Privacy policy
How we collect, use and protect your personal information.
This privacy policy explains how Time Wellness Centre ("we", "us"), trading as Time Wellness Centre, collects and uses your personal information when you visit our website, contact us or receive treatment from us. We are the data controller for this information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our ICO registration number is [ICO registration number — not yet provided].
Contact us
If you have any questions about this policy or your information, contact us at our clinic, by email at via our contact form or by phone on 01942 818 910. Our data protection contact is the practice manager.
Information we collect
- Contact and identity details — name, date of birth, address, email address, phone number and emergency contact.
- Health information — your medical history, symptoms, assessment findings, treatment notes, test results and correspondence about your care. This is "special category" data and receives extra protection.
- Appointment information — the services you book, appointment dates, attendance and communications with you.
- Website enquiries and booking requests — the details you enter into our forms.
- Technical information — limited server logs (IP address, browser type) used to keep our website secure. If you consent to analytics cookies, anonymised usage statistics.
How and why we use your information
- To provide your care and treatment — lawful basis: performance of a contract with you (Article 6(1)(b)) and, for health information, the provision of health care by a health professional (Article 9(2)(h)).
- To manage appointments and send confirmations and reminders — performance of a contract (Article 6(1)(b)).
- To keep clinical records for the required period — legal obligation (Article 6(1)(c)) and professional requirements of our regulators.
- To respond to enquiries — our legitimate interests in answering your questions (Article 6(1)(f)).
- To send news and offers — only with your consent (Article 6(1)(a)), which you can withdraw at any time.
- To keep our systems secure and prevent fraud — legitimate interests (Article 6(1)(f)).
Who we share your information with
We never sell your information. We only share it where necessary with:
- Your GP or other health professionals involved in your care, with your agreement or where required for your safety.
- Laboratories that analyse samples taken in our Bloodwork Clinic.
- Your insurer, if your treatment is funded through private medical insurance and you ask us to.
- Trusted service providers who host our website and systems or send our emails, under contracts that require them to protect your data.
- Regulators, courts or the police where we are legally required to.
Our systems are hosted in the United Kingdom. If any provider processes data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR.
How we protect your information
Health and contact details are encrypted in our database and patient files are encrypted on our servers. Staff access is protected by strong passwords and two-factor authentication, is limited to what each role needs, and every access to patient records is logged. Our website uses HTTPS throughout.
How long we keep your information
We keep adult clinical records for 8 years after your last appointment, and records for children until their 25th birthday (or 26th if they were 17 when treatment ended), in line with professional guidance. Website enquiries that do not lead to treatment are deleted within 12 months. After the retention period, records are securely deleted or anonymised.
Your rights
You have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate information;
- ask us to delete your information (we may need to keep clinical records for the period required by law);
- ask us to restrict or object to certain processing;
- receive your information in a portable format;
- withdraw consent at any time where we rely on consent.
To make a request, contact us using the details above. We will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Cookies
Please see our cookie policy.
Last updated: 4 October 2026