Privacy Policy

Privacy & GDPR Policy

Last updated: November 2025

At LymphoCare, I take your privacy seriously. This policy explains how I collect, use, and protect your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. About Me

I’m Kate Brewster, a qualified Manual Lymphatic Drainage (MLD) therapist operating as a sole trader under the business name LymphoCare.

I act as both the data controller and data processor for any personal information I collect and use.

2. Lawful Basis for Processing

I collect and use personal information based on the following lawful bases:

• Consent – when you agree for me to hold and use your details for treatment purposes.
• Contract – to provide therapy sessions and maintain  accurate client records.
• Legal obligation – to meet insurance, health, and tax record requirements.
• Legitimate interest – to manage appointments, communication, and client care.

3. Information I Collect

To provide safe and effective treatment, I may collect the following information:

• Name, address, phone number, and email
• Emergency contact details
• Relevant medical and health history
• Session notes and treatment records
• Payment information (if applicable)

4. How I Use Your Information

Your personal data is used to:

• Deliver safe, effective MLD treatments
• Maintain accurate health and treatment records
• Communicate with you about appointments and care
• Fulfil legal, insurance, and tax obligations

I will never sell or share your personal data for marketing purposes.

5. Data Storage and Security

I take data protection seriously:

• Paper records are stored securely in a locked cabinet.
• Electronic data is stored on a password-protected computer or secure cloud service.
• Only I have access to this information.
• Health records are kept for 7 years, as required by insurance and legal guidelines, and are then securely deleted or shredded.

6. Sharing of Data

Your personal data will only be shared:

• When legally required (for example, by an insurer or regulator), or
• With your explicit consent, such as when referring you to another healthcare professional.

7. Your Rights

You have the right to:

• Access a copy of your personal data
• Request correction or deletion of inaccurate data
• Withdraw consent at any time (except where data must be retained for legal reasons)
• Object to how your data is processed
• Lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

If you wish to exercise any of these rights, please contact me directly using the details below.

8. Data Breaches

If there is ever a data breach involving your personal information, I will:

• Notify the ICO within 72 hours (if required),
• Inform you if there is any risk to your rights or privacy.

9. Contact Information

Data Controller: Kate Brewster

Business Name: LymphoCare

Email: kate@lymphocare.co.uk

10. Policy Review

This policy is reviewed regularly to ensure continued compliance with data protection laws.

Last updated: November 2025