Who we are

Our website address is: http://leahlactationandtonguetie.com.

Privacy Notice

 Leah’s Lactation and Tongue-Tie Services

Last Updated: April 2026

Data Controller: Leah Hutchinson, IBCLC ICO Registration Number: ZC075295

1. Introduction At Leah’s Lactation and Tongue-Tie Services

I am committed to protecting the privacy and security of your personal and health information. This notice explains how I collect, use, and protect your data when you engage with my services.

2. What Information Do I Collect?

To provide safe clinical care for you and your baby, I collect:

• Personal Identifiers: Names, dates of birth, NHS numbers, and contact details (address, phone, email).
• Health Data (Special Category): Birth history, feeding challenges, medical history of the infant and mother, and clinical assessment findings (including Hazelbaker scores).
• Photographs/Videos: Only with your explicit written consent, for clinical monitoring or educational purposes.
• Financial Info: Details required to process payments for your consultations.

3. Why Do I Collect This Information?

Under GDPR, the “Lawful Bases” for processing your data are:

• Contract: To provide the lactation and frenulotomy services you have requested.
• Legal Obligation: To meet CQC requirements for clinical record-keeping.
• Health and Social Care: To provide medical diagnosis and the provision of health treatment (Article 9(2)(h)).

4. How Do I Store Your Data?

Your records are stored digitally in WriteUpp, a specialist, UK-based Patient Management System.

• Data is encrypted and protected by Two-Factor Authentication (2FA).
• I do not keep paper records; any paper forms used during a visit are scanned into WriteUpp and the originals are cross-cut shredded.

5. Who Do I Share Your Data With?

I only share your information to ensure continuity of care or for safety:

• GPs & Health Visitors: I send a summary of any surgical procedure to your baby’s primary care team.
• Professional Buddy: In the event of my sudden incapacity, my nominated “Buddy” (Abi Durrant-Milnes, IBCLC) may access your contact details to manage your care.
• Emergency Services: If a medical emergency occurs during a visit.
• Safeguarding: If I have a legal duty to protect a child or vulnerable adult.

6. How Long Do I Keep Your Data?

In line with the NHS Records Management Code of Practice, clinical records for infants are retained until the child’s 25th birthday. After this period, your data will be securely deleted.

7. Your Rights You have the right to:

Request a copy of your clinical records (Subject Access Request).

• Ask for factual errors in your records to be corrected.
• Withdraw consent for marketing or non-essential data processing.

8. How to Complain

If you have concerns about how I handle your data, please contact me directly at leahlactationandtonguetie@outlook.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Spam Detection

Visitor comments may be checked through an automated spam detection service.