Privacy Policy
Last updated: April 2026
1. Introduction
Herts Cupping (hertscupping.co.uk) is a specialist Hijama and recovery clinic based in St Albans, Hertfordshire. We take your privacy seriously and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights.
2. Data We Collect
Booking and Contact Forms
When you book a session or submit a contact form, we collect your name, email address, phone number, and any details you provide about your symptoms or requirements. This information is used solely to manage your booking and provide your treatment. It is never used for marketing or shared with third parties.
Contact form submissions
Information submitted through our contact form is sent to our company email hosted by Google (Gmail). Google adheres to GDPR requirements. See their privacy policy.
Website Analytics
We use Google Analytics for anonymous reporting of site usage. No personally identifiable data is stored. You can opt out of Google Analytics here.
Comments
If you leave a comment on the website, we collect the data shown in the comments form, your IP address, and browser user agent string to help with spam detection.
3. How We Use Your Data
- To manage your bookings and provide your treatment
- To respond to enquiries submitted through the contact form
- To send appointment confirmations and aftercare information
- To improve the website experience through anonymous analytics
- To ensure the security of your account and our systems
We do not use your data for marketing purposes unless you explicitly opt in.
4. Data Storage
We are a UK-based business. Our web servers are hosted in the UK by Hostinger, which is GDPR compliant. See their privacy policy.
5. Embedded Content
Some pages include embedded content from third-party services such as TikTok, Instagram, and YouTube. These services may collect data about you, use cookies, and track your interaction with the embedded content. We have no control over their privacy practices.
6. Cookies
This site uses cookies to provide a better user experience and to support anonymous analytics. You can disable cookies in your browser settings at any time.
| Cookie | Purpose |
|---|---|
| PHPSESSID | Identifies your unique session on the website. |
| wp-auth / wordpress_logged_in | Used by WordPress to authenticate logged-in users. |
| wordpress_test_cookie | Checks that cookies are working correctly. |
| _ga / _gid | Google Analytics. Anonymous site usage tracking. |
7. Who Has Access to Your Data
Your personal information is only accessible to our clinic administrators and, where necessary, our technical support team. We do not sell, trade, or share your personal data with any third parties except where required to provide the services you have requested (such as booking confirmations) or where required by law.
8. How Long We Retain Your Data
Booking records and contact form submissions are retained for as long as necessary to provide ongoing care and for our internal records. If you request deletion of your data, we will remove all information that is not required for legal or administrative purposes.
9. Security
We use SSL/HTTPS encryption across the entire website. All communication between your browser and our servers is encrypted. In the event of a data breach, we will notify affected users immediately and take all necessary steps to secure the system.
10. Your Rights
Under GDPR you have the right to:
- Request a copy of the personal data we hold about you
- Request correction of any inaccurate data
- Request deletion of your personal data (where not required for legal purposes)
- Withdraw consent for data processing at any time
To exercise any of these rights, please contact us at hertscupping@gmail.com or call 07466 307267.
11. Third-Party Links
This website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and recommend reviewing their privacy policies independently.
12. Legal Disclosure
We may disclose your information where required by law or in response to a valid legal request. Any such disclosure will be made in compliance with UK data protection laws.