Abbe Oxley Reflexology Privacy Policy
My contact details
Name: Abbe Oxley
Phone Number: 07971882758
E-mail: abbeoxleyreflexology@gmail.com
Website: wwwabbeoxleyreflexology.com
The type of personal information I collect
To give professional reflexology treatments, I will need to ask for and keep information about your health. I will only use this for informing reflexology treatments and any advice I give because of your treatment. The information to be held is:
- Your contact details
- Medical history and other health-related information
- Treatment details and related notes on each session
How I take the personal information and why I hold it
I will complete a health consultation form on your first session with me and then I will add notes to this every time I see you relating to your session with me and any updated health information. This may include any advice I may give you.
I use the information that you have given me to:
- Provide you with the best possible treatment options, support and advice.
- I do not share this information with any third party.
- This information is NOT held on any computer and is kept on paper in a locked cabinet and no one else has access to.
Lawful Basis for holding and using Client Information
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:
- Your consent. You can remove your consent at any time. You can do this by contacting me on the details at the top of this form.
- I have a contractual obligation
- I have legal obligation:
- ‘Claims occurring’ insurance: (records to be kept for 7 years after last treatment)
- Law regarding children’s records (records to be kept until the child is 25 or if 17 when treated, then 26)
- CNHC requirements to retain information for 8 years
- I have a vital interest (to protect life/prevent serious harm)
- I have a legitimate interest – in order to provide you with the best possible treatment specific to you and your health needs.
- As I hold special category data (i.e. health related information), the additional condition under which I hold and use this information is: for me to fulfil my role as a health care practitioner bound under the AoR Confidentiality as defined in the AoR Code of Practice and Ethics.
Protecting your Personal Data - How I store your personal information
I am committed to ensuring that your personal data is secure. To prevent unauthorised access or disclosure, I have put in place appropriate physical procedures to safeguard and secure the information I collect from you. I will contact you using the contact preferences you have given me.
I keep paper records for 8 years after your last treatment, if a child client, until the child is 25 or if 17 when treated, then 26. I will then dispose of your information by shredding it.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask me for copies of your personal information.
Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that I transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you. Please contact me via mobile: 07971882758 or E-mail: abbeoxleyreflexology@gmail.com. if you wish to make a request.
THERAPIST’S RIGHTS
If you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you
Your therapist must keep your records of treatment for a certain period as described above, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed
Your therapist can move their records between their computers and IT systems without your permission if your details are protected from being seen by others.
How to complain
If you have any concerns about my use of your personal information, please refer to my GDPR Complaints Procedure which I can either give you in person or email to you.
