Your privacy and your data

Who I am

Liliana Health is the trading name of Liliana Trukawka, a colonic hydrotherapist practising in London. For the purposes of data protection law I am the data controller for the personal information described in this policy, which means I decide how and why it is used.

You can reach me by email at info@lilianahealth.com, or by post at Suite 8, 1 Hayne Street, Barbican, London EC1A 9HG.

The information I collect

This website is a simple set of information pages. It has no contact forms and no accounts, and it does not collect personal information from you as you browse. I collect personal information in the following situations.

• When you book an appointment. You provide your name, your contact details, and any health information you choose to share about your reasons for treatment. Your booking is taken and stored through my online booking system, Acuity Scheduling.
• When you pay. Payment is taken securely through Stripe inside the booking system. I do not see or store your full card details.
• When you contact me. If you email me, I receive your message and your email address, along with anything you choose to tell me.
• During your appointment. As part of treating you safely I keep a confidential clinical record of your consultation, your health history, and the care I provide.

Health information

Some of the information I hold, such as your health history and the details of your treatment, is special category data under data protection law. This is information that deserves extra protection, and I treat it in the strictest confidence. I only ask for health information that I genuinely need in order to treat you safely.

How I use your information

I use your personal information only for reasons connected to your care.

• To arrange, confirm and manage your appointments.
• To provide your treatment safely and to keep proper clinical records.
• To contact you about a booking, including any changes or reminders.
• To take payment for your treatment.
• To meet my professional, insurance and legal obligations.

My lawful bases for using it

Data protection law requires me to have a lawful basis for using your personal information. The bases I rely on are the following.

• Contract. I use your information to provide the treatment you have booked.
• Legal obligation. I keep certain records to meet professional and legal requirements.
• Legitimate interests. I use your contact details to manage your appointments and to run my practice in a way you would reasonably expect.
• For health information I rely on your explicit consent, and on the basis in law that allows health information to be used for the provision of care by a professional bound by a duty of confidentiality.

Who I share it with

I keep your information private. I share it only where it is necessary to run my practice, or where the law requires it.

• Acuity Scheduling, provided by Squarespace, which stores your booking on my behalf.
• Stripe, which processes your payment.
• Professional or regulatory bodies, or other authorities, only where I am legally required to share information.

Where your information is held

The providers I use act on my instructions and are not permitted to use your information for their own purposes. Some of them may store information outside the United Kingdom. Where they do, they are required to protect it to a standard recognised by UK law.

How long I keep it

I keep your booking and clinical records for as long as I need them to care for you and to meet my professional and legal obligations. Health records are kept for the period required by my professional body and my insurer, after which they are securely deleted. Information you send me by email is kept only for as long as it is needed.

Keeping your information safe

I take the security of your information seriously and take reasonable steps to protect it against loss, misuse and unauthorised access. My booking and payment providers use encryption and their own security measures, and I keep any records I hold securely.

Cookies

This website does not use analytics, tracking or advertising cookies, and it does not profile you as you browse. It sets one small cookie of its own, and only after you have answered the cookie notice, to remember whether you accepted or declined. When you open the booking page, the booking system sets its own cookies so that it can work properly.

My cookie policy explains all of this in full, and you can change your choice there at any time. You can also control cookies through your browser settings.

Your rights

Under data protection law you have a number of rights over your personal information. These include the following.

• The right to ask for a copy of the information I hold about you.
• The right to ask me to correct information that is wrong or incomplete.
• The right to ask me to delete your information, where there is no legal reason for me to keep it.
• The right to ask me to restrict or object to how I use your information.
• The right to ask me to transfer your information to another provider.
• The right to withdraw your consent at any time, where I am relying on your consent.

How to contact me or complain

To use any of your rights, or if you have a question about your privacy, please email me at info@lilianahealth.com. I will respond within one month.

I hope you will always feel able to raise a concern with me directly. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

I may update this policy from time to time. Any change will appear on this page, and the date at the top shows when it was last revised.