Your privacy and what I do with your data
Lisa H Body Therapies privacy statement:
From 25th May 2018 European legislation (GDPR - General Data Protection Regulations) brought in revisions to privacy policies for the protection of an individual’s data. This is a positive and welcome change to keep our data safe and to ensure that active consent is obtained with regards to how we may contact you.
The privacy policy statement below tells you what personal information is held about you, what I do with it, and your rights.
What data/information do I hold about you?
This is the information I ask you for during your initial appointment and I check for any changes / updates at all appointments:
What do I do with this information?
I keep these records in order to work professionally, fulfil my role as a clinical therapist, and to offer you the best assistance I can.
Your information is only used for the purpose of informing your therapy appointments.
With your specific agreement, if we discuss exercises or stretches for you to complete at home, I may send information for your reference to you by email.
If for any reason you also seek additional support from either a doctor, consultant or other therapist (e.g. an Chiropractor or Osteopath), if requested by you, I will share details of your treatments to date to assist with your on-going treatment.
Your information is treated with the utmost confidentiality and it will never be disclosed to any third party without explaining why this may be necessary and getting your consent, except where required to do so by law.
Your information will not be taken outside of the EU.
How long is your information retained for?
I am required to keep your information for a minimum period of 7 years following your last therapy appointment with me. If you are under 18 then records will be kept for a period of 7 years from when you turn 18.
When the 7 year retention period is complete any electronic records about you will be deleted and any paper records will be destroyed in a confidential manner (shredding or burning).
Contact information
I will contact you as appropriate, for example; with appointment reminders, with requested information, in response to your contact via the contact form on our website, social media, or other electronic or other means.
I may contact you to ask how you are following a treatment, if you have not attended a session and have not made any contact to ensure you are ok and to enquire if you wish to book another appointment.
Your rights
I will not be able to provide therapy appointments if you do not agree to records and information being kept about you.
Under the GDPR you can ask for your records to be erased but I will have to keep basic information to fulfil my professional requirements.
I may need to move your records or contact information around (electronically, between computers and other devices, or physically move paper records). Steps and precautions will be taken to protect your information to ensure it is safe, and to ensure is not seen by anyone without your permission.
The GDPR gives you the following rights
Details of your rights can be found on the website https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you have any queries or concerns about how your information is held or used please contact me detailing your concerns.
If you are dissatisfied with my response you can contact the Information Commissioners Office or find more information on their website ico.org.uk
Name and contact details for ‘the controller’ and 'the processor' of the information:
Lisa Humphreys
Please see the ‘contact’ information on this website if you wish to contact me about any of this.
