Last updated: August 2026

This privacy policy explains how Derek Climpson (“we”, “us”, “our”) collects, uses and protects personal information when you contact us or use our services. We are committed to protecting your privacy and handling your data in accordance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

1.    WHO WE ARE AND HOW TO CONTACT US
Derek Climpson provides acupuncture and Alexander Technique services at clinics in Chelmsford, Brentwood and Leigh‑on‑Sea. For the purposes of data protection law, we are the data controller for personal information that we collect and use.

Our contact details are:
Business name: Derek Climpson  
Address: 1 Tindal Square, Chelmsford, Essex, CM1 1EH

Telephone: 07702 631259  
Email: derekclimpson@yahoo.co.uk
If you have any questions about this privacy policy or how we use your personal data, you can contact us using the details above.

2.    WHAT PERSONAL DATA WE COLLECT
We may collect and process the following types of personal data when you contact us or use our services:
•    Contact details such as your name, email address, telephone number and any information you include when you get in touch about appointments or services.
•    Appointment and enquiry information such as the service you are interested in, preferred clinic location and dates, and any brief information you choose to provide about your health or goals.
•    Administrative and communication records, including notes of appointments, messages and any correspondence between us.
•    Marketing and communication preferences, including whether you wish to receive updates from us.
We do not ask you to submit detailed medical information or other special category data in initial enquiries and request that you keep enquiry information general. More detailed information about your health is usually collected in person as part of your consultation and is handled under strict professional confidentiality.

3.    HOW WE COLLECT YOUR DATA
We collect personal data in the following ways:
•    Directly from you when you contact us by phone, email, text message or other communication methods to request information or book an appointment.
•    During consultations and treatment sessions, when you provide information about your health history, symptoms and goals.
•    In the course of our ongoing communication and relationship with you as a client.

4.    PURPOSES AND LAWFUL BASES FOR USING YOUR DATA
We only use your personal data when we have a lawful basis to do so. We may use your data for the following purposes:
•    To respond to your enquiries, provide information about acupuncture and Alexander Technique, and arrange appointments at our clinics. Lawful basis: performance of a contract or steps taken at your request before entering into a contract.
•    To provide treatment and manage our relationship with you as a client, including keeping appropriate records of the services we provide. Lawful basis: performance of a contract and legitimate interests.
•    To send you messages about your appointments, such as confirmations, reminders or changes to bookings. Lawful basis: performance of a contract and legitimate interests.
•    To comply with legal and professional obligations, such as taxation, accounting requirements and professional conduct rules for acupuncture and Alexander Technique practitioners. Lawful basis: legal obligations and legitimate interests.
•    To improve our services, for example by reviewing feedback and understanding how clients use our clinics and offerings. Lawful basis: legitimate interests.
•    To send you occasional updates or information about our services where you have requested this or where we are permitted to do so under UK marketing rules. Lawful basis: consent or legitimate interests.
Where we rely on legitimate interests, we balance our interests with your rights and expectations and will not use your data where our interests are overridden by your privacy rights.

5.    WHO WE SHARE YOUR DATA WITH
We treat your personal data with care and only share it where necessary:
•    With trusted service providers who help us run our business, such as accountants, administrative support and providers of secure record‑keeping or communication tools.
•    With professional advisers such as legal advisers or insurance providers where this is necessary for our business and compliance with legal obligations.
•    With regulatory or legal authorities if we are required to do so by law or if it is necessary to protect your vital interests.
Any service providers who handle personal data on our behalf are required to keep it secure and to use it only according to our instructions. We do not sell your personal data to third parties.

6.    INTERNATIONAL TRANSFERS
Some of our service providers may store or process data outside the United Kingdom, for example if secure record‑keeping or communication systems are based overseas. When this happens, we ensure that appropriate safeguards are in place to protect your personal data to United Kingdom standards.

7.    HOW LONG WE KEEP YOUR DATA
We only keep your personal data for as long as it is reasonably necessary for the purposes set out in this policy or to meet legal and professional requirements. As a guide:
•    General enquiries from people who do not become clients may be kept for up to [X] months.
•    Client records related to treatment and appointments may be kept for up to [X] years after your last appointment, in line with professional and legal guidelines for healthcare‑related records.
•    Marketing contact details are kept until you withdraw your consent or object, or until we decide to stop sending updates.
When data is no longer needed, we will securely delete or anonymise it.

8.    HOW WE PROTECT YOUR DATA
We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss or misuse. These measures may include:
•    Securing devices and accounts with passwords and access controls.
•    Using reputable systems with appropriate security standards to store records and communications.
•    Limiting access to personal data to those who need it for their work.
•    Keeping paper records, if any, safely stored and not accessible to unauthorised persons.
No system can be completely secure, but we work to ensure that your data is handled carefully and responsibly.

9.    YOUR RIGHTS
Under United Kingdom data protection law, you have certain rights in relation to your personal data. These include:
•    The right to access the personal data we hold about you.
•    The right to ask us to correct inaccurate or incomplete data.
•    The right to ask us to delete your data in certain circumstances.
•    The right to restrict or object to certain types of processing.
•    The right to data portability in some cases.
•    The right to withdraw consent where we rely on consent.
To exercise any of these rights, please contact us using the details in section 1. You also have the right to raise concerns with the relevant supervisory authority if you are unhappy with how we use your data.

10.    MARKETING COMMUNICATIONS
We may occasionally contact you with information about our services, clinics or updates that we think may be of interest. We will only do this where:
•    You have asked to receive such information; or
•    You are a current or recent client and we rely on our legitimate interests and applicable marketing rules.
You can tell us at any time if you no longer wish to receive marketing communications, and we will update our records accordingly. Stopping marketing communications will not affect appointment confirmations or other service‑related messages.

11.    CHANGES TO THIS POLICY
We may update this privacy policy from time to time to reflect changes in the law or how we operate. The latest version will replace any previous versions and will apply from the date it is issued.