Privacy Policy
Last updated: Pending publication
Privacy Policy | Anam Ayurveda
Last updated: [DATE_OF_PUBLICATION]
1. Who We Are
Anam Ayurveda is operated by Dr Oscar O'Duchon, Ayurvedic Practitioner. We provide Ayurvedic consultations in person at our Belfast practice and online to clients across the UK and Ireland.
Data Controller: Anam Ayurveda 47 Lisnabreeny Road East, Belfast, BT6 9SS, Northern Ireland 079 0815 6437 oscaroduchon19@googlemail.com
2. What Data We Collect
Enquiry and contact data
When you complete the contact form on this site, we collect:
- Your name
- Your email address
- Your phone number (if provided)
- The content of your message
Booking data
When you book a consultation, booking details are handled by Cal.com (see Third-Party Processors below). We receive confirmation of the appointment date and time.
Health information
During consultations — whether online or in person — you may share health information including medical history, symptoms, and lifestyle details. This is special category personal data under UK GDPR.
Usage and analytics data
If you have consented to analytics cookies, anonymised usage data (pages visited, session duration, approximate location) is collected via Google Analytics 4 and Microsoft Clarity.
3. Why We Collect It and Our Lawful Basis
Purpose Data Lawful Basis Responding to your enquiry Name, email, phone, message Legitimate interests (to respond to a request you have made) Scheduling and managing consultations Booking confirmation Contract performance Providing Ayurvedic consultations Health information Article 9(2)(h) — provision of health or social care (explicit consent obtained before consultation) Improving this website Anonymised analytics Consent (cookie consent accepted for analytics category)4. Third-Party Processors
We use the following third-party services that process data on our behalf. Each is bound by a data processing agreement or equivalent:
Processor Purpose Data Processed Location Cal.com Consultation booking Name, email, appointment time USA (Standard Contractual Clauses apply) Resend Transactional email delivery (contact form responses) Name, email address USA (Standard Contractual Clauses apply) Vercel Website hosting and edge delivery IP address, request logs USA / global edge (Standard Contractual Clauses apply) Google Analytics 4 Website usage analytics (consent required) Anonymised usage data USA (Standard Contractual Clauses apply) Google Search Console Search performance monitoring Anonymised search query data USA (Standard Contractual Clauses apply) Microsoft Clarity Session recordings and heatmaps (consent required) Anonymised session data USA (Standard Contractual Clauses apply)We do not sell your personal data to any third party.
5. Data Retention
- Enquiry data: retained for 24 months from last contact, unless you become an ongoing client, in which case your records are retained in line with professional health record-keeping standards.
- Consultation notes: retained in line with professional record-keeping obligations applicable to health practitioners in Northern Ireland and the UK.
- Analytics data: retained in accordance with the default retention settings of Google Analytics 4 (14 months) and Microsoft Clarity (30 days for recordings).
- Booking data: retained for 12 months following the appointment, then deleted.
6. Cookies
We use cookies to make this site work and, with your consent, to understand how visitors use it. You can manage your cookie preferences at any time using the cookie settings link in the footer.
For full details of the cookies we use, see our Cookie Policy (link in footer).
7. Special Category Data
Health information you share during consultation is special category personal data under UK GDPR Article 9. We process this data under Article 9(2)(h) — processing necessary for the provision of health or social care. Before your first consultation, we will ask for your explicit consent to process this data for the purposes of your care.
We do not share your health information with any third party without your consent, except where required by law.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — ask us to delete your data (subject to legal obligations)
- Right to restrict processing — ask us to limit how we use your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — withdraw consent for analytics at any time via cookie settings
To exercise any of these rights, contact: oscaroduchon19@googlemail.com
Right to complain: If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF ico.org.uk | 0303 123 1113
9. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Contact form submissions are processed server-side and are not stored in a public database.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of this site after an update constitutes acceptance of the revised policy.
11. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact:
Dr Oscar O'Duchon Anam Ayurveda 47 Lisnabreeny Road East, Belfast, BT6 9SS, Northern Ireland 079 0815 6437 oscaroduchon19@googlemail.com
The information on this site is not a substitute for medical advice. Always consult a qualified healthcare professional before making changes to treatment.