Lisa H Body Therapies privacy statement:

From 25th May 2018 European legislation (GDPR - General Data Protection Regulations) brought in revisions to privacy policies for the protection of an individual’s data. This is a positive and welcome change to keep our data safe and to ensure that active consent is obtained with regards to how we may contact you.

The privacy policy statement below tells you what personal information is held about you, what I do with it, and your rights.

What data/information do I hold about you?

This is the information I ask you for during your initial appointment and I check for any changes / updates at all appointments:

• Contact details
• Background history and related information including medical and medication details
• Treatment notes that I use to summarise your appointments

What do I do with this information?

I keep these records in order to work professionally, fulfil my role as a clinical therapist, and to offer you the best assistance I can.

Your information is only used for the purpose of informing your therapy appointments.

With your specific agreement, if we discuss exercises or stretches for you to complete at home, I may send information for your reference to you by email.

If for any reason you also seek additional support from either a doctor, consultant or other therapist (e.g. an Chiropractor or Osteopath), if requested by you, I will share details of your treatments to date to assist with your on-going treatment.

Your information is treated with the utmost confidentiality and it will never be disclosed to any third party without explaining why this may be necessary and getting your consent, except where required to do so by law.​

Your information will not be taken outside of the EU.

How long is your information retained for?

I am required to keep your information for a minimum period of 7 years following your last therapy appointment with me. If you are under 18 then records will be kept for a period of 7 years from when you turn 18.

When the 7 year retention period is complete any electronic records about you will be deleted and any paper records will be destroyed in a confidential manner (shredding or burning).

Contact information

I will contact you as appropriate, for example; with appointment reminders, with requested information, in response to your contact via the contact form on our website, social media, or other electronic or other means.

I may contact you to ask how you are following a treatment, if you have not attended a session and have not made any contact to ensure you are ok and to enquire if you wish to book another appointment.

Your rights

I will not be able to provide therapy appointments if you do not agree to records and information being kept about you.

Under the GDPR you can ask for your records to be erased but I will have to keep basic information to fulfil my professional requirements.

I may need to move your records or contact information around (electronically, between computers and other devices, or physically move paper records). Steps and precautions will be taken to protect your information to ensure it is safe, and to ensure is not seen by anyone without your permission.

The GDPR gives you the following rights

• The right to be informed – this is how your information is stored and used (as set out here in this privacy policy).
• The right of access – you can see the records held about you.
• The right to rectification – you can tell us to make changes to your record if it is incorrect or incomplete.
• The right to erasure/the right to be forgotten – you can ask for your records to be erased but please be aware that we may have to maintain basic information to fulfil our professional and legal requirements.
• The right to restrict processing – you can request limits on how we use the information held about you.
• The right to data portability – under some circumstances you can request your data to be copied and used in another system, this only applies when processing is carried out by automated means.
• The right to object – you can request that some of your information is not used or that it’s used only for certain purposes.
• The right not to be subject to automated decision making including profiling - this is not something that I do.

​Details of your rights can be found on the website https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.

If you have any queries or concerns about how your information is held or used please contact me detailing your concerns. If you are dissatisfied with my response you can contact the Information Commissioners Office or find more information on their website ico.org.uk.

Name and contact details for ‘the controller’ and 'the processor' of the information: Lisa Humphreys.

Please see the ‘contact’ information on this website if you wish to contact me about any of this.