Please find below information about how I will collect, store and use your data as a client of Sanctuary Sessions (formerly 'Space to Breathe Shiatsu'), and your rights as a client to access that data. This is in compliance with the General Data Protection Regulation (GDPR) that came into force on 25th May 2018.
COLLECTION AND STORAGE OF YOUR DATA
Initial Contact/Treatment Enquiries
Your contact details, and any correspondence between us, will be held securely on my computer and/or mobile devices.
Client Questionnaires
In order to provide as safe and tailored a treatment as possible, I ask each new client to complete a confidential questionnaire, which includes questions about health concerns and past medical history. You can decide how much or how little personal information you wish to give.
This questionnaire may be emailed to a new client in advance of the first treatment. If you return a completed questionnaire to me by email, I will print out a hard copy to keep, delete the email that contained the questionnaire and delete the document from the ‘downloads’ folder on my computer.
Treatment Records
I keep a paper record following each treatment. This includes notes on any presenting issues, what the treatment consisted of (such as meridians worked on and acupressure points selected), any client responses, and recommendations made for self-care if appropriate. This is both good practice and a requirement of the Shiatsu Society and my insurance company.
Storage of Client Questionnaires/Treatment Records
Client questionnaires and treatment records are stored in a locked filing cabinet in my home.
It is a requirement of my professional indemnity insurance that I keep client records for at least seven years following the last treatment, and provision is made for this under the GDPR (complying with insurance terms and conditions).
Deletion of Records
Client questionnaires and treatment records will be shredded securely, when the seven year retention period has lapsed.
USES MADE OF THE INFORMATION
Third Parties/Data Sharing
Information received from a client is held for treatment purposes only. I will not share any of your details (including contact details) with third parties.
The one exception to this would be if I believed it was in your best interest to share information with your GP, and would do so with your permission.
Other Contact
With your written consent, I may send (via your preferred method of contact):
- further information and/or recommendations for self-care following a treatment;
- occasional information that may be of interest to you, particularly relating to any health conditions;
- occasional information regarding changes to the service, such as treatment room opening hours.
You can choose to opt out of receiving further information at any time, by emailing me at alison@sanctuarysessions.co.uk or by writing to me at: The Chapel Allerton Holistic Centre, 144 Harrogate Road, Leeds LS7 4NZ.
ACCESS TO DATA/AMENDMENTS/COMPLAINTS
Access to Your Own Record/Amendments
A client has a right to access personal information held about them. Should you wish to see your notes, or have a copy of them, please contact me as above and I will arrange this for you.
If you wish for any of your details to be amended or updated, please contact me.
Amendments to this Privacy Policy
Any changes made in the future to this Privacy Policy will be posted here.
Right to Complain
If you have any concerns about how your data has been handled, please contact the Information Commissioner’s Office at: https://ico.org.uk/concerns/ or by phone on 0303 123 1113.
Privacy Policy