Privacy Policy

I take the privacy rights of my patients very seriously. This privacy policy sets out how I deal with your ‘personal information’, that is, information that could identify, or is related to the identity of, an individual.

What personal information do I collect?

In order to treat you, I will ask you to provide certain information. This includes:

• Name
  
• Gender
  
• Date of birth
  
• Home address
  
• Email address
  
• Telephone number
• Medical history

To this, over time, I will add details of the conditions for which you have consulted me and the remedies and other therapies that I have prescribed or recommended.

How do I collect this personal information?

All the information collected is obtained directly from you. The information is usually collected via a ‘Patient Registration Form’ which I ask you to complete prior to or at the initial consultation. In order for me to treat you effectively I do need to obtain this information from you; the gathering and processing of this information is covered under the legal base of ‘legitimate interests’ and this term is defined within data protection regulation and law. All changes to this policy or the way in which your data will be processed will be discussed with you.

Your consent is required in order to ensure my compliance with data protection legislation. By booking a consultation on my online diary, I will ask if you consent to these terms.

During our ongoing consultations, I will add to this initial information the details of the consultations. This information will be stored on my personal computer which is password protected and backed up in case of corruption.

How do I use this personal information?

I use your personal information to analyse the conditions for which you have consulted me and to prescribe remedies and other therapies. 

I will communicate with you by email, telephone, video call, messaging service, post and through the internet.

With whom do I share your personal information?

I will not disclose any personal information that I hold on you to any unrelated third party, except where required by law.

How long do I keep your personal information?

I need to keep your information for as long as you continue to consult me. Since patients often return for more consultations after a period of absence, I will keep your information for seven years after your last consultation. In the case of children, 7 years after their 18th Birthday, as is required by our Licence to practice. At that point, your file will be securely destroyed and any digital information will be erased from my computer systems.

How your information can be updated or corrected

To ensure that I have accurate and up-to-date information, you need to inform me of any changes you believe I should make to the personal information I hold. You can do this by contacting me by any of the methods previously described.

Under data protection legislation, you have the right to inspect the personal information I hold about you.You can make a request to do so by contacting me and I will endeavour to respond within 14 working days. 

How do I store your personal information? 

My patient files, including your email address are stored online, currently Gigaclear Internet and Google mail. I take steps to protect your personal information against loss or theft, as well as unauthorised access, disclosure, copying, use, or modification. 

Online Diary

I currently use the online booking service acuityscheduling.com. This means your name and contact details are stored on their secure hosting. These details will not be shared with anyone else. Your information on the booking platform ensures we can book consultations in your own time zone and I can send reminders by email, take payments if required and you can easily change your appointments if needed.

Changes to this policy

This policy may change from time to time. If I make any material changes, I will make you aware of them. 

UK GDPR & Data Protection Rights

Heal with Ali is committed to protecting your personal information and processing it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We only collect and process personal data where we have a lawful basis to do so, including:

• Your consent.
• The performance of a contract with you (such as providing consultations or wellness services).
• Compliance with legal obligations.
• Our legitimate interests, provided these do not override your rights and freedoms.

Depending on your circumstances, you have the right to:

• Request access to the personal information we hold about you.
• Request that inaccurate or incomplete information be corrected.
• Request the deletion of your personal data where applicable.
• Request that we restrict or object to certain types of processing.
• Request a copy of your personal data in a portable format.
• Withdraw your consent at any time where processing is based on consent.
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your personal data has not been handled in accordance with applicable data protection laws.

You can exercise any of these rights by contacting us using the contact details provided in this Privacy Policy.

Where we work with trusted third-party providers (such as appointment booking systems, payment processors, email marketing platforms, website hosting providers, or video consultation software), we ensure they process your personal data in accordance with applicable data protection laws and only for the purposes of providing our services.

Contact

If you have any queries about this policy, need it in an alternative format, or have any complaints about my privacy practices, please contact me.

Last Reviewed date: 15th July 2026
(Reviewed every 2 years)