Privacy Policy
Aimee Taylor Lactation respects your privacy and aims to handle personal information carefully, lawfully, and transparently. This policy explains what information may be collected when you use this website, book a consultation, or make an enquiry.
Who Is Responsible For Your Data
Aimee Taylor Lactation Ltd is the data controller for personal information collected through this website and related consultation booking activity. The company is registered in England and Wales, company number 17392292, with its registered office at 38 Eswyn Road, London, SW17 8TP. Consultations are provided by Aimee Taylor, its director.
For any question about your information, or to exercise any of the rights below, contact Aimee directly at hello@aimeetaylorlactation.co.uk or on 07515 909066.
Information Collected
Depending on how you use the site and booking system, information may include:
- Your name and contact details
- Booking details, appointment preferences and consultation type
- Information you choose to provide about feeding, pregnancy, birth, your baby or your family circumstances
- Payment status and transaction references, where payment is required
- Technical information such as IP address, browser type, pages requested and server logs
How Information Is Used
Personal information is used to respond to enquiries, manage bookings, provide consultation services, take payment where required, keep appropriate records, maintain website security, and meet legal or professional obligations.
Our Lawful Basis
Personal information is processed in order to provide the service you have asked for, which is the lawful basis of contract under Article 6(1)(b) of the UK GDPR. Where an enquiry does not lead to a booking, information is processed on the basis of legitimate interests, so that enquiries can be answered.
Visit statistics are gathered on the basis of legitimate interests, to understand which pages are useful and improve the site. How this works is described under Cookies, Logs And Analytics.
Information about your health, or your baby's health, is special category data. It is processed for the provision of health care by a professional bound by a duty of confidentiality, under Article 9(2)(h) of the UK GDPR.
Health And Family Information
Information about feeding, pregnancy, birth, babies, or health may be sensitive personal information. Please only share information that is relevant to your enquiry or consultation. Sensitive information is used to understand your needs and provide appropriate support.
Services Used To Run The Practice
A small number of services handle information on the practice's behalf:
- Booking: appointments are booked through Cal.eu, which is embedded on this website. What you enter when booking is processed by Cal.eu under its own privacy and security terms. Virtual consultations use Cal's video service.
- Payments: card payments are taken by Stripe. Aimee Taylor Lactation does not see or store your full card details. Stripe also uses payment information to prevent fraud, under its own privacy policy.
- Intake and consent forms: after booking an initial home visit or antenatal feeding preparation, you are emailed a link to an intake and consent form. The forms are hosted at sign.aimeetaylorlactation.co.uk, on a server the practice runs, rented from Krystal Hosting in the UK. Completed forms are stored there, with encrypted backups.
- Website and email: the website and the hello@aimeetaylorlactation.co.uk mailbox are hosted by Krystal Hosting in the UK. The domain's records are managed through Cloudflare.
- Visit statistics: Umami counts visits to this website and records how pages are used. It runs on the practice's own server at stats.aimeetaylorlactation.co.uk, rented from Krystal Hosting in the UK, and sets no cookies.
- WhatsApp: if you choose to message by WhatsApp, for example for follow-up support, those messages are handled by WhatsApp under its own terms.
- Fonts: the site loads fonts from Google Fonts, so your browser contacts Google's servers when a page loads.
Some of these providers may process information outside the UK. Where they do, they rely on safeguards recognised under UK data protection law, such as adequacy regulations or international data transfer agreements.
Cookies, Logs And Analytics
This website does not set its own cookies and does not use advertising trackers.
The site uses Umami, an open-source analytics tool running on the practice's own server at stats.aimeetaylorlactation.co.uk. Umami sets no cookies. It counts visits and a few actions, such as starting or submitting a booking, opening a question, or tapping to call or email, without identifying anyone. It also notes general details such as the website you came from, your type of device and browser, and your country and rough location (town or region). It leaves out any extra details added to a page address, apart from tags showing which link or advert brought you to the site.
To see which parts of a page are useful, it also records how quickly pages load, where people click and how far they scroll, and, for a sample of visits, a replay of how the page was used: the pages seen, scrolling, mouse movements and clicks. Anything typed into a form is hidden in replays, and the booking calendar is never recorded. Browsers with Do Not Track or Global Privacy Control switched on are not counted or recorded.
The booking calendar, once it loads, may set cookies it needs to work. The web server keeps normal logs, including IP addresses and requested pages, to keep the site secure and diagnose faults.
Sharing Information
Personal information is not sold. It may be shared only where needed to provide the service, manage bookings or payments, comply with legal or professional duties, or protect someone from harm. If referral to another practitioner is appropriate, relevant information should only be shared with your knowledge or where legally required.
How Long Information Is Kept
Clinical records are kept in line with the NHS Records Management Code of Practice. Records relating to your baby are retained until their 25th birthday. Records relating to you as an adult are retained for eight years from your last appointment. They are then securely destroyed.
Enquiries that do not lead to a booking are kept for up to twelve months. Records needed for accounting and tax are kept for six years, as required by HMRC. Website server logs are kept for a short period for security and fault diagnosis.
Visit statistics are kept for up to fourteen months. Replays of visits are deleted within 30 days.
Your Rights
Depending on the circumstances, you may have rights to access, correct, delete, restrict, or object to the use of your personal information, and to receive a copy of it in a portable format. You may also complain to the UK Information Commissioner's Office at ico.org.uk if you are unhappy with how your information is handled. Please do tell Aimee first if you can, so it can be put right.
Updates
This policy may be updated as the website, booking process, or service providers change. The latest version will be published on this page.