Privacy Policy April 2021
Body-Mind-Unwind
Susannah Nelson
(Why we collect your personal data and what we do with it)
When you supply your sensitive personal details to Body -mind- unwind via email, Booking form via Acuity square space sgheduling my websites or social media or phone they are stored and processed for 4 reasons , seen below in bold are the relevant terms used in the General Data Protection Regulation – ie the law)
Special category data(which includes health information I have to satisfy various conditions one of which states;
”processing is necessary for the purpose of medical diagnosis, the provision of health or social care”
GPPR. Article 9. para2(h)
1. I need to collect personal information about your health & medical history in order to provide you with the best Possible treatment .Your requesting treatment and our agreement to provide that care constitutes a contract.
You can, of course, refuse to provide the information, but if you were to do that I would not be able to provide treatment.
2. I have a “Legitimate Interest” in collecting that information, because without it I couldn’t do my job effectively and safely as your Massage & bodywork therapist or Body Mind Unwind Yoga teacher
3. I need to contact you in order to confirm your appointments, class dates payment details & to update you on matters related to your medical and health care. To be able to email or send you exercises and information related to you current condition. This again constitutes “Legitimate Interest”, but this time it is your legitimate interest.
4.have a legal obligation to retain your records for 7 years after your most recent appointment (or age 25, if this is longer) but after this period you can ask me to delete your records if you wish.
5. Provided I have your consent, I may occasionally send you general health information in the form of clinic updates articles, advice or occasional newsletters. You may withdraw you consent at any time - let me know by email here: susannah@bodymindunwind.co.uk
Your records are either stored* on paper, in locked filing cabinets, electronically (“in the cloud”) Via Dropbox This provider has given us their assurances that they are fully compliant with the General Data Protection Regulations. Access to this data is password protected, and the passwords are changed regularly. On my computer which is password protected.
I will never share your data with anyone who does not need access without your consent Only the following people/agencies will have routine access to your data:
Myself or another Named Practitioner as discussed and agreed with you to who I may be referring you too, or we are combining a treatment session Clinic reception admin staff, because they may need to rearrange an appointment with you on my behalf or let you know about class changes and coordinate appointments and reminders (but they do not have access to your medical history or sensitive personal information) Other administrative staff, such as a bookeeper and my online accounting system. They will not have access to your medical notes, just your essential details.
I also use Mailer lite system to send updates on classes, workshops and treatments. You will always have the option to op out with an unsubscribe button on the bottom of the email .
From time to time, I may have to employ consultants to perform tasks which might give them access to your personal data (but not your medical notes). We will ensure that they are fully aware that they must treat that information as confidential, and we will ensure that they sign a non-disclosure agreement.
You have the right to see what personal data of yours we hold, and you can also ask us to correct any factual errors. Provided the legal minimum period has elapsed, you can also ask us to erase your records.
I want you to be absolutely confident that I am treating your personal data responsibly, and that I am doing everything I can to make sure that the only people who can access that data have a genuine need to do so. Of course, if you feel that I have mishandling your personal data in some way, you have the right to complain. Complaints need to be sent to what is referred to in the jargon as the “Data Controller”. Here are the details you need for that:
Susannah Nelson email susannah@bodymindunwind.co.uk
Contact number: 07939056870 Address: 54 Wood Street Newark, Notts, NG241PN
If you are not satisfied with my response, then you have the right to raise the matter with the Information Commissioner’s Office.