What data / information do I hold about you?
This is the information I ask you for and about during your first and subsequent appointments such as:
Health history and related information
What do I do with this information?
In order to work professionally, fulfil my role as a healthcare practitioner, and offer you the best therapy and advise I can I keep records as above.
Your data is only used for the purpose of informing my treatments, therapies, associated recommendations, or the content of classes or workshops and methods I use teach, and contacting you as outlined below.
It is treated with the utmost confidentiality and it will never be disclosed to any third party without explaining why it is necessary and getting your consent, except where required to do so by law.
Your records will not be taken out of the EU.
How long do I keep your information?
I’m required to keep your information for a minimum period of 7 years following the last occasion on which treatment or advice was given.
I will contact you as appropriate, for example with appointment or class reminders, with requested information, in response to your contact via the contact form on my website, social media, or other electronic or other means.
I may contact you to ask how you are* I may also contact you with news, promotions, or something relevant I think you might be interested in. (It’s a manual system** but you can unsubscribe ie ask me not to at any time.)
* (you know just friendly like because I’m interested and care how you’re getting on)
** I don’t use a data processing mailing system
I might not be able to treat you or provide my services of healthcare, therapies, advice, recommendations or roles as workshop leader or tutor if you don’t agree to records and information being kept about you.
Under the GDPR you can ask for your records to be erased but I may have to keep them to fulfil my professional requirements.
I may need to move your records or contact information around (electronically, between computer and other devices, or physically move paper records) as long as precautions are in place to protect your data from being seen by anyone without your permission.
The GDPR gives you the following rights
The right of access – you can see the records held about you
The right to rectification – you can tell me to make changes to your records if it is incorrect or incomplete
The right to erasure / the right to be forgotten – you can ask for your records to be erased
The right to restrict processing – you can request limits on how I use the information held about you
The right to data portability – under some circumstances you can request your data to be copied and used in another system, it only applies when processing is carried out by automated means
The right to object – you can request that some of your information is not used or that it’s used only for certain purposes
The right not to be subject to automated decision making including profiling (I don’t use this)
Details of your rights can be found on the website https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you have any concerns about how your data is held or used please contact me detailing your concerns.
If you are dissatisfied with my response you can contact the Information Commissioners Office or find more information on their website ico.org.uk
Name and contact of ‘the controller’ – that’s me
38 Botts Way
Email: cheryl [at] cherylcolpman [dot] co [dot] uk
Phone: 01530 831798