Privacy Policy

Last updated: 9th August 2026

At Golden Era Clinic, I respect your privacy and take the protection of your personal information seriously.

This Privacy Policy explains how I collect, use, store and protect your personal information when you visit my website, contact me, make an appointment or receive services from me.

Golden Era Clinic is a sole-trader business owned and operated by Marianne-Louise Cannock. I am the data controller responsible for the personal information I collect and use on behalf of Golden Era Clinic.

Information I Collect

Depending on how you interact with Golden Era Clinic, I may collect:

  • Your name

  • Email address

  • Telephone number

  • Date of birth or age-related information

  • Appointment and booking information

  • Information you provide when contacting me

  • Information provided as part of a consultation or consent form

  • Information relevant to assessing your suitability for treatment

  • Relevant health and medical information

  • Information relating to treatments you receive and your treatment history

  • Information relating to your skin, where relevant to the treatment being provided

  • Photographs where these are necessary for treatment records or where you have consented to photography

  • Payment and transaction information

  • Any other information you choose to provide to me

I only collect information that is relevant and necessary for providing my services, managing my business and meeting my legal, insurance and regulatory obligations.

How I Use Your Information

I may use your personal information to:

  • Respond to enquiries

  • Arrange and manage appointments

  • Send appointment confirmations and reminders

  • Provide acupuncture treatments safely and appropriately

  • Provide cosmetic acupuncture treatments

  • Provide cryotherapy treatments, including the removal of appropriate skin lesions using CryoPen by Cryosthetics

  • Provide Dermalux phototherapy treatments

  • Carry out consultations and assess your suitability for treatment

  • Obtain and maintain appropriate consent records

  • Maintain treatment and client records

  • Provide appropriate aftercare and follow-up support

  • Process payments

  • Maintain appropriate business and financial records

  • Deal with complaints or concerns

  • Meet legal, regulatory and insurance requirements

  • Protect my business and clients where necessary

I will not use your personal information for unrelated purposes.

Booking & Appointments - Acuity Scheduling

I use Acuity Scheduling to manage appointments and online bookings. Acuity is a Squarespace company and provides appointment scheduling, booking forms, automated reminders and payment integrations.

When you make an appointment through my booking system, Acuity may collect information such as your name, email address, telephone number, appointment details and information you provide through the booking form.

Acuity may also send appointment confirmations, reminders and other booking-related communications.

I use this information to manage your appointment and provide my services.

Payments - Stripe

Where payment is made through Acuity, payments are processed by Stripe.

I do not receive or store your full card number or card security information.

Stripe processes payment information in accordance with its own privacy and data protection policies.

I may retain information about a payment or transaction where this is necessary for accounting, tax, refunds, chargebacks, disputes or other legitimate business purposes.

Website - Squarespace

My website is hosted and operated using Squarespace.

When you visit my website, Squarespace may automatically collect certain technical information, such as your IP address, browser and device information and information about how you interact with the website.

Squarespace also uses cookies and similar technologies to provide website functionality and, where enabled, analytics and other services.

Cookies

My website uses cookies and similar technologies.

Some cookies are necessary for the website to function correctly. Other cookies may be used for analytics or other purposes where applicable.

Where required, I will ask for your consent before using non-essential cookies.

You can manage your cookie preferences through the cookie settings provided on my website. You can also control or disable cookies through your browser settings, although this may affect how some parts of the website function.

Consent Forms

I use digital consent forms to obtain the information and consent necessary to provide treatments safely and appropriately.

Completed consent forms may contain sensitive personal and health information. Completed forms are retained securely in my email account, which is accessible only by me.

I use the information provided on these forms to assess your suitability for treatment, obtain informed consent, provide appropriate treatment and aftercare, and maintain appropriate client records.

Email & Client Records

Completed consent forms, along with relevant correspondence and information relating to your appointments and treatments, may be stored in my Microsoft/Hotmail email account.

This account is only accessible by me.

I use this information to:

  • Maintain appropriate client and consent records

  • Maintain treatment history

  • Provide ongoing aftercare and support

  • Refer to previous treatments or relevant information where necessary

  • Respond to questions or concerns

  • Deal with complaints or disputes

  • Meet legal, insurance and business requirements

Microsoft provides information about how personal data is processed, stored and protected in its Privacy Statement.

Health & Medical Information

Some information provided during a consultation or consent process may relate to your health, medical history, medication, allergies, skin or other conditions relevant to the treatment you are considering.

Health information is considered special category data under UK data protection law and receives additional protection.

I only collect and use health information where it is relevant and necessary to assess your suitability for treatment, provide treatment safely, provide appropriate aftercare, maintain appropriate treatment records or otherwise provide my services, and where an appropriate lawful basis and special category condition apply.

I do not use your health information for marketing or unrelated purposes.

Treatment Records

I may maintain records relating to treatments you have received from me. These may include:

  • Treatment dates

  • Treatment type

  • Relevant consultation information

  • Treatment areas

  • Relevant health information

  • Treatment observations

  • Aftercare information

  • Follow-up information

  • Information necessary to provide continuity of care

These records help me provide safe and appropriate treatment and respond to any future questions or concerns about your treatment.

Photography & Treatment Records

Where appropriate, I may take photographs as part of your treatment or consultation. For example, photographs may be useful for documenting the condition or appearance of an area before or after cryotherapy or another treatment.

Where photographs are taken as part of your treatment record, they will be treated as personal information and stored securely.

I may also ask for your separate consent to take photographs for marketing or advertising purposes. Marketing photography is optional and is not required to receive treatment.

Where you specifically consent to marketing photography, photographs may be used by Golden Era Clinic for purposes such as:

  • My website

  • Social media

  • Online portfolios

  • Promotional materials

  • Advertising

  • Other promotional content relating to Golden Era Clinic

Where possible, I will avoid including identifying information. However, depending on the photograph, you may be recognisable.

You can withdraw your consent to marketing photography at any time by contacting me. If you withdraw your consent, I will stop using your photograph for future marketing and advertising purposes and will remove it from platforms and materials that I control where reasonably practicable.

Withdrawal of consent does not affect the lawfulness of any use that took place before you withdrew your consent.

Lawful Basis for Processing Your Information

Under UK data protection law, I must have a lawful basis for processing your personal information.

Depending on the circumstances, I may process your information because:

  • Contract: processing is necessary to arrange or provide the services you have requested.

  • Legitimate interests: processing is necessary for me to operate and manage my business, maintain appropriate records, communicate with clients and provide my services safely.

  • Legal obligation: processing is necessary for me to comply with a legal requirement.

  • Consent: where consent is the appropriate lawful basis for a particular use of your information.

Where I process health information or other special category data, an additional condition under Article 9 of the UK GDPR must also apply.

Who I Share Your Information With

I do not sell or rent your personal information.

I may use the following third-party services to operate Golden Era Clinic:

  • Squarespace: website hosting and website services

  • Acuity Scheduling: appointment and booking management

  • Stripe: payment processing

  • Microsoft: email services and storage of completed consent forms, treatment records and client correspondence

I may also disclose information to professional advisers, such as my accountant or insurer, where necessary, or to relevant healthcare professionals or authorities where this is necessary for your care, where you have requested it, or where I am legally required or permitted to do so.

How Long I Keep Your Information

I only keep personal information for as long as it is reasonably necessary for the purpose for which it was collected.

Client, consent and treatment records may be retained for a period of time after your treatment where this is necessary for:

  • Maintaining appropriate treatment and consent records

  • Providing ongoing care or aftercare

  • Dealing with complaints or disputes

  • Insurance purposes

  • Legal or regulatory requirements

  • Protecting my legitimate business interests

Different types of information may therefore be retained for different periods.

I regularly review the information I hold and will securely delete or dispose of information when it is no longer required.

Where there is an ongoing complaint, legal matter, insurance claim or other legitimate reason to retain information, it may be kept for longer than the usual retention period.

UK data protection law does not prescribe one universal retention period for personal information; I must be able to justify how long information is retained based on why it is needed.

Keeping Your Information Secure

I take reasonable steps to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

Client information stored in my email account is accessible only by me.

I also use established third-party services to provide the services described in this Privacy Policy.

However, no electronic storage system or method of transmitting information over the internet can be guaranteed to be completely secure.

Your Data Protection Rights

Under UK data protection law, you may have the right to:

  • Access the personal information I hold about you

  • Correct inaccurate or incomplete information

  • Request erasure of your information in certain circumstances

  • Request restriction of processing in certain circumstances

  • Object to certain types of processing

  • Request data portability in certain circumstances

  • Withdraw consent where I rely on consent as the lawful basis for processing

These rights are subject to certain legal exceptions and may not apply in every situation.

If you would like to exercise one of these rights, please contact me using the details below.

Third-Party Websites

My website may contain links to third-party websites, including booking services, payment providers, social media platforms, treatment or product manufacturers and other websites.

I am not responsible for the privacy practices, security or content of third-party websites.

I recommend reviewing the privacy policy of any third-party website before providing personal information to it.

Complaints

If you have any concerns about how I collect or use your personal information, please contact me first so that I have the opportunity to address your concern.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Contact

If you have any questions about this Privacy Policy or how I handle your personal information, please contact me:

Golden Era Clinic
Email: info@goldeneraclinic.co.uk
Website: www.goldeneraclinic.co.uk

Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, the services I use, how I process personal information, or changes in data protection requirements.

The latest version will always be published on this page together with the date it was last updated.