Privacy policy

Privacy Policy

Last updated: 8 July 2026

This Privacy Policy describes how Cheuk's Wellness & TCM ("we", "us", "our") collects, uses, and shares your personal information when you visit cheukstcm.org, purchase from our online store (including our Vital Duo botanical range), book an appointment, or otherwise communicate with us (together, the "Services").

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Cheuk's Wellness & TCM is the data controller of your personal information.

A note on your clinic records

Your clinical records — consultation notes, health history, and treatment information — are held securely in our dedicated practice management system and are not collected or stored through this website. This website handles only the information described below. Your health information is treated as special category data and is never used for marketing or shared for advertising purposes.

Information we collect

Information you give us directly:

  • Contact details — name, address, phone number, and email
  • Order information — billing address, shipping address, payment confirmation, email, and phone number
  • Account information — username, password, and security details
  • Customer support information — anything you choose to include when you contact us

Information collected automatically:

When you visit the site, we automatically collect certain information about your device and how you interact with the Services ("Usage Data"), using cookies and similar technologies. This may include browser and device information, IP address, and pages viewed.

Information from third parties:

We may receive information from service providers who support our store, such as Shopify (our e-commerce platform) and our payment processors, who collect payment information to fulfil your orders.

How we use your information

  • Providing products and services — processing payments, fulfilling orders, arranging delivery, managing your account, and handling returns and exchanges (performance of our contract with you)
  • Marketing — sending marketing communications by email where you have opted in; you can unsubscribe at any time using the link in any email (consent, or our legitimate interests)
  • Security and fraud prevention — detecting and investigating fraudulent or malicious activity (legitimate interests)
  • Customer support and service improvement — responding to you and improving our Services (legitimate interests)
  • Legal compliance — meeting our legal and regulatory obligations

Cookies

We use cookies to run the store, remember your preferences, and understand how visitors use the site. For details of the cookies used by Shopify, see shopify.com/legal/cookies. You can manage or withdraw your cookie consent at any time via the Cookie preferences link in our website footer, or through your browser settings. Blocking cookies may affect how parts of the site work.

How we share your information

We share personal information only where necessary:

  • With service providers who perform services on our behalf — such as Shopify, payment processors, delivery carriers (e.g. Royal Mail), and IT and analytics providers
  • Where you direct or consent to a disclosure
  • To comply with legal obligations, respond to lawful requests, or protect our rights
  • In connection with a business transfer, such as a sale or restructuring of the business

We do not sell your personal information.

International transfers

Some of our service providers process data outside the UK. Where personal information is transferred internationally, we rely on recognised safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, or transfers to countries with an adequacy decision.

Retention

We keep your personal information only as long as needed to provide the Services, comply with legal obligations (such as tax and accounting rules), resolve disputes, and enforce our agreements.

Children

Our Services are not intended for children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

Your rights

Under UK data protection law, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Erase your information in certain circumstances
  • Port your information to another service
  • Restrict or object to certain processing
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email info@cheukstcm.org. We may need to verify your identity before responding. We will never discriminate against you for exercising your rights.

Complaints

If you have a concern about how we handle your personal information, please contact us first and we will do our best to resolve it. You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date.

Contact

Cheuk's Wellness & TCM 96a High Street, Staple Hill, Bristol BS16 5HL, United Kingdom Email: info@cheukstcm.org