PRIVACY POLICY - GENERAL DATA PROTECTION REGULATION (GDPR)
My details
Therapist’s name: Jeanette Barsalini
Therapist’s contact details:
Telephone no: 07967 569011
Email address: jeanette.barsalini@btinternet.com
Address: 3 West Avenue, Redhill, Surrey, RH1 5BA
Website: www.relaxingfeet.co.uk
The type of personal information we collect
To give professional reflexology and other therapy treatments, I will need to ask for and keep information about your health. I will only use this for informing reflexology and other therapy treatments and any advice I give because of your treatment.
The information to be held is:
• Your contact details
• Medical history and other health-related information
• Treatment details and related notes
How I get the personal information and why I hold it
Most of the personal information I process is provided to me directly by you for one of the following reasons:
• For informing reflexology and other therapy treatments and any advice I give because of your treatment.
• For the purposes of sending reminders for appointments
• For sending occasional newsletters via email
I use the information that you have given me in your initial consultation and follow up treatments to:
• Provide you with the best possible treatment options, support and advice.
• Send you reminders for appointments
• Send you occasional emails/newsletter-type updates
I may share this information with any person you give me permission to share it with. I do not share your information with any third party without your express permission.
Lawful basis for holding and using client information
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information are:
(a) I have a legal obligation:
1.1. ‘Claims occurring’ insurance: (records to be kept for 7 years after last treatment)
(b) I have a legitimate interest (i.e. my requirement to retain the information in order to provide you with the best possible treatment options and advice).
As I hold special category data (i.e. health related information), the additional condition under which I hold and use this information is: for me to fulfil my role as a health care practitioner (including specifically as a reflexology practitioner bound under the AoR Confidentiality requirement as defined in the AoR Code of Practice and Ethics).
Protecting your personal data - How I store your personal information
I am committed to ensuring that your personal data is secure. To prevent unauthorised access or disclosure, I have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information I collect from you. I will contact you using the contact preferences you have given me. I keep only manual paper-based client consultation forms for seven years. I will then dispose of your information by shredding paper-based client records, and I will delete your contact information on my devices once your treatments have concluded.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask me for copies of your personal information.
Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.
Please contact me using the contact details at the top of this page if you wish to make a request.
Therapist's rights
If you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you
Your therapist must keep your records of treatment for a certain period as described above, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed
Your therapist can move their records between their computers and IT systems without your permission if your details are protected from being seen by others.
How to Complain
If you have any concerns about my use of your personal information, please refer to my GDPR complaints procedure by requesting a copy via the contact details at the top of this page.
