Privacy Policy & Terms of Use

zestacupuncture.co.uk · Elżbieta Pękalska, trading as Zest Acupuncture & Holistic Medicine

Effective date: 9 September 2026 · Last updated: 9 September 2026

By using this website, booking an appointment, or attending a session at Zest Acupuncture & Holistic Medicine, you acknowledge that you have read and agree to this Privacy Policy and Terms of Use.

Privacy Policy

1. Who We Are

This website and clinic are operated by Elżbieta Pękalska, trading as Zest Acupuncture & Holistic Medicine, a sole trader based in Whaley Bridge, High Peak, United Kingdom. As your practitioner, I am the data controller for both the personal information collected through this website and the clinical information collected as part of your care.

ICO registration reference: ZC225184

Email: ela@zestacupuncture.co.uk
Phone: 0777 580 6677
Website: zestacupuncture.co.uk

2. What Data We Collect

2a. Enquiries and contact form submissions. When you get in touch through the contact form, we collect your name, email address, and any details you choose to include in your message.

2b. Booking and appointment information. When you book a session, we collect your name, email address, phone number, and appointment details, via Neetocal, our online booking system. Where payment is taken online, billing information is processed by Stripe, our payment processor; we do not store your full card number.

2c. Clinical and health information. As part of providing acupuncture, bodywork and Chinese medicine treatment, I collect health information about you during consultation, including your medical history, symptoms, and relevant lifestyle information. This is special category data under UK GDPR and is collected only with your explicit consent, given at your first appointment, and used solely to provide safe and appropriate treatment. Clinical notes are kept securely and separately from general website/marketing data, in line with the record-keeping standards of the Association of Traditional Chinese Medicine and Acupuncture (ATCM).

2d. Mailing list subscribers. If you subscribe to updates, we collect your first name and email address only.

2e. Customers purchasing LESS. If you purchase the book LESS — The Body Already Knows or related companion materials through this site, we collect your email address and billing information required to process payment, via our third-party store and payment processor. We do not store your full card number.

2f. Information collected automatically. Our website hosting provider may collect standard server logs including your IP address, browser type, operating system, and the pages you visit. This data is used for security and abuse prevention only.

3. Legal Bases for Processing

Under UK GDPR, we process your personal data under the following legal bases:

• Explicit consent — for clinical/health information collected at consultation, and for mailing list sign-up
• Contract performance — to book and provide your appointment, and to fulfil product purchases
• Legal obligation — clinical records are retained in line with professional body requirements, and financial records are retained under HMRC requirements
• Legitimate interests — to operate and improve our website and services

4. How We Use Your Data

• To respond to enquiries and confirm appointments
• To provide safe, appropriate treatment based on your health history and needs
• To send appointment reminders and, where relevant, follow-up care notes
• To process and fulfil book or product purchases
• To send occasional updates about the clinic, availability, or the book, where you have opted in
• To comply with legal, tax, and professional record-keeping obligations
• To detect and prevent fraud and abuse

5. How We Store and Share Your Data

Your data is stored with the following trusted third-party providers:

• Neetocal — appointment scheduling and reminders
• Stripe — payment processor, handles card transactions; does not share full card details with us
• MailerLite — mailing list subscriber data, GDPR-compliant
• Hostinger — website hosting; may retain standard server logs for security purposes

Clinical notes are stored securely, separately from marketing and booking data, and are accessible only to me as your practitioner.

We will never sell, rent, or share your personal or clinical data with third parties for marketing purposes. We may disclose data if required by law, court order, or to protect our legal rights, or in a genuine safeguarding or medical emergency.

6. Data Retention

• Clinical records — retained for 8 years from your last treatment (the general UK standard for health records), or until your 25th birthday if you were treated as a child [please confirm this figure directly against ATCM’s current Code of Professional Conduct or your professional indemnity insurer’s requirements, as it could not be independently verified here]
• Booking and contact data — retained while you remain an active client, or as required to fulfil your booking
• Purchase records and financial data — retained for six years as required by HMRC
• Mailing list subscriber data — retained until you unsubscribe or request deletion
• Server logs — typically retained for 90 days by our hosting provider

7. Cookies

Our website may use basic functional cookies to ensure the site operates correctly. We do not use advertising or tracking cookies. Third-party services we use (including our booking and payment providers) may set their own cookies under their respective privacy policies. You can configure your browser to refuse cookies, though this may affect certain site functions.

8. Children’s Privacy

Treatment for minors is only provided with parental or guardian consent and, where appropriate, parental presence. We do not knowingly collect personal information from children under 13 through this website without such consent. If you believe a child has submitted personal information to us directly, please contact us and we will delete it promptly.

9. Security

We take reasonable technical and organisational measures to protect your personal and clinical data, and work with reputable, industry-standard service providers who maintain strong security practices. No method of transmission over the internet or electronic storage is 100% secure, and while we do our best to protect your information, we cannot guarantee its absolute security.

10. Your Rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, restrict or object to processing, receive your data in a portable format, and withdraw consent at any time (including consent to clinical data processing, which may affect our ability to continue treating you). You may also unsubscribe from marketing emails at any time using the link provided.

To exercise any of these rights, contact ela@zestacupuncture.co.uk. We will respond within one month. If you believe your data has been handled improperly, you may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

11. Third-Party Links

Our website may contain links to third-party websites, including our booking and payment providers. These operate under their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices of third-party sites.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Terms of Use

1. Acceptance of Terms

By accessing zestacupuncture.co.uk, booking an appointment, or purchasing any product through this site, you agree to these terms of use and our privacy policy. If you do not agree, please do not use this website or our services.

2. Appointments, Cancellations and Payment

Appointments can be booked via Neetocal or by contacting us directly. [Cancellation policy — e.g. please give at least 24/48 hours’ notice if you need to cancel or reschedule; late cancellations or missed appointments may be charged in full.] Payment is due before your session, or within one day afterwards, as set out on our Prices & Booking page.

3. Content and Intellectual Property

All content on this website, including text, images, and design, is the intellectual property of Elżbieta Pękalska. You may read and share links to the content freely. You may not reproduce, copy, distribute, or commercialise any part of the content without prior written permission.

4. Digital Products — LESS

The book LESS — The Body Already Knows and any companion materials sold through this site are digital products, delivered electronically upon purchase. By purchasing, you receive a personal, non-transferable licence to use the content for your own personal purposes; you may not redistribute, resell, or share the files with others. Because digital products are delivered immediately, we do not offer refunds once the file has been downloaded, except where required by UK consumer law.

5. Clinical and Health Disclaimer

Acupuncture, bodywork and Chinese medicine treatment provided at Zest Acupuncture & Holistic Medicine is delivered by a qualified, insured practitioner registered with the ATCM. Treatment is provided following an individual consultation and with your informed consent.

Any general health, wellbeing, or educational content on this website (including blog content, guides, or the book LESS and its companion materials) is provided for educational and informational purposes only, and does not constitute medical advice, diagnosis, or a substitute for one-to-one clinical assessment. Always seek the advice of a qualified health professional with any questions regarding a medical condition, and continue to follow the guidance of your GP or specialist alongside any complementary care received here.

6. Limitation of Liability

To the fullest extent permitted by UK law, Elżbieta Pękalska and Zest Acupuncture & Holistic Medicine accept no liability for any indirect or consequential loss or damage arising from your use of this website or its general educational content. This does not affect our responsibilities to you as a client receiving clinical treatment, which are governed separately by the professional standards of the ATCM and our clinical consent process.

7. Governing Law

These terms are governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.

8. Severability

If any part of these terms or this privacy policy is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.

For any questions about this policy or these terms, please contact ela@zestacupuncture.co.uk.