Your privacy, protected.

Last updated: June 2026

Who we are

Anaflor Acupuncture (“we”, “us”) is an acupuncture practice based in Dublin, Ireland. We are the data controller for the personal information described in this policy. You can contact us about anything in this policy at hello@anafloracupuncture.ie.

What we collect

• Contact details — your name, email address, and phone number when you send a message, create an account, or book an appointment.
• Booking information — the services you book, appointment dates, and any notes you choose to share when booking.
• Health information — details you share during consultation and treatment (health history, current concerns, medications). This is special category data under GDPR and is collected only with your explicit consent, because it is necessary to treat you safely.
• Messages — messages you send through our contact form or client chat.

We do not use advertising cookies or sell data to anyone. Site analytics, where used, are cookieless and aggregate.

Why we use it

• To provide your care — scheduling, treatment planning, and clinical records (legal bases: contract, explicit consent for health data).
• To communicate with you — booking confirmations, reminders, and replies to your messages (legal bases: contract, legitimate interest).
• To meet our obligations — professional record-keeping requirements and receipts for health-insurance claims you request (legal basis: legal obligation).

Where your data lives

Your information is stored with carefully chosen service providers acting as data processors: our database and authentication provider (Supabase, hosted in the EU), our website host (Vercel), and our email delivery provider (Resend). Each processes data only on our instructions.

How long we keep it

Clinical records are retained in line with Irish healthcare record-keeping guidance (generally 8 years after your last treatment for adults). Contact-form messages and account data are kept only as long as needed for the purposes above, after which they are deleted.

Who we share it with

No one, except: our processors listed above, an insurer when you ask us for a receipt or documentation to make a claim, or where the law requires it. We never sell your information.

Your rights

Under GDPR you have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• request erasure (subject to clinical record-keeping obligations);
• restrict or object to certain processing;
• receive your data in a portable format; and
• withdraw consent at any time, where consent is the basis.

To exercise any of these, email hello@anafloracupuncture.ie. You also have the right to lodge a complaint with the Data Protection Commission (Ireland’s supervisory authority).

Changes to this policy

If we make material changes, we will update this page and the date above. Questions are always welcome at hello@anafloracupuncture.ie.