own Privacy Notice and security standards.

For clinic appointments, Dr Sally's Clinic uses Practice Better, which integrates securely with Stripe for payment processing.
 

If you choose to save your payment method when registering with us, your payment details are securely stored by Stripe within your Practice Better patient portal. This allows us to process consultation fees in accordance with our booking and cancellation policy without needing to contact you for payment before each appointment.
 

Saving your payment method is entirely optional. You may request that your saved payment method is removed at any time by contacting us or by updating your payment settings within your patient portal, where available.

Dr Sally's Clinic does not store your full payment card details on its own systems. Payment information is securely stored and processed by Stripe in accordance with the Payment Card Industry Data Security Standard (PCI DSS) and Stripe's own privacy and security requirements.

Website
Our website is hosted using Wix.
When you visit our website we may automatically collect limited technical information, including:

• browser type

• device type

• IP address

• pages visited

• date and time of your visit

• referring website

• approximate geographic location

This information helps us maintain website security, improve website performance and better understand how visitors use our website.
Where possible, this information is anonymised and is not used to identify individual visitors.

Cookies
Our website uses cookies and similar technologies to improve your browsing experience and help us understand how visitors use our website.
Cookies are small text files placed on your device when you visit a website.
We use cookies to:

• remember your preferences

• improve website functionality

• measure website performance

• understand how visitors use our website

• help keep our website secure.

You can manage or disable cookies through your browser settings at any time
Further information is available in our separate Cookie Policy.

Website Analytics
We may use website analytics tools, including Google Analytics, to help us understand how visitors use our website.
Analytics information is collected in an aggregated and anonymised form wherever possible and helps us improve:

• website performance

• content

• navigation

• user experience.

Analytics data is not used to identify individual visitors
You can control analytics cookies through your browser settings or our website cookie preferences.

Marketing Communications
We send regular newsletters, educational updates, webinar announcements and information about clinic services.
We will only send marketing communications where:

• you have asked to receive them; or

• we are otherwise permitted to do so under applicable law

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link within any email or by contacting us directly.
We use trusted third-party providers, including Wix and Shopify, to manage newsletter subscriptions and marketing communications securely. These providers process your information on our behalf and in accordance with their own privacy and security standards.

CCTV
CCTV operates at Dr Sally's Clinic for the purposes of:

• protecting patients, visitors and staff

• maintaining the security of our premises

• preventing crime

• assisting with the investigation of incidents where necessary

Images are securely stored and are only accessed by authorised persons where there is a legitimate reason to do so.
CCTV footage is retained only for as long as reasonably necessary before being securely deleted, unless required for an ongoing investigation or legal purpose.

How Long We Keep Your Information
We only retain personal information for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, professional and regulatory obligations.
Clinical records are retained in accordance with current professional guidance and legal requirements applicable to independent healthcare practitioners.
Different categories of information may be retained for different periods depending on the nature of the service provided and our legal obligations.
When information is no longer required, it is securely deleted or destroyed.

International Transfers
Some of the organisations we use to provide our services may process personal information outside the United Kingdom.
Where this occurs, we ensure that appropriate safeguards are in place to protect your information in accordance with UK data protection law.
These safeguards may include:

• UK International Data Transfer Agreements (IDTAs)

• the UK Addendum to the EU Standard Contractual Clauses

• adequacy regulations approved by the UK Government

• other lawful transfer mechanisms recognised under UK GDPR
   

Your Rights
Under UK GDPR you have the right to:

• request access to the personal information we hold about you

• request correction of inaccurate or incomplete information

• request deletion of your personal information where appropriate

• request restriction of processing in certain circumstances

• object to certain types of processing

• request a copy of your information in a portable electronic format where applicable

• withdraw consent at any time where processing is based on your consent

In most circumstances we will respond to requests within one calendar month.
Please note that certain legal or professional obligations may mean we cannot always comply fully with every request, particularly where healthcare records must be retained.

Complaints
We hope to resolve any questions or concerns directly.
If you have any concerns about how we use your personal information, please contact us in the first instance using the contact details below.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.
Further information can be found at:
www.ico.org.uk

Contact Us
If you have any questions about this Privacy Notice or wish to exercise any of your rights, please contact:
Dr Sally's Clinic
Orchard Barn Health
Station Road
Stallingborough
Grimsby
DN41 8AJ
Email: enquiries@drsallysclinic.com
If applicable, our Information Commissioner's Office (ICO) registration number will be provided here.

Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in legislation, professional guidance, technology or the services we provide.
The latest version will always be published on our website.
We recommend checking this page periodically to ensure you remain informed about how we protect your personal information.

 
Children and Young People
Dr Sally's Clinic primarily provides healthcare services to adults.
Where we provide services to children or young people, we are committed to protecting their privacy and personal information with the same high standards of confidentiality and care.
Personal information relating to a child or young person will only be collected and processed where it is appropriate to do so, in accordance with UK data protection law and professional guidance. Depending on the child's age, maturity and understanding, we may work directly with the young person, their parent(s), legal guardian(s), or a combination of both.
We recognise that, as children mature, they increasingly have the right to make decisions about their own healthcare and personal information. We will always handle these situations in accordance with our professional, ethical and legal responsibilities.
Parents and guardians should be aware that, in some circumstances, a young person who is considered capable of making their own healthcare decisions may also have the right to confidentiality regarding their personal information.
If you have any questions about how we process information relating to children or young people, please contact us and we will be happy to discuss this with you.

Everyone working at or on behalf of Dr Sally's Clinic is expected to maintain the confidentiality of your personal information and only access it where necessary to carry out their role.