Who is responsible?
Herb & Health is responsible for personal information collected through this website. Our address is 4a, Market Village, Stratford Centre, London E15 1XQ.
For privacy enquiries, please telephone 07716 771765 or write to the clinic at the address above.
Website enquiries
The enquiry form requires your name, email address, UK phone number, service interest and a general message. Online enquiries are currently unavailable. Please telephone the clinic; this website does not currently send or store form enquiries. Security verification and abuse-prevention information are processed as described below.
When live, we use enquiry information to respond and discuss a visit. For requests to arrange a service, the lawful basis is taking steps at your request before entering into a contract. For general enquiries, we rely on our legitimate interest in answering questions, balanced against your rights. The form does not sign you up to marketing.
Please do not send symptoms, diagnoses, medical records or other sensitive health information here. Any clinical records, treatment consent and relevant health-data processing are handled separately by the clinic and must be covered by its patient privacy information.
Technical information and protection
The hosting server may process IP addresses, request times and technical request details for security and operation. The form uses session tokens, a honeypot, timing checks, strict validation, an hourly attempt limit and hCaptcha security verification. Rate-limit files contain a keyed hash of the network address and timestamps; they do not contain enquiry fields. These protections also apply in preview mode. We rely on legitimate interests to protect the website against abuse.
hCaptcha is provided by Intuition Machines, Inc. Its security widget loads automatically on pages containing the enquiry form. It processes technical information such as IP address, browser/device details and interactions with its challenge. Our server sends the challenge response and your IP address to hCaptcha to confirm verification; our code does not send your enquiry fields to the verification endpoint. Verification is required to submit this form and is separate from optional analytics. You can telephone the clinic instead. See hCaptcha’s privacy policy. The provider may process this information outside the UK as described in its privacy policy.
Providers and sharing
Our hosting provider processes technical information to operate and protect this website. When online enquiries are enabled, they are delivered using authenticated, encrypted SMTP through the clinic’s email provider. hCaptcha and Google process technical information when their services are used, as described above and below. We do not sell enquiry information.
Retention
We keep enquiry information only as long as needed to respond, manage any resulting service and meet applicable legal obligations. Clinical records are managed separately by the clinic. Hosting access logs are rotated daily with 14 archived rotations; expired website rate-limit files are removed daily. The website itself does not keep a database of enquiries.
Cookies and optional analytics
Essential cookies keep your form session secure and remember your cookie choice. Optional Google Analytics only loads when a valid measurement ID is configured and you choose to accept it. The lawful basis for optional analytics is consent. Google may process browser and device details and information about pages visited. Google may process this information outside the UK under its published privacy terms.
You can decline or withdraw consent using . Our cookie policy explains storage and durations.
Optional map and Google testimonials
The Google map loads automatically when you accept optional cookies or enable Google Maps in Cookie settings. It stays off until you give this consent, separately from analytics. Your preference is remembered for up to 180 days. Once loaded, Google receives technical information such as your IP address, browser details and map interactions, and may use cookies or similar storage. Choose Hide map or switch Google Maps off in Cookie settings to withdraw map consent, remove the embed and stop further requests from it. This does not erase information already received or third-party storage; you can manage storage in your browser. See Google’s privacy policy.
Selected Google testimonials are short excerpts stored on our website with the reviewer’s public display name, star rating and a link to the original review. They do not load a Google widget. Opening a review or directions link takes you to Google. We display these public excerpts to help visitors understand others’ experiences. Reviewers can request removal by contacting the clinic.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. You can withdraw consent without affecting prior lawful processing. We will normally respond to a rights request within one month and may need to verify your identity.
You can complain to the Information Commissioner’s Office, the UK data-protection regulator.
Other websites and updates
External links take you to websites with their own privacy policies. We update this notice when our website services or handling of personal information change. Last updated 11 October 2026.