Privacy policy  (01/05/18)

www.karenjonesreflexology.co.uk – Karen Jones

I am committed to ensuring that your privacy is protected. Should I ask you to provide certain information by which you can be identified, it will only be used in accordance with this privacy policy.  This policy sets out how I, Karen Jones (www.karenjonesreflexology.co.uk, karen@karenjonesreflexology.co.uk, 07773 188808), collect, use and protect any personal data that you provide via this website, by telephone, SMS text, email/electronic mail.

This policy is effective from May 1st 2018. It may change from time to time by updating this page, and you can check our website for the latest version or ask for a copy of the policy at any time by emailing karen@karenjonesreflexology.co.uk to ensure that you are happy with any changes.

GDPR is bringing in new legal protection for personal information from 25th May 2018. This tells you what personal information I hold and why, and what your rights are.

Therapist’s Name/Identity

Karen Jones karenjonesreflexology.co.uk

 

Data Controller Contact Details: Karen Jones – karen@karenjonesreflexology.co.uk

Therapist’s Contact Details:

Telephone No: 07773 188808 

Email address: karen@karenjonesreflexology.co.uk

Lawful Basis for holding and using Client Information

The lawful basis for this processing from May 25th 2018 is your consent.  The purpose of this processing is to understand your needs and provide you with a better service, and in particular for the following reasons:

The lawful basis under which I hold and use for information is:

  1.   My legitimate interests i.e.my requirement to retain the information in order to provide you with the best possible treatment options and advice.

2. My requirement to hold your information for the following legal reasons:

  1. ‘Claims occurring’ insurance: (records to be kept for 7 years after last treatment)
  2. Law regarding children’s records (records to be kept until the child is 25 or if 17 when treated, then 26)
  3. CNHC requirements to retain information for 8 years
  4. Therapist to keep internal record keeping, in line with safe treatment practice and insurance purposes.
  5. Arranging appointment, and bookings.
  6. Safe clinic practice.
  7. To process and accurately deliver any orders or services from this website or from the clinic.

As I hold special category data (i.e. health related information), the Additional Condition under which I hold and use this information is: for me to fulfil my role as a health care practitioner bound under the AoR. Confidentiality as defined in each of their respective Code of Practice and Ethics.

The Purpose of processing Client Data

I hold and use client data in order to provide you with the best possible treatment options, support  and advice.

What information I hold and what I do with it

I may collect the following information from clients/customers/students and potential clients/customers/students in order to give professional complementary therapy treatments and linked advice and products.

I will only use this for informing your requirements from me and this website and any advice I give as a result of your treatment and product purchases. The information to be held is:

  • Full name.
  • Contact information including email address, phone number, postal address, date of birth.
  • Emergency contact details.
  • Key health information relevant to safe clinic practice and treatment – including medical history and other health-related information.
  • Preference for receiving information by email/electronic mail, telephone, SMS text or all.
  • Treatment details and related notes.
 I will NOT share your information with anyone else (other than within my own practice, or as required for legal process) without explaining why it is necessary, and getting your explicit consent.

I will keep your information for the following periods, 7  years, in line with the lawful basis listed above.

Your data will not be transferred outside the EU without your consent.

I may periodically send promotional emails about events, special offers or other information which we think you may find interesting.

I will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.

Protecting Your Personal Data

I am committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, I have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information we collect from you.

I will contact you using the contact preferences you have given me.

Your Rights

GDPR gives you the following rights:

  • The right to be informed:
    To know how your information will be held and used (this notice).
  • The right of access:
    To see your therapist’s records of your personal information, so you know what is held about you and can verify it.
  • The right to rectification:
    To tell your therapist to make changes to your personal information if it is incorrect or incomplete.
  • The right to erasure (also called “the right to be forgotten”):
    For you to request your therapist to erase any information they hold about you
  • The right to restrict processing of personal data:.
    You have the right to request limits on how your therapist uses your personal information
  • The right to data portability: under certain circumstances you can request a copy of personal information held electronically so you can reuse it in other systems.
  • The right to object:.
    To be able to tell your therapist you don’t want them to use certain parts of your information, or only to use it for certain purposes.
  • Rights in relation to automated decision-making and profiling.
  • The right to lodge a complaint with the Information Commissioner’s Office:
    To be able to complain to the ICO if you feel your details are not correct, if they are not being used in a way that you have given permission for, or if they are being stored when they don’t have to be.

Full details of your rights can be found at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.

If you wish to exercise any of these rights, please email karen@karenjonesreflexology.co.uk

If you are dissatisfied with the response you can complain to the Information Commissioner’s Office; their contact details are at:  www.ico.org.uk

You also have the right to:
  • object to the use of your data for promotional purposes
  • access details of personal information which we hold about you, free of charge
  • have your personal data corrected promptly if you believe it is incomplete or incorrect

 

You can do this by emailing karen@karenjonesreflexology.co.uk or contacting us through https://karenjonesreflexology.co.uk.

 

Neal’s Yard Remedies

As an independent consultant for Neal’s Yard Remedies, a third-party link to my  shop is displayed on my website.

Any Neal’s Yard orders taken via this shop are  dispatched directly the customer.

As an independent consultant I receive an email showing me the items that have been purchased. Also the cost and the customer contact details.

All information is stored securely and will not be used for any marketing.

Do check Neal’s Yard Remedies consultant shop privacy policy before placing an order.

Therapist’s rights

Please note:

 

  • If you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you
  • Your therapist has to keep your records of treatment for a certain period  as described above, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed
  • Your therapist can move their records between their computers and IT systems, as long as your details are protected from being seen by others without your permission.

 

Security

I are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, I have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information  collected.

My website contains links to third party websites operating their own terms and conditions and privacy policies. Wellbeing Treatments is not responsible for any content on third party websites.

All personal information will be treated as confidential and will fully comply with the applicable UK Data Protection and Consumer Legislation.