Privacy Policy

Last Updated: 22/10/2025

Privacy Policy – Hidayah Health

  1. Introduction

This Privacy Policy applies to www.hidayahhealth.com, owned and operated by Hidayah Health. It explains how we collect, use, and protect the personal information of our visitors, students, and customers. We are committed to safeguarding your privacy and ensuring that your data is handled securely and lawfully in accordance with the UK General Data Protection Regulation (GDPR).

By using our website, enrolling in a course, making a purchase, or booking a treatment, you consent to the practices described in this Privacy Policy.

  1. What Personal Information Do We Collect?

We may collect and process the following personal information:

  • Full name, contact details (email, phone, address)
  • Date of birth and gender (for course certification and insurance purposes)
  • Nationality and country of residence
  • Educational or professional background (where applicable)
  • Payment and billing information (processed securely via third-party providers)
  • Any health-related information voluntarily provided for Hijama treatment bookings
  • Technical data, such as IP address, browser type, and cookie preferences
  1. How Do We Collect Personal Information?

We collect personal data in the following ways:

  • When you fill out forms on our website (e.g., contact form, course enrolment, or booking form)
  • When you purchase Hijama cups, tools, or other products from our online store
  • When you subscribe to our newsletter or request marketing updates
  • Through cookies (where consent has been given)
  • When you contact us via phone, WhatsApp, email, or social media
  • When you provide testimonials, feedback, or consent for media use

All information is securely stored on encrypted systems, with access strictly limited to authorised staff.

  1. Why Do We Process Your Personal Data?

Your data is processed in accordance with UK GDPR for the following purposes:

  • To deliver and manage your Hijama training and certification
  • To process orders, payments, and shipping
  • To respond to your enquiries and provide customer support
  • To send course updates, newsletters, or promotional offers (where consent is given)
  • To comply with regulatory, insurance, and qualification body requirements
  • To improve our website, courses, and customer experience

You may opt out of marketing communications at any time by clicking “unsubscribe” in our emails or contacting us directly.

  1. How Do We Protect Your Data?

We implement both technical and organisational safeguards to ensure your data remains protected. This includes:

  • SSL encryption across our website
  • Secure password-protected storage systems
  • Limited access to authorised personnel only
  • Routine audits and compliance checks
  • No sale or unauthorised sharing of your personal data with third parties

In the rare event of a data breach, affected users will be notified promptly in accordance with legal obligations.

  1. Newsletter & Marketing Communications

Our newsletter is designed to keep you updated about new Hijama training opportunities, course materials, product launches, and special offers. Subscription is entirely optional.
All subscriber information is stored securely and processed according to GDPR standards. You may unsubscribe at any time.

  1. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Access – to obtain a copy of the data we hold about you
  • Rectification – to correct inaccurate or incomplete information
  • Erasure – to request that we delete your data where legally possible
  • Data portability – to request a copy of your data for transfer
  • Restriction – to limit how we process your data
  • Objection – to opt out of marketing communications or data use
  • Withdrawal of consent – to withdraw previously given consent at any time

Requests to exercise these rights can be made by emailing admin@hidayahhealth.com.

  1. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. Course and certification data may be kept for recordkeeping and compliance purposes. Once data is no longer required, it will be securely deleted or anonymised.

  1. Contacting Us

If you have any questions, concerns, or data requests relating to this Privacy Policy, please contact us at:
Email: admin@hidayahhealth.com
Website: www.hidayahhealth.com

  1. Review and Updates

This Privacy Policy is reviewed annually or whenever new data protection laws or operational changes occur. The latest version will always be available on our website.

Last updated: October 2025