A to Z Health Privacy Policy

Last updated: 15 August 2026

This policy explains what personal information we collect, why we collect it, what we do with it, and the rights you have over it.

Who we are

A to Z Health is a colonic hydrotherapy and nutritional therapy clinic run by Claire Harris.

4 Park Court, Park Road, Petersfield, Hampshire GU32 3DL
Telephone: 07942754230
Email: claire@atozhealth.co.uk

A to Z Health is the data controller for the information described in this policy. That means we decide what information is collected and how it is used, and we are responsible for looking after it.

What information we collect

When you contact us through the website
Your name, your email address, and whatever you choose to write in the message box. If you tick the box to hear from us, we also record that you gave that permission and the date you gave it.

When you become a client
Your name, date of birth, and the health information you give us during your consultation and appointments. This includes information about your symptoms, medical history, medication, diet and lifestyle. These notes are handwritten and kept securely at the clinic.

When you book an appointment
Bookings are handled by Booksy. When you click a booking link on our site you leave our website and go to Booksy’s own platform, where their privacy policy applies as well as ours. Booksy holds your name and your telephone number or email address so your appointment can be arranged.

When you visit the website
Our website does not set any cookies of its own and we do not use website analytics, so we do not track how you move around the site or build any profile of you. Full detail is in our Cookie Policy.

When you pay
We do not take card details through this website and we do not store your card number or bank details at any point.

Why we use it, and our lawful basis

  • To reply to your enquiry. So we can answer your question or arrange an appointment. Our basis is legitimate interests, and taking steps at your request before entering into a contract.
  • To provide treatment and keep clinical notes. So your care is safe, appropriate and consistent. Our basis is contract, and for health information, the provision of health care under Article 9(2)(h) UK GDPR and Schedule 1 Part 1 paragraph 2 of the Data Protection Act 2018.
  • To manage appointments. To run the clinic. Our basis is contract.
  • To send you news or offers by email. Only if you asked us to. Our basis is consent.
  • To protect our contact form from spam and abuse. To stop automated submissions. Our basis is legitimate interests.
  • To meet our legal, insurance and professional obligations. Our basis is legal obligation.

Health information

Information about your health is treated as a special category of personal data under UK law and gets extra protection.

We collect it so we can treat you safely. We do not use it for marketing. We do not sell it, and we do not share it with advertisers or any commercial third party. It is kept confidential in line with the codes of practice of the professional bodies Claire is registered with.

We will only share your health information outside the clinic if you ask us to, if you give us permission, or if we are required to by law or to prevent serious harm.

Who we share information with

We use a small number of suppliers who handle information on our behalf. They act on our instructions and are not allowed to use your information for their own purposes.

  • Cloudways hosts our website and stores contact form submissions.
  • Brevo delivers the notification email when you submit a contact form, and any newsletter you have signed up for.
  • Google provides the reCAPTCHA anti-spam check on our contact page and the fonts used across the site.
  • Booksy handles online bookings. Booksy is a separate controller of the information you give them directly, so their privacy policy applies to that as well as this one.

Google is based in the United States. Where information reaches Google, it is transferred under the safeguards permitted by UK data protection law, including the UK extension to the EU-US Data Privacy Framework and standard contractual clauses. Our other suppliers store information in the UK or the European Economic Area.

We do not sell your personal information to anyone, and we never will.

Cookies

Our website sets no cookies of its own. There is no cookie banner because there is nothing on the site that requires your consent. The full explanation, including the third-party services that load on our pages, is in our Cookie Policy.

How long we keep it

  • Website enquiries that do not become clients: 12 months, then deleted.
  • Clinical records for adults: 8 years after your last appointment.
  • Clinical records for children: until their 25th birthday, or their 26th if they were 17 at the last appointment.
  • Newsletter sign-ups: until you unsubscribe, then we keep a record that you unsubscribed.
  • Accounting records: 6 years, as required by HMRC.

Your rights

You have the right to:

  • ask for a copy of the information we hold about you
  • have inaccurate information corrected
  • ask us to delete information, where we are not required to keep it
  • ask us to restrict how we use it, or object to us using it
  • withdraw your consent at any time, where we relied on consent
  • ask for your information in a portable format

To use any of these rights, email claire@atozhealth.co.uk or write to us at the address above. We will respond within one month. There is no charge.

If you signed up to hear from us and change your mind, use the unsubscribe link in any email, or just ask us.

Complaints

If you are unhappy with how we have handled your personal information, you can complain to us directly. You can do this by email at claire@atozhealth.co.uk, through the contact form, or by post to A to Z Health, 4 Park Court, Park Road, Petersfield, Hampshire GU32 3DL.

We will acknowledge your complaint within 30 days of receiving it, investigate without undue delay, keep you informed of progress, and tell you the outcome and any action taken once our investigation is complete.

You also have the right to complain to the Information Commissioner’s Office (ICO) at any time:

Website: www.ico.org.uk
Helpline: 0303 123 1113

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.