Effective from: 2 September 2026

This Privacy Policy explains how I collect, use, store and protect personal information when you visit my website, contact me or use my professional services.

1. Who is responsible for your information?

The data controller is:

Szilvia Anna Bihari, trading as Anna Bihari Homeopathy
Qualified homeopath and registered member of the Society of Homeopaths (RSHom)

Email: [email protected]
Correspondence address: The Practice Rooms, 57 Ship Street, Brighton, BN1 1AF

As the data controller, I am responsible for deciding why and how your personal information is processed.

2. Information I may collect

The information I collect depends on how you interact with me and may include:

Contact and identification information

your name;

date of birth;

address;

email address;

telephone number; and

emergency contact details where appropriate.

Appointment and payment information

appointment dates and booking history;

services or packages purchased;

payment status and transaction references; and

invoices and accounting records.

I do not normally receive or store your complete payment-card details. Payments are processed by the payment provider available through my booking or checkout system.

Health and consultation information

To provide individualised homeopathic services, I may collect information concerning:

your current and previous physical and emotional health;

symptoms and relevant personal experiences;

medical diagnoses, investigations and test results;

medication, supplements and other treatment;

family and relevant medical history;

lifestyle, diet and living environment;

consultation notes;

remedy prescriptions and responses;

correspondence between consultations; and

photographs, audio or video supplied for an agreed clinical purpose.

Health information is classified as special-category personal data and receives additional protection under data-protection law.

Information about children

When a consultation concerns a child, I may collect:

the child’s identity and health information;

information supplied by a parent or guardian;

the identity and contact details of the person booking;

details relevant to parental responsibility and consent; and

information provided directly by the child where appropriate.

Website and technical information

When you visit my website, certain information may be collected automatically, including:

IP address;

browser and device type;

pages visited;

approximate location;

referring website;

cookie identifiers; and

information about how the website is used.

More information is provided in the section on cookies below.

Mailing-list information

If you subscribe to my newsletter, I collect your name, email address, subscription preferences and information about how you interact with emails, such as whether an email was opened or a link selected, where the mailing platform provides this information.

Testimonials and feedback

If you provide a testimonial or review for publication, I may process the wording of the review, your name or initials and any separate permission you give for it to be published.

I will not publish identifiable health information as a testimonial without your specific permission.

3. Where I obtain information

I usually obtain personal information directly from you through:

website forms;

discovery calls;

booking and payment systems;

consultation forms;

consultations;

emails and messages;

newsletter sign-up forms; and

feedback or testimonial forms.

Where a consultation is booked for a child or another dependent person, information may be provided by their parent, guardian or carer.

With your knowledge or where otherwise lawful, I may also receive relevant information from a pharmacy, laboratory, healthcare practitioner or other professional involved in your care.

Please do not provide another adult’s health information unless you have their permission or another lawful reason to do so.

4. Why I use your information and my lawful bases

I only process personal information where I have a lawful reason.

Enquiries, bookings and consultations

I use your information to:

respond to enquiries;

assess whether my service is appropriate;

arrange and provide consultations;

keep professional consultation records;

prepare and manage prescriptions;

communicate about appointments and ongoing work;

administer packages; and

process payments.

For ordinary personal data, I generally rely on the lawful basis that processing is necessary to take steps at your request before entering into a contract or to perform our contract.

Because health information is special-category data, I generally rely on your explicit consent to process it for the purpose of providing homeopathic services.

You may withdraw this consent for future processing, but without permission to process relevant health information I may be unable to continue providing a safe and appropriate professional service. Withdrawing consent does not make earlier lawful processing unlawful and does not necessarily require me to delete records I must retain for another lawful reason.

Professional records and possible legal claims

I may retain relevant consultation and correspondence records where necessary for my legitimate interests in maintaining accurate professional records, responding to complaints and establishing, exercising or defending legal claims.

Where these records contain special-category information, I may rely on the legal-claims condition in data-protection law.

Accounting and legal requirements

I process payment, invoice and transaction information where necessary to comply with tax, accounting and other legal obligations.

Safety and safeguarding

In exceptional circumstances, I may process or disclose information where it is necessary to protect someone’s vital interests, respond to a serious safeguarding concern, prevent serious harm or comply with the law.

Service administration

I may send information necessary to administer a booking or an existing professional relationship, including confirmations, reminders, meeting links, invoices and important changes to a service. These are service messages and are not marketing.

Newsletters and marketing

I send newsletters and promotional emails where you have consented to receive them.

You can withdraw your marketing consent at any time by using the unsubscribe link in an email or contacting me. Withdrawing from marketing will not affect necessary messages concerning an existing booking or consultation.

Website security and improvement

I may use limited technical information where necessary for my legitimate interests in:

operating and securing the website;

preventing spam, fraud and misuse;

diagnosing technical problems; and

understanding general website performance.

Non-essential analytics and advertising cookies will only be used where you have given the required consent.

Testimonials

I rely on your consent when publishing a testimonial on my website or promotional material. You may withdraw that consent by contacting me, although I may not be able to remove material that has already been printed or independently republished.

5. Children’s information

Children’s personal and health information requires particular protection.

A parent or person with parental responsibility will normally provide consent for a child’s consultation and the associated processing of information. Depending on the child’s age and understanding, I may also explain relevant privacy information to the child and seek their agreement.

I only collect information that is reasonably necessary for the consultation and professional record.

Photographs, recordings and videos of children should only be sent when specifically requested for an agreed clinical purpose. Please contact me before sending sensitive images or recordings so that an appropriate method can be agreed.

A child’s information will not be used for marketing or published as part of a testimonial or case example without separate, specific permission. Where appropriate, the child’s own wishes will also be taken into account.

6. Who may receive your information?

I do not sell personal or health information.

Information may be processed by carefully selected service providers that help me operate my practice, including:

FEA Create/LeadConnector, for website hosting, forms, customer relationship management and email services;

Acuity Scheduling/Squarespace, where used for appointment booking;

Proton Mail, for email communication;

Zoom, for online consultations;

the payment provider displayed when you book or make a purchase;

website hosting, security and technical-support providers;

pharmacies or remedy suppliers where necessary to fulfil an agreed prescription;

laboratories where you choose to purchase testing;

accountants, insurers and professional or legal advisers;

the Society of Homeopaths where required for a professional complaint or regulatory matter; and

public authorities, courts or law-enforcement bodies where disclosure is legally required.

These providers should only receive information reasonably necessary for their function.

A pharmacy, laboratory or other healthcare provider may act as a separate data controller for the service it supplies to you. Its own privacy policy will then apply.

I may also discuss cases in confidential professional supervision where this is necessary for professional practice. Identifying details will be removed or minimised wherever reasonably possible.

7. International data transfers

Some technology providers may process or store information outside the United Kingdom.

Where personal information is transferred internationally, I take reasonable steps to ensure that an appropriate legal safeguard is in place. Depending on the destination and provider, this may include:

UK adequacy regulations;

the UK International Data Transfer Agreement;

the UK Addendum to approved standard contractual clauses; or

another safeguard permitted by UK data-protection law.

If you live outside the UK, information you send to me will necessarily be transferred to and processed in the United Kingdom.

8. How long I keep information

I keep information only for as long as reasonably necessary for the purpose for which it was collected and to meet professional, insurance, tax and legal requirements.

My usual retention periods are:

Adult consultation records: seven years after the last consultation;

Children’s consultation records: until the child’s 25th birthday, or 26th birthday if treatment ended when they were 17;

Unconverted enquiries: normally up to 12 months after the last meaningful contact;

Financial and transaction records: normally six years after the relevant financial year;

Newsletter records: until you unsubscribe or the mailing list is discontinued;

Marketing-consent records and unsubscribe records: for as long as reasonably necessary to demonstrate and respect your preferences;

Testimonials: while they remain published or until consent is withdrawn, subject to reasonable time for removal;

Website security logs and technical records: according to the retention settings of the relevant service, and no longer than reasonably necessary; and

Photographs, recordings and videos used for a clinical purpose: as part of the relevant consultation record, unless there is a good reason to delete them sooner.

Records may be kept longer where required by law, an insurer, an unresolved complaint, safeguarding concerns or an actual or anticipated legal claim.

When information is no longer required, it will be securely deleted, anonymised or destroyed.

9. How I protect your information

I take reasonable technical and organisational measures to protect personal information. These may include:

password-protected accounts and devices;

access controls and two-factor authentication where available;

reputable service providers;

secure storage and backups;

limiting access to those who genuinely require it; and

taking care when sending or discussing health information.

No email, internet platform or electronic storage method can be guaranteed to be completely secure. Please avoid sending unnecessary health details through website contact forms or ordinary social-media messages.

My website contact form and social-media accounts must not be used for emergencies.

10. Emails, messaging and social media

Email and messaging services may not always be completely secure. By contacting me through a particular method, you acknowledge the ordinary risks associated with that method.

Private messages sent through Facebook, Instagram or other social platforms are also processed by the platform concerned under its own privacy policy. Please do not use social-media messages to send detailed or sensitive health information.

Comments made in public social-media groups or on public pages can be seen by other people. Participation in a public or private online community is separate from becoming a client of my practice.

11. Cookies

Cookies are small files placed on your device when you visit a website.

Some cookies are necessary for the website, booking system, forms or security features to work. Other cookies may be used for preferences, analytics, embedded content or marketing.

Where required by law, non-essential cookies will not be placed unless you consent to them through the cookie banner or settings tool.

You can change your cookie preferences through the website’s cookie settings and can also restrict cookies through your browser. Disabling necessary cookies may affect how parts of the website work.

12. Your data-protection rights

Depending on the circumstances, you may have the right to:

be informed about how your information is used;

request access to your personal information;

ask for inaccurate information to be corrected;

ask for information to be deleted;

ask me to restrict how information is used;

object to certain processing;

receive certain information in a portable format;

withdraw consent where processing is based on consent; and

complain to the Information Commissioner’s Office.

These rights are not absolute. For example, I may need to retain professional records where there is a lawful reason to do so, even if you ask for their deletion.

To exercise a right, email [email protected]. I may need to confirm your identity before releasing or changing personal information.

I normally respond to a valid request within one month. I will explain if more time is lawfully required or if a request cannot be fulfilled.

13. Complaints about the use of your information

Please contact me first if you have a question or concern about how I handle your information:

Email: [email protected]

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

14. Links and embedded content

My website may contain links to other websites or embedded content from services such as YouTube, Google, podcast platforms or social-media providers.

These third parties may collect information or place cookies according to their own privacy policies. I am not responsible for the privacy practices of independently operated websites.

15. Changes to this policy

I may update this Privacy Policy when my services, technology providers or legal obligations change.

The latest version will be published on this website with its effective date. Where a change significantly affects how existing client information is used, I will take reasonable steps to bring it to the attention of affected clients.