Legal
Privacy Policy
Last updated: 27 October 2026 · Jurisdiction: Czech Republic
1. Who we are
Crookston International Institute of Homeopathy (“we”, “us”, “our”) is the data controller responsible for your personal data. Our contact email is info@ciioh.com.
2. What data we collect
We collect the following categories of personal data:
- Enquiries: full name, email address, phone number (optional), topic of concern, your message, and submission date.
- Orders and delivery addresses: programme purchased, email address, full name, street address, city, postcode, country, order date, and the language version of the site you bought from.
- Health intake form: age, sex, your main health goal, health conditions, how long you have had them, medications, psychological history, sleep quality, stress level, previous experience with homeopathy, any additional notes, and how you heard about us. This is health data, a special category of personal data under GDPR (see section 4).
- Consultation bookings: your name, email address, the date and time of your consultations, and the video call link. Consultations take place online via Zoom.
- Record of your consent at checkout: when you agree to our terms before payment, we store the time, the programme, your IP address, and your browser type, so that we can show that consent was given.
- Treatment records: dates of your consultations, dispatch and tracking information, the emails we have sent you, and our notes on your homeopathic programme.
- Email preferences: if you unsubscribe from automated emails, we keep your email address on an unsubscribe list so that we do not email you again.
- Course waitlist: email address and sign-up date.
- Payment data: processed by Stripe. We do not store card details. Please review Stripe’s Privacy Policy.
- Website analytics: only if you click “Accept All” in the cookie banner, Google Analytics collects information about how you use the site, such as pages visited, device type, and approximate location.
3. How we use your data
- To respond to enquiries and follow up with potential patients.
- To prepare for your consultations and design your individual homeopathic programme.
- To fulfil orders, prepare and dispatch your remedies, and send you programme documents.
- To schedule consultations and send booking confirmations and reminders.
- To send emails that are part of your programme (confirmations, check-ins, reminders, and renewal offers towards the end of your programme), in the language you bought in.
- To notify course waitlist subscribers when courses launch.
- To keep records required for accounting and to show that consent was given.
- To understand how the website is used and improve it (only with your consent).
4. Legal basis for processing (GDPR)
We process your data on the following legal bases:
- Contractual necessity (Art. 6(1)(b)): to fulfil your order and deliver your homeopathic programme.
- Explicit consent for health data (Art. 9(2)(a)): we only process health information that you give us yourself, in the intake form and during consultations, and only to provide your homeopathic programme. You can withdraw this consent at any time by emailing us. Withdrawing it does not affect processing that took place before, but without health information we cannot continue your programme.
- Legal obligation (Art. 6(1)(c)): to keep accounting and tax records.
- Legitimate interests (Art. 6(1)(f)): to respond to enquiries, to keep a record of consent, and to respect unsubscribe requests.
- Consent (Art. 6(1)(a)): for the course waitlist and for analytics cookies. You can withdraw it at any time.
Health information is seen only by our homeopaths and is never sold or used for advertising.
5. Third-party processors
We use the following services to run our practice. Each processes data only on our instructions.
Some of these providers are based outside the EU, mainly in the United States. Where data is transferred outside the EU, it is protected by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.
Patient community on Facebook: Guided and Specialised patients can join our private Facebook group. Joining is voluntary. Anything you share there is processed by Meta under Meta’s Privacy Policy and is visible to other group members, so please share only what you are comfortable with.
6. Data retention
We retain personal data for as long as necessary to fulfil the purposes described above, and in any case no longer than 14 years, unless a longer retention period is required by law. Accounting records are kept for the period required by Czech law.
7. Your rights
Under EU GDPR, you have the right to: access your data, rectify inaccurate data, request erasure, restrict processing, data portability, object to processing, and withdraw any consent you have given at any time. To exercise any of these rights, please contact us at info@ciioh.com. We will respond within one month.
8. Cookies
Please see our Cookie Policy for details of cookies used on this site.
9. Contact & complaints
If you have any concerns about how we handle your data, please contact us at info@ciioh.com. You also have the right to lodge a complaint with your national data protection authority. In the Czech Republic this is the Office for Personal Data Protection (ÚOOÚ).