Clinic Privacy Notice

How the CHE Homeopathy Clinic uses your information

Version

3.0

Effective Date

September 2026

Review Date

September 2027

Policy Owner

Data Protection Lead

In short: we use your health information only with your explicit consent, to give you consultations with a supervised trainee homeopath. Consultations are recorded for supervision and the recordings are deleted after 12 months. Your case is used for teaching only if you tick a separate opt-in.

Questions about your information: [email protected] · Bookings and other questions: [email protected] · 020 3405 4580

1. Who we are

1.1 The CHE Homeopathy Clinic is run by CHE Health & Wellbeing Limited (“CHE“, “we” and “us“), company number 10722903, registered office 4th Floor, 100 Fenchurch Street, London EC3M 5JD. We are the controller of your information and are registered with the Information Commissioner’s Office under registration number ZB035578.

1.2 Our Data Protection Lead, Marcus Fernandez, oversees how we handle your information. Contact them at [email protected].

1.3 This notice applies to clinic patients. Our Privacy and Cookie Policy explains how we use information about everyone else, and it also applies to you where this notice does not cover something, such as our website.

2. What information we collect

  • your name, contact details, address and date of birth;
  • information about your health, including your symptoms, medical history, medication, lifestyle and emotional wellbeing;
  • case notes and the remedies prescribed;
  • video and audio recordings of your consultations;
  • your consent choices, including whether you agree to observation by other students and to teaching use; and
  • booking and payment details (card payments are handled by Stripe or PayPal, and we never see your full card number).

2.1 The clinic sees adults aged 18 and over only.

3. How and why we use it

Purpose
Lawful basis
Providing your consultations, including booking, case notes, prescriptions and follow-up
Contract; for health information, your explicit consent (UK GDPR Article 9(2)(a)), given on the consent form when you book
Supervision: a qualified supervising homeopath observes your consultation live and reviews the recording, so that the trainee practises safely
Contract; explicit consent
Observation by other students, so that they can learn
Explicit consent, which you can refuse or withdraw
Using your anonymised case, or an identifiable clip, in teaching or our professional case library
Explicit consent, only if you tick the separate teaching opt-in; identifiable clips only with your specific agreement
Taking payment
Contract
Keeping records to deal with complaints or legal claims
Legitimate interests; for health information, establishing or defending legal claims (Article 9(2)(f))
Protecting you or someone else from serious harm in an emergency when we cannot get your consent
Vital interests (Article 9(2)(c))

3.1 Your consultation is given by a final-year trainee homeopath under the supervision of a qualified homeopath. Homeopathy is not a substitute for conventional medical care. Please keep seeing your GP and do not stop or change any medical treatment without talking to them.

3.2 We do not use your information for marketing unless you separately agree, and we never make automated decisions about you.

4. Who can see your information

  • your trainee practitioner, the supervising homeopath and, if you agree, observing students, all of whom have signed confidentiality agreements;
  • a small number of CHE staff who run the clinic; and
  • our service providers: Zoom (video consultations and recordings), Google Workspace (secure storage and email), Calendly (booking) and Stripe or PayPal (payments). They act only on our instructions.

4.1 We do not share your information with anyone else, including your GP, unless you ask us to, the law requires it, or we need to protect someone from serious harm.

4.2 Some of our providers are based in the USA. Transfers are protected by the UK Extension to the EU-US Data Privacy Framework or by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

5. How long we keep it

Information
How long we keep it
Case notes and consent forms
7 years after your last consultation
Consultation recordings
Deleted 12 months after the consultation
Material used for teaching (with your opt-in)
Identifiable material is removed as soon as possible if you withdraw consent. Fully anonymised cases may be kept, as they no longer identify you
Payment records
6 years from the end of the financial year they relate to

6. How we keep it safe

  • Records and recordings are kept only in restricted, access-controlled storage that cannot be shared outside CHE, and viewers cannot download clinic recordings.
  • Every consultation uses a Zoom passcode or waiting room.
  • Everyone involved in your care signs a confidentiality agreement and must join from a private space using headphones.
  • Access is protected by multi-factor authentication, reviewed regularly and removed on the day someone leaves.
  • Cases are anonymised to a written standard before any teaching use.

7. Your choices and rights

7.1 You can say no to observation by other students or to teaching use, and change your mind at any time, without affecting your consultations. Recording is part of how we supervise trainees safely. If you do not want to be recorded, please tell us before you book and we will discuss whether we can still see you.

7.2 You also have the right to:

  • get a copy of your information;
  • have inaccurate information corrected;
  • ask us to delete your information (we may need to keep case notes for the period above);
  • restrict how we use it;
  • receive it in a portable format; and
  • withdraw your consent at any time. This does not affect anything we did before you withdrew it, but we may not be able to continue your consultations without consent to use your health information.

7.3 To use any of these rights, email [email protected]. We will respond within one month, which we may extend by up to two further months for complex requests.

8. Complaints

8.1 If you are unhappy with how we have used your information, please contact our Data Protection Lead first at [email protected]. We will acknowledge your complaint within 30 days and respond without undue delay. For complaints about your care, email [email protected] and we will handle it under our Complaints Policy.

8.2 You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

9. Changes to this notice

9.1 We review this notice every year. The version and effective date at the top show when it was last updated.