YOUR PERSONAL INFORMATION - GENERAL DATA PROTECTION REGULATION (GDPR)
GDPR is bringing in new legal protection for personal information from May 2018. This tells you what personal information I gather via my website, and why, and what your rights are.
Therapist’s Name/Identity: Susie Macleod
Therapist’s Contact Details:
Email address: email@example.com
Data Controller Contact Details: Susie Macleod - firstname.lastname@example.org
The Purpose of processing Client Data, In order to give professional reflexology treatments, I will need to gather and retain
potentially sensitive information about your health. I will only use this information for informing reflexology treatments and associated recommendations concerning aspects of health and wellbeing which I will offer to you. I take basic contact details via my website
to allow me to contact you and handle bookings.
Lawful Basis for holding and using Client Information
As a full member of the Association of Reflexologists, I abide by the AoR Code of Practice and Ethics. The lawful basis under which I hold and use your information is
a) my legitimate interests i.e.my requirement to retain the information in order to provide you with the best possible treatment options and advice.
As I hold special category data (i.e. health related information), the Additional Condition under which I hold and use this information is: for me to fulfil my role as a health care practitioner bound under the AoR Confidentiality as defined in the AoR Code of Practice and Ethics.
What information I hold and what I do with it:
In order to give professional reflexology treatments, I will need to ask for and keep information about your health. I will only use this for informing reflexology treatments and any advice I give as a result of your treatment. The information to be held is:
• Your contact details
• Medical history and other health-related information (which I will take from you at first consultation)
• Treatment details and related notes (which I will take after each consultation)
I will NOT share your information with anyone else without explaining why it is necessary, and getting your explicit consent.
How Long I Retain Your Information for. I will keep your information for the following periods :
a) ‘claims occurring” insurance; (records to be kept for 7 years after last treatment)
b) records for a child to be kept until the child is 25 or if 17, when treated, then until aged 26.
Your data will not be transferred outside the EU without your consent.
©Copyright 2019 Association of Reflexologists