GDPR Privacy Notice
Wild Clinic is operated by Wilding Tribe. Nutritional therapy services are provided by Mark Bennett, BSc (Hons), mBANT, CNHC. This notice explains how we handle your personal information when you register with the practice, complete a questionnaire, or attend a consultation. It covers the client portal and your health record. Our marketing website has its own, shorter privacy notice, because it collects no personal data at all.
For any question about your data, contact info@wildclinic.co.uk.
What we collect
- Identity and contact details: name, date of birth, email, phone, address.
- Your GP's name and practice, and an emergency contact.
- Health information you provide in questionnaires and consultations: symptoms, health history, diagnoses, medication, supplements, diet and lifestyle.
- Practitioner notes, protocols and correspondence created during your care.
- Results of any laboratory testing you agree to.
- Payment records. Card details are processed by our payment provider and are never stored by the practice.
Why we process it, and the legal basis
- To provide nutritional therapy services you have asked for: performance of a contract.
- Health information is special category data under UK GDPR. We process it on the basis of your explicit consent, given when you register and complete your intake questionnaire.
- To keep health records to the standard required of registered practitioners: legal and professional obligation under the CNHC Code of Conduct.
- To administer appointments, payments and correspondence: legitimate interests in running the practice.
You can withdraw consent at any time by contacting us. Withdrawal stops future processing. It does not affect processing that has already happened, and professional record-keeping duties may require us to retain existing records.
Where your data lives
Your health record is held in Function365, a UK practice-management system for regulated healthcare practices. It provides the client portal, appointment booking, secure messaging and record storage. Payments are processed by Stripe. Email correspondence is held in the clinic's email system.
Who we share it with
- Laboratories, when you agree to testing. Only the details the laboratory needs to run your test.
- Your GP or other healthcare professionals, only with your permission, as set out in the Terms of Engagement.
- Supplement dispensaries, where you choose to order through a practitioner account.
We never sell your data. We never share it for marketing. We do not transfer your health record outside the UK except where a named service above processes data under UK GDPR safeguards.
How long we keep it
Health records are retained for 8 years after your last appointment. Records for children are retained until their 25th birthday, or their 26th if they were 17 at the end of care. These periods follow standard UK healthcare records guidance and our professional insurance requirements.
Your rights
You have the right to access the information we hold about you, to have inaccurate information corrected, to withdraw consent, and in certain circumstances to request erasure or restriction of processing. Health records are subject to professional retention requirements, which can limit erasure. To exercise any right, email info@wildclinic.co.uk. We respond within one month.
If you are unhappy with how your data has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.