Privacy Policy
Last updated: 18th December 2025
This Privacy Policy explains how The Harrogate Lactation Consultant (“we”, “us”, “our”) collects, uses, stores, and protects your personal data in accordance with:
UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Professional standards expected of an IBCLC and RCN member
---
1. Who We Are
The Harrogate Lactation Consultant is operated by Abbie Durrant-Milnes, an International Board Certified Lactation Consultant (IBCLC).
Professional membership:
NMC Registered Midwife Pin: 16G1258E
Member of the Royal College of Nursing (RCN)
Holds appropriate professional indemnity insurance
Location: Harrogate and District, UK
Email: harrogatelactationconsultant@gmail.com
For the purposes of data protection law, The Harrogate Lactation Consultant is the Data Controller.
---
2. What Personal Data We Collect
We may collect and process the following personal data:
a) Personal Information
Name
Email address
Phone number
Address (if required for home visits)
b) Health & Special Category Data
When you engage our services, we may collect health-related information about you and/or your baby, including:
Feeding history
Birth and medical background relevant to lactation
Infant growth or feeding concerns
This data is classed as special category data under UK GDPR and is handled with strict confidentiality.
c) Website & Contact Data
Enquiries submitted via contact forms or email
IP address and basic usage data (if website analytics are enabled)
---
3. How We Use Your Data
Your personal data is used to:
Respond to enquiries
Provide lactation consultations and ongoing support
Maintain accurate professional records
Arrange appointments and follow-up care
Comply with professional, legal, and insurance obligations
We will never use your data for purposes unrelated to lactation support.
---
4. Lawful Basis for Processing
We process personal data under the following lawful bases:
Consent – where you have given clear permission
Contract – to deliver services you have requested
Legal obligation – to comply with professional and regulatory requirements
Vital interests – where necessary to protect health and wellbeing
Substantial public interest – when handling safeguarding or health-related matters
Special category (health) data is processed in line with UK GDPR Article 9.
---
5. Confidentiality & Professional Standards
All client information is treated as confidential and managed in line with:
IBCLC Code of Professional Conduct
RCN professional standards
UK safeguarding and record-keeping guidance
Information will only be shared:
With your explicit consent, or
Where legally required (e.g. safeguarding concerns)
---
6. How We Store Your Data
Your data is stored securely using:
Password-protected devices
Encrypted digital storage (where applicable)
Secure paper records (if used)
We take reasonable steps to prevent unauthorised access, loss, or misuse.
---
7. How Long We Keep Your Data
Client records are retained in line with RCN guidance and professional indemnity requirements, typically for up to 8 years, or longer where legally required (for example, where a child is involved).
After this period, data is securely deleted or destroyed.
---
8. Sharing Your Data
We do not sell, rent, or trade personal data.
Data may be shared only when necessary, for example with:
Secure booking or communication platforms
Healthcare professionals (with consent)
Legal or regulatory bodies if required by law
Any third parties used are expected to comply with UK GDPR.
---
9. Your Data Protection Rights
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure (where applicable)
Restrict or object to processing
Request data portability
Withdraw consent at any time
To exercise your rights, contact [your email address].
---
10. Cookies
This website may use basic cookies to improve functionality and user experience. You can manage or disable cookies through your browser settings.
(If you use advanced tracking tools, a separate Cookie Policy is recommended.)
---
11. Complaints
If you have concerns about how your data is handled, please contact us first so we can resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: ico.org.uk
---
12. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time. The most recent version will always be published on this page.