Privacy Policy

PRIVACY & CONSENT NOTICE – GENERAL DATA PROTECTION REGULATION (GDPR)

GDPR is legal protection for Personal Information. This page tells you what Personal Information I will hold about you and why; also how to access information about your rights. If you come to me for treatment you will asked to complete and sign a copy of this information.

The Purpose of processing Personal Information

I hold and use Personal Information in order to provide you with the best possible treatment options, support and advice.

Lawful Basis for holding and using Personal Information

The lawful basis under which I hold and use Personal Information is in order to provide you with the best possible treatment options and advice.

For insurance purposes I am required to hold this information for 7 years after the last treatment.

For a child until the age of 25 or if 17 when treated then 26

As I hold special category information (i.e. health related information), the Additional Condition under which I hold and use this information is for me to fulfil my role as a health care practitioner, bound by the Association of Reflexologists (AoR)and International Federation of Aromatherapists (IFA) Confidentiality as defined in the AoR and IFA Code of Practice and Ethics.

What information I hold and what I do with it

In order to give professional reflexology treatments, I need to ask for and keep information about your health. I will only use this to inform reflexology treatments and any advice I give as a result of your treatment. The information held is:

  • Your contact details (name, address, phone numbers, email address)
  • Medical history and other health-related information in hand written form
  • Treatment details and related notes in hand written form

I will NOT share your information with anyone else, without explaining why it is necessary, and NOT without getting your explicit consent.

Protecting Your Personal Data

Your personal information is secure and confidential. All treatment notes are hand written and kept in a secure environment; only contact details are held on computer and are password protected.

Your Rights

Full details of your rights are available from the Information Commissioner’s Office at:

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/