Privacy Policy
Tincture Herbal Medicine and Consultancy Ltd
trading as Tincture Herbal Consultation and Dispensary
Last updated: 05 July 2025
1. Introduction
At Tincture Herbal Medicine and Consultancy Ltd, trading as Tincture Herbal Medicine, we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Tincture Herbal Medicine and Consultancy Ltd is a registered UK company offering professional medical herbalist services. We trade as Tincture Herbal Medicine.
Data Controller: Alyssa Smith
Contact: hello@tinctureherbs.co.uk / +44(0)7427957615
3. What Data We Collect
We may collect and process the following personal data:
Name, address, date of birth
Contact details (phone number, email address)
Relevant health and medical history
Family health history
Lifestyle information (e.g. diet, sleep, stress levels)
Consultation notes, treatment plans, and prescriptions
Payment and invoicing data
Website usage data (if applicable)
4. How We Use Your Data
Your personal data may be used to:
Provide individual herbal consultations and prepare herbal prescriptions
Maintain accurate and lawful clinical records
Communicate appointment reminders or follow-ups
Process payments, invoices, and manage appointments
Comply with our legal and regulatory obligations
Improve the quality and safety of our services
5. Legal Basis for Processing
We process your data on the following legal bases:
Consent – where you have given clear and explicit permission
Contract – to provide agreed services
Legal obligation – to comply with clinical and regulatory requirements
Vital interests – to protect your health and safety
Legitimate interests – to ensure safe, effective, and continuous care
6. Anonymised Data for Research and Audit
We may use pseudonymised or fully anonymised data to:
Conduct internal clinical audits
Evaluate treatment effectiveness
Develop educational case studies
Contribute to herbal medicine research and development
Any data used in this way is stripped of personally identifiable information. Anonymised data cannot be traced back to individual patients and is never sold or used for marketing purposes.
7. Data Sharing and Disclosure
We do not share your data with third parties unless:
You have given explicit written consent
It is required by law (e.g. safeguarding concerns)
It is necessary to coordinate your care with another healthcare provider (with your consent)
8. Data Storage and Retention
All records are securely stored in accordance with UK data protection laws. We retain clinical records for:
Adults: 7 years from the date of last treatment
Children: Until the patient reaches 25 years old
After this period, records may be securely deleted or anonymised.
9. Your Rights
Under the UK GDPR, you have the right to:
Access the personal data we hold about you
Request correction or erasure of inaccurate or outdated information
Restrict or object to processing in certain circumstances
Withdraw consent at any time (where processing is based on consent)
Request data portability
Lodge a complaint with the Information Commissioner's Office (ICO)
10. Data Security
We take appropriate technical and organisational measures to ensure your personal data is kept secure, including encrypted digital storage, password protection, and secure access protocols.
11. Changes to This Policy
We may occasionally update this policy to reflect changes in the law or in how we operate. Any updates will be available on request or via our website.
12. Contact Us
If you have any questions or concerns about your data or this privacy policy, please contact:
Tincture Herbal Medicine and Consultancy Ltd
trading as Tincture Herbal Consultation and Dispensary
Email: hello@tinctureherbs.co.uk
Phone: +44(0)7427957615