Generated privacy notice - general business
Intimate Health By Kate Waters customer privacy notice
This privacy notice tells you what to expect us to do with your personal information.
Date effective: 18/6/26
Our contact details
Email: [email protected]
Address: 174 Crawford Road, Hatfield, AL10 0PA
1. Purpose of this Notice
This Privacy Notice explains how we collect, use, and store your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all clients, prospective clients, and visitors to my website or clinic.
2. Who we are
Intimate Health By Kate Waters is a multi disciplinary clinic providing. You can view each practitioner's governing bodies at the bottom of their 'About Me' page.
Intimate Health By Kate Waters is the data controller for the personal information. We collect and process in the course of providing the professional services.
3. Information We Collect
To provide safe and effective care, we] may collect the following types of information:
Personal details (name, address, contact details, date of birth, GP contact)
Health and medical history, symptoms, and relevant test results
Information about diet, lifestyle, medication, supplements, and goals
Consultation notes and correspondence
Payment details (if applicable)
4. Lawful Basis for Processing
We process your personal data under the following lawful bases:
Contract: to provide you with agreed naturopathic services.
Legitimate interests: to maintain records and manage my business safely and professionally.
Consent: for processing sensitive health information. You may withdraw your consent at any time.
Legal obligation: to comply with legal or insurance record-keeping requirements.
Special categories of data included race, ethnic origin, politics, religion, trade union membership, genetics, biometrics (where used for ID purposes), health and sexual orientation.
We may hold special category data for the following purposes:
• Provision of direct healthcare
We process your data under the following articles of General Data Protection Regulation:
Article 6(1)(b) – Contract: to provide professional services requested by you
Article 9(2)(h) – Provision of healthcare: processing necessary for health and treatment purposes
5. How We Use Your Information
Your information is used to:
Provide safe and effective care
Assess suitability of personalised health advice
Communicate with you about your care
Keep accurate clinical records
Process payments and manage bookings
Meet professional, insurance, and legal obligations
Marketing and newsletters (subject to your consent)
We undertake at all times to protect your personal data, including any health and contact details, in a manner which is consistent with our duty of professional confidence and the requirements of the General Data Protection Regulation (GDPR) concerning data protection. We will also take reasonable security measures to protect your personal data storage.
[We may use your personal data where there is an overriding public interest in using the information e.g. in order to safeguard an individual, or to prevent a serious crime.
Your data will never be sold or used for marketing without your explicit consent. Your data may be shared with other parties for the following reasons if you have consented to in the GDPR consent form:
6. How Your Information Is Stored
All personal information is stored securely in:
Password-protected devices
Encrypted clinical software
7. Online Consultations and Electronic Communication
Online consultations are conducted using reputable platforms with appropriate security measures in place. Although all reasonable steps are taken to protect your information, no internet-based communication system can be guaranteed to be completely secure.
8. How Long Records Are Kept
In line with professional standards and insurance requirements, clinical records are retained for:
7 years from the date of last consultation
For children: until age 25 (or 26 if aged 17 at end of treatment)
After this period, records are securely deleted or destroyed. In certain cases, such as where records maybe relevant to an insurance claim or legal proceeding, they may be retained for longer.
9. Data Regulations for Minors
• To obtain functional tests (such as blood or urine).
• For booking and administrative purposes.
• To courier and logistics providers who ship products to you.
Where the client is under the age of 18, consent from a parent or legal guardian is required before treatment can begin. The child remains the data subject under data protection law. Both parents may have the right to access the child’s records unless there is a legal restriction or court order in place that limits this access.
10. Sharing Your Information
We will not share your information with third parties unless:
You have given explicit consent (for example, to share with your GP or another healthcare provider);
Disclosure is required by law (for example, in cases of serious risk of harm);
It is necessary for accounting or administrative purposes (e.g., my professional indemnity insurer or accountant, who are GDPR-compliant).
11. Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you.
Request to move, copy or transfer your data to a third party.
Request correction of inaccurate information
Request deletion of your data (where legally permissible)
Restrict or object to certain forms of processing
Withdraw consent at any time
Lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk
Please note that clinical records cannot be deleted where retention is required by law, insurance, or professional standards.
12. Communication and Updates
We may occasionally update this Privacy Notice to reflect legal or procedural changes. The latest version will always be available on request or at www.katewaters.co.uk.
13. Reporting breaches
Any breach of this policy or of data protection laws will be reported as soon as practically possible. This means as soon as we become aware of a breach.
We have a legal obligation to report any data breaches to UK Supervisory authority which is the Information Commissioners Officer within 72 hours.
14. Data protection complaints
If you are unhappy with how we have handled your personal data or exercised your data
protection rights, please contact us at [email protected]
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at [email protected]. We will acknowledge your complaint within 30 days and investigate it in accordance with our data protection complaints procedure.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address: Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AFHelpline number: 0303 123 1113
Website:https://www.ico.org.uk/make-a-complaint
Copyright 2024 © Kate Waters Privacy and Cookie Policy Terms & Conditions