top of page

Privacy Notice

Hedgerow Herbalist (Lynn May)
Dorchester, Dorset
Email: lynn@hedgerowherbalist.co.uk
Phone: 07780 771169
Website: www.hedgerowherbalist.co.uk

Effective date: 24/6/26

​

1. Purpose of this Notice

This Privacy Notice explains how I collect, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

It applies to all clients, prospective clients, and visitors to my website or clinic.

 

2. Who I Am

I am Lynn May, trading as Hedgerow Herbalist, a herbalist, naturopath, iridologist and Qigong teacher.

I am the data controller responsible for the personal information you provide in the course of receiving my services.

​

3. Information I Collect

To provide safe and effective care, I may collect:

  • Personal details (name, address, contact details, date of birth, GP details)

  • Health and medical information (symptoms, history, diagnoses, test results)

  • Lifestyle information (diet, sleep, stress, exercise habits)

  • Consultation notes and treatment plans

  • Email or message correspondence

  • Payment and booking details

This includes sensitive health data, which is treated with a higher level of protection under GDPR. 

​

4. Lawful Basis for Processing

I process your personal data under the following legal bases:

  • Contract – to provide agreed health consultations and services

  • Legitimate interests – to run my practice safely and effectively

  • Consent – for processing sensitive health information

  • Legal obligation – for record-keeping required by insurance and law

Health data is processed under:

  • Article 6(1)(b) – contract

  • Article 9(2)(h) – provision of healthcare 

You may withdraw consent at any time.

​

5. How I Use Your Information

Your information is used to:

  • Provide safe, personalised herbal and naturopathic care

  • Assess your suitability for treatments

  • Maintain accurate clinical records

  • Communicate with you about appointments and care

  • Process bookings and payments

  • Meet professional, legal, and insurance requirements

I will never sell your data and will only use it for marketing if you have given clear consent.  

​

6. Sharing Your Information

Your data will only be shared where necessary and with your consent, including:

  • Your GP or other healthcare providers

  • Supplement suppliers or dispensaries (if products are sent directly to you)

  • Testing laboratories (where required)

  • Booking or admin systems used to manage appointments

I may also share information if legally required or to prevent serious harm.

 

7. How Your Information Is Stored

Your information is stored securely using:

  • Password-protected devices

  • Secure email and booking systems

  • Encrypted cloud storage (where applicable)

  • Locked storage for any paper records

I take appropriate technical and organisational measures to protect your data.  

 

8. Online Consultations & Communication

If you choose online consultations or communicate via email or messaging:

  • I use reputable platforms with security measures

  • However, no internet system is completely secure

  • Standard email is not fully encrypted

You use these communication methods at your own discretion.

​

9. How Long Records Are Kept

In line with professional guidelines:

  • Adult records: 7 years after last consultation

  • Children’s records: until age 25 (or 26 depending on age at treatment)

Records may be retained longer if required for legal or insurance reasons.  

​

10. Children’s Data

For clients under 18:

  • Parental or guardian consent is required

  • The child remains the data subject

  • Parents may request access unless legally restricted

 

11. Your Rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (where legally possible)

  • Restrict or object to processing

  • Withdraw consent at any time

  • Request transfer of your data

You can also complain to the Information Commissioner’s Office (ICO):
www.ico.org.uk 

 

12. Website, Cookies & Online Use

If you visit my website:

  • Cookies may be used for functionality, analytics, or bookings

  • You will be asked to consent to non-essential cookies

  • You can manage preferences via your browser or cookie banner

 

13. Updates to This Policy

This Privacy Notice may be updated from time to time.
The latest version will always be available on my website.

 

14. Data Breaches

Any data breach will be assessed and, where required, reported to the ICO within 72 hours.  

 

15. Complaints

If you have concerns about how your data is handled, please contact:

Lynn May – Hedgerow Herbalist
Email: lynn@hedgerowherbalist.co.uk

Phone: 07780 771169

​

I will respond within 30 days. If you are not satisfied, you may contact the ICO.

bottom of page