Privacy Policy

Last updated: 13.09.2026

1. Who we are

Vale of Health ("we", "us", "our") provides acupuncture, naturopathic nutrition, and related wellness services, both in person in London and remotely via video call, along with digital guides and resources sold through our website and mailing list.

This policy explains what personal data we collect, why, how we use it, and your rights over it, in line with UK GDPR and the Data Protection Act 2018.

Data controller: Cassie Bali, Vale of Health
Contact: cassie@valehealth.co.uk

2. What data we collect

Depending on how you interact with us, we may collect:

  • Contact details: name, email address, phone number, postal address

  • Booking and consultation information: appointment history, session notes, treatment plans

  • Health information: medical history, symptoms, medications, and other clinical details you share with us for the purpose of acupuncture or nutrition consultations

  • Payment information: processed by our payment providers (see below), we do not store full card details ourselves

  • Digital product purchase data: what you've bought, purchase date, amount paid

  • Email engagement data: whether you've opened or clicked emails, which helps us understand what content is useful

  • Social media interaction data: if you comment a keyword on Instagram or TikTok to receive a resource, we or our automation tools may collect your username and message content to deliver that resource

  • Website usage data: pages visited, general location (country level), device and browser type

3. Health information: a special note

Information you share with us about your health, whether during a consultation, in an intake form, or over email, is treated as "special category data" under UK GDPR. We only collect and use this information with your explicit consent, given when you book a consultation or complete a health questionnaire, and only for the purpose of providing you with safe, appropriate care. It is never used for marketing and is never shared with third parties beyond what's needed to deliver your treatment (for example, referring you to another practitioner with your permission).

4. How we use your data

We use your data to:

  • Provide and manage acupuncture, nutrition, and consultation services

  • Process bookings, payments, and digital product purchases

  • Send you information you've asked for, including newsletters, guides, and updates on things like The Histamine Experiment, if you've opted in

  • Improve our services and content based on general, aggregated engagement patterns

  • Meet our legal and regulatory obligations, including record keeping requirements for clinical practice

5. The tools we use, and what they do with your data

We work with the following third-party services to run our practice and deliver our content. Each of them processes data on our behalf, under their own security and privacy standards:

  • Cliniko: practice management software, used to store booking and clinical records

  • MailerLite: our email marketing and digital product platform, used to send newsletters, manage mailing lists, and deliver purchased guides

  • Stripe: payment processing for consultations and digital products, we do not see or store your full card details

  • ManyChat: automation used on Instagram and TikTok to deliver free resources when you comment a specific keyword

  • Squarespace: our website host and booking platform

  • Meta (Instagram, Facebook) and TikTok: used for social media interaction, subject to their own privacy policies when you engage with us there

Some of these providers may process data outside the UK. Where this happens, we rely on their own compliance with UK-recognised data transfer safeguards, such as Standard Contractual Clauses.

6. Digital products and mailing list sign-up

When you purchase a digital guide (such as the Histamine Guide) through our MailerLite checkout, we collect your email address and payment confirmation in order to deliver the product and process your order via Stripe. If you tick the opt-in box at checkout, you'll also be added to our mailing list to receive related updates, you can unsubscribe at any time using the link in any email.

If you comment a keyword on Instagram or TikTok to receive a free resource, we collect your username and the information needed to send that resource, and may ask for your email if the resource is delivered that way.

7. Cookies

Our website uses cookies to remember your preferences and understand general site usage. You can control or disable cookies through your browser settings. Disabling cookies may affect how parts of the site function.

8. How long we keep your data

  • Clinical and consultation records: kept for a minimum of 8 years from your last treatment, in line with professional body guidance for healthcare records, or longer where legally required

  • Marketing and mailing list data: kept until you unsubscribe or request deletion

  • Purchase records: kept as required for accounting and tax purposes, typically 6 years

9. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate data

  • Request deletion of your data, where we're not required to keep it for legal or clinical reasons

  • Restrict or object to certain processing

  • Withdraw consent at any time, including unsubscribing from marketing emails

  • Request a copy of your data in a portable format

  • Complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled: ico.org.uk

To exercise any of these rights, contact cassie@valehealth.co.uk.

10. Children

Our services and content are aimed at adults. We do not knowingly collect personal data from children under 16.

11. Security

We take reasonable technical and organisational measures to protect your personal data, including relying on the security standards of our third-party providers (Cliniko, MailerLite, Stripe, Squarespace), all of whom maintain their own industry-standard security certifications.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our services or the law. The date at the top shows when it was last updated.

13. Contact us

Questions about this policy or how your data is handled: cassie@valehealth.co.uk