Privacy Policy

Last Updated: 13/2/2026

1. Introduction Cisco's Karma ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect any personal data you provide when using our website (www.ciscoskarma.com) and our services, including bookings made via Treatwell.

2. Data We Collect We may collect and process the following data about you:

• Identity & Contact Data: Name, email address, telephone number, billing/delivery address.
• Transaction & Booking Data: Details of appointments you book with us, services purchased, treatment notes relevant to your care, and payment details (processed securely by our third-party booking/payment provider).
• Technical & Usage Data: Internet protocol (IP) address, browser type, time zone, operating system, and information about how you use our website. This is collected via cookies and similar technologies.
• Marketing & Communications Data: Your preferences in receiving marketing from us.

3. How We Collect Your Data

• Direct Interactions: You may give us your data by filling in forms on our site, corresponding with us by post, phone, email, or social media, or when you book an appointment (via our website widget, phone, or in-person).
• Automated Technologies: As you interact with our website, we may automatically collect Technical Data via cookies. Please see our Cookie Policy for more details.
• Third Parties: We receive personal data from the following parties:
  • Treatwell: When you book an appointment through their platform integrated into our site, they provide us with the necessary booking and contact details to fulfil your appointment.
  • Technical Providers: Such as our website hosting and analytics partners (e.g., 123Reg, Google Analytics).

4. How We Use Your Data We will only use your personal data lawfully, most commonly:

• To fulfil our contract with you (e.g., to manage and honour your appointments, process payments).
• Where it is necessary for our legitimate interests (e.g., to administer our website, for business administration, and to prevent fraud).
• Where we need to comply with a legal obligation.
• With your consent (e.g., to send you marketing communications about promotions or new services).

Purpose/ActivityType of DataLawful Basis for ProcessingTo register you as a new client and manage your appointmentsIdentity, Contact, TransactionPerformance of a contractTo process and deliver your serviceIdentity, Contact, Transaction, Health (allergy notes)Performance of a contract, Legitimate interest (to provide safe, tailored service)To manage our relationship with you (e.g., sending appointment reminders, asking for feedback)Identity, Contact, TransactionPerformance of a contract, Legitimate interestsTo administer and protect our business and websiteIdentity, Contact, TechnicalLegitimate interests (for running our business, IT security)To send relevant marketing communicationsIdentity, Contact, MarketingConsent or Legitimate interests

5. Data Sharing We will never sell your personal data. We may share it with:

• Service Providers: Who provide IT, system administration, and booking services (specifically Treatwell for appointment management and 123Reg for website hosting).
• Professional Advisers: Including accountants or insurers where necessary.
• Regulatory Authorities: Where required by law.

6. Data Security We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed unlawfully.

7. Data Retention We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Treatment notes may be retained for a longer period in line with industry standards for client care.

8. Your Legal Rights Under data protection laws, you have rights including:

• Access: The right to request a copy of the personal data we hold about you.
• Correction: The right to request correction of inaccurate data.
• Erasure: The right to request we delete your data (the "right to be forgotten").
• Objection: The right to object to certain processing, like direct marketing.
• Restriction: The right to request restriction of processing your data.
• Data Portability: The right to request transfer of your data to another service.

To exercise any of these rights, please contact us at info@ciscoskarma.com.

9. Third-Party Links Our website may include links to third-party websites (e.g., Treatwell, social media platforms). Clicking on those links may allow third parties to collect or share data about you. We do not control these websites and are not responsible for their privacy statements.

10. Cookies Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and improve our site. For detailed information on the cookies we use, please see our Cookie Policy.

11. How to Contact Us For any questions about this privacy policy or our privacy practices, please contact:

• Email: info@ciscoskarma.com
• Post: Cisco's Karma, 18 East Street Arcade, Brighton, East Sussex, BN1 1HR
• Phone: +44 (0)1273 725005