Privacy Policy
The personel Information we collect
The information collected refers to personal information, such as Name, Address, Date of Birth and Medical History. In addition to all treatment notes, treatment plans and email correspondence.
How & why we collect personal information
Personal information is collected from the client through verbal & written channels. Treatment notes are created with the information provided through the physical treatment mode. All information is gathered as per therapy guidelines and clinic record-keeping protocols (Consent, Legal & Contractual).
No information is shared with a third party without the individual’s consent. Unless this contradicts current Safeguarding Protocols. Any personal information collected is with the explicit consent of the individual recipient.
Legal bases for processing personel information.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
Your Consent. You can remove your consent at any time. You can do this by contacting Dawn Lean via email at sunshinehealingfabfeeling, or by calling 07711062664
We have contractual obligations.
We have a legal obligation.
How your personal information is stored
Here at Sunshine Holistic Therapy, we take your privacy and confidentiality seriously. All information gathered is stored electronically only. Records are kept for 8 years from the date of last treatment.
All personal information and treatment notes are stored as per GDPR, on a removable password-encrypted device which is stored when not in use in a locked cupboard, there are also a minimum of 2 additional locked doors from its location to the exterior of the business.
Your rights under GDPR Regulation
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification –You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure –You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing –You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing –You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability –You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.