Privacy Policy Reflexology

DATA PROTECTION

PRIVACY NOTICE 

 

Lisa Fossey Reflexology holds some information about you and this privacy notice outlines how that information is used, who we may share that information with and how we keep it secure. This notice does not provide exhaustive detail; however, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to hello@lisafossey.com.  We keep our Privacy Notice under regular review and this Privacy Notice was last reviewed in September 2024.

​

The type of personal information we collect  

​

In order to give professional reflexology treatments, I will need to ask for and keep information about your health. I will only use this for informing reflexology treatments and any advice I give as a result of your treatment. The information to be held might include:

​

•       Your contact details

•       Medical history and other health-related information

•       Treatment details and related notes

 

How we get the personal information and why we hold it 

​

Most of the personal information we process is provided to us directly by you for informing reflexology treatments and any advice I give as a result of your treatment.  We use the information that you have given us in order to provide you with the best possible treatment options, support and advice. 

​

We will keep information about you confidential.  We will only disclose your information with other third parties with your express consent with the exception of the following categories of third parties:

​

•       Our registrant body, CNHC, and our professional association, AoR, for the processing of a complaint made by you

•       Any contractors and advisors that provide a service to us or act as our agents on the understanding that they keep the information confidential

•       Anyone to whom we may transfer our rights and duties under any agreement we have with you

•      Any legal or crime prevention agencies and/or to satisfy any regulatory request (eg, CNHC), if we have a duty to do so or if the law allows us to do so.

 

We will seek your express consent before sharing your information with your GP or other healthcare providers. However, if we believe that your life is in danger then we may pass your information onto an appropriate authority (such as the police, social services in the case of a child or vulnerable adult, or GP in case of self-harm) using the legal basis of vital interest.

 

Lawful Basis for holding and using client information 

​

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:

(a)  Your consent. You are able to remove your consent at any time. You can do this by contacting  hello@lisafossey.com  ​

(b)  We have a contractual obligation ​​

(c)   We have a legal obligation: 

1.1.      ‘Claims occurring’ insurance: (records to be kept for 7 years after last treatment) 

1.2.      Law regarding children’s records (records to be kept until the child is 25 or if 17 when treated, then 26) 

1.3.      CNHC requirements to retain information for 8 years 

(d)  We have a vital interest ​

(e)  We need it to perform a public task

(f)   We have a legitimate interest [i.e. my requirement to retain the information in order to provide you with the best possible treatment options and advice].

​

As I hold special category data (i.e. health-related information), the additional condition under which I hold and use this information is for me to fulfil my role as a healthcare practitioner bound under the AoR Confidentiality as defined in the AoR Code of Practice and Ethics. 

​

How we store your personal information / protecting your personal data 

​

I am committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, I have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information we collect from you. 

 

I will contact you using the contact preferences you have given me. 

​

All records held by Lisa Fossey Reflexology will be kept for the duration specified by guidance from our professional association AoR and then destroyed appropriately by permanently deleting computer files and shredding any paper documents.

 

Your data protection rights 

​

Under data protection law, you have rights including:

 

Your right of access - You have the right to ask us for copies of your personal information.  

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.  

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.  

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances. 

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. 

​

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at hello@lisafossey.com if you wish to make a request. 

​

Therapist's Rights​

 

Please note: 

•       If you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you.   

•       Your therapist has to keep your records of treatment for a certain period, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed. 

•       Your therapist can move their records between their computers and IT systems, as long as your details are protected from being seen by others without your permission. 

​​​

Website technical details 

​

Forms 

​

We do use electronic forms on our website making use of an available ‘forms module’ which has a number of built-in features to help ensure privacy. We also aim to use secure forms where appropriate. 

We use cookies to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.

Cookies are small. We do not make use of cookies to collect any private or personally identifiable information. The technical platform of this website uses cookies solely to aid the proper technical functioning of the website. The cookies used contain random strings of characters alongside minimal information about the state and session of the website – which in no way collects or discloses any personal information about you as a visitor.

Advanced areas of this site may use cookies to store your presentation preferences in a purely technical fashion with no individually identifiable information. Note also our statement on analytics software below – as analytics software also uses cookies to function.

 

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org 

​

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout 

 

Analytics 

​

Like most websites, we make use of analytics software in order to help us understand the trends in popularity of our website and of different sections. We make no use of personally identifiable information in any of the statistical reports we use from this package. We use an analytics package called Google Analytics who provide details of their privacy policy on the Google website.

 

Complaints

​

If you have a complaint regarding the use of your personal data then please contact us by emailing the Data Controller at hello@lisafossey.com and we will do our best to help you.

​

If your complaint is not resolved to your satisfaction and you wish to make a formal complaint to the Information Commissioner’s Office (ICO), you can contact them on 01625 545745 or 0303 1231113.