Privacy Policy

Last updated: October 2026

This policy explains how I collect, use and protect your personal information when you use this website, contact me or receive acupuncture treatment from me. I am committed to protecting your privacy and complying with UK data protection law.

Who I am

I am Tiago Marques, trading as New Beginnings Acupuncture, and I am the data controller for the personal information described in this policy. This means I decide how and why your data is used.

You can contact me at tiago@nbacupuncture.com or on 07386 001694.

What information I collect

Contact information. When you contact me or book an appointment, I collect your name, email address, phone number and any other details you give me.

Health information. To provide safe and appropriate treatment, I collect information about your medical history, current health, medication, symptoms and lifestyle. This also includes my treatment notes and records of your appointments. Health information is a special category of personal data, and I treat it with extra care.

Information from others. If you are referred to me by your GP, dentist or another healthcare professional, they may send me relevant information about you. I will only use it to provide your treatment. If you book for a child, I collect their information from you as their parent or guardian.

Payment records. I take payments in person, by cash or card, and keep a record of the date and amount paid. Card payments are processed by SumUp on a card reader. I do not see or store your full card details, and I do not take payments through this website.

Website information. This website is hosted by Squarespace, which uses cookies and collects limited technical information, such as your browser type and which pages you visit. You can control cookies through your browser settings.

How I use your information

I use your information to:

  • provide and record your acupuncture treatment

  • book appointments and send you reminders

  • reply to your questions and requests

  • keep accurate financial and business records

  • meet my legal and professional obligations

  • run and improve this website

I will only send you marketing messages if you have agreed to receive them, and you can opt out at any time.

My legal basis for using your information

  • Contract: to provide the treatment you have asked for and to take your booking.

  • Legitimate interests: to respond to your enquiries, keep my records accurate and run my practice securely.

  • Legal obligation: to keep records required by law, for example for accounting and tax.

  • Consent: for any marketing messages, which you can withdraw at any time.

  • Health information: I process this because it is necessary for providing health care. It is handled by me as a healthcare practitioner who is bound by a duty of confidentiality.

Who I share your information with

I do not sell your information, and I do not share it for other companies’ marketing. I use a small number of trusted providers to run my practice, and they process your information on my behalf and may not use it for their own purposes:

  • Cliniko, an online system I use to manage bookings and patient records

  • Squarespace, which hosts this website

  • SumUp, which processes card payments taken in person

  • Email and messaging providers, which I use to contact you

Cliniko stores patient records in secure UK data centres.

Apart from the providers listed above, I will only share your health information with others, such as your GP or another healthcare professional, with your permission. The exceptions are where the law requires it, where it is needed to protect someone from serious harm, or where my professional body or insurer needs it to deal with a complaint or claim.

How long I keep your information

I keep adult patient records for 7 years after your last appointment. For patients under 18, I keep records until 7 years after their 18th birthday. After this I delete or securely destroy them. I keep financial records for as long as the law requires.

How I keep your information safe

I keep my patient records in password-protected systems that only I can access. I also take care when I use email or messaging, and I review my security measures regularly. No system is completely secure, but I take appropriate technical and organisational steps to protect your information against unauthorised access, loss or disclosure.

Your rights

You have the right to:

  • ask for a copy of the personal information I hold about you

  • ask me to correct anything that is inaccurate or incomplete

  • ask me to delete your information in certain circumstances

  • ask me to restrict how I use your information

  • object to how I use your information

  • ask for your information in a portable format

  • withdraw your consent at any time, where I rely on it

To use any of these rights, contact me using the details above. I will reply within one month and I do not charge for this. Please note that I may need to keep some records, such as treatment notes, even if you ask me to delete them.

If you are unhappy with how I have handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Links to other websites

This website may link to other websites, such as professional bodies and social media. This policy does not apply to them, and I am not responsible for their content or how they use your information.

Changes to this policy

I may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

Contact me

If you have any questions about this policy, please contact me or email tiago@nbacupuncture.com.

Click here to go back to the homepage.