Privacy Policy Reflexology

DATA PROTECTION

PRIVACY NOTICE 

 

Lisa Fossey Reflexology holds some information about you and this privacy notice outlines how that information is used, who I may share that information with and how I keep it secure. This notice does not provide exhaustive detail; however, I am happy to provide any additional information or explanation needed. Any requests for this should be sent to hello@lisafossey.com.  I keep my Privacy Notice under regular review and this Privacy Notice was last reviewed in September 2026.

​

The type of personal information I collect  

​

In order to give professional reflexology treatments, I will need to ask for and keep information about your health. I will only use this for informing reflexology treatments and any advice I give as a result of your treatment. The information to be held might include:

​

•       Your contact details

•       Medical history and other health-related information

•       Treatment details and related notes

 

How I get the personal information and why I hold it 

​

Most of the personal information I process is provided directly by you for informing reflexology treatments and any advice I give as a result of your treatment.  I use the information that you have given in order to provide you with the best possible treatment options, support and advice. 

​

I will keep information about you confidential.  I will only disclose your information with other third parties with your express consent with the exception of the following categories of third parties:

​

•       My registrant body, CNHC, and my professional association, AoR, for the processing of a complaint made by you

•       Any contractors and advisors that provide a service to me or act as my agent on the understanding that they keep the information confidential

•       Anyone to whom I may transfer my rights and duties under any agreement I have with you

•      Any legal or crime prevention agencies and/or to satisfy any regulatory request (eg, CNHC), if I have a duty to do so or if the law allows me to do so.

 

I will seek your express consent before sharing your information with your GP or other healthcare providers. However, if I believe that your life is in danger then I may pass your information onto an appropriate authority (such as the police, social services in the case of a child or vulnerable adult, or GP in case of self-harm) using the legal basis of vital interest.

 

Lawful Basis for holding and using client information 

​

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis I rely on for processing this information are:

(a)  Your consent. You are able to remove your consent at any time. You can do this by contacting  hello@lisafossey.com  ​

(b)  I have a contractual obligation ​​

(c)   I have a legal obligation: 

1.1.      ‘Claims occurring’ insurance: (records to be kept for 7 years after last treatment) 

1.2.      Law regarding children’s records (records to be kept until the child is 25 or if 17 when treated, then 26) 

1.3.      CNHC requirements to retain information for 8 years 

(d)  I have a vital interest ​

(e)  I need it to perform a public task

(f)   I have a legitimate interest [i.e. my requirement to retain the information in order to provide you with the best possible treatment options and advice].

​

As I hold special category data (i.e. health-related information), the additional condition under which I hold and use this information is for me to fulfil my role as a healthcare practitioner bound under the AoR Confidentiality as defined in the AoR Code of Practice and Ethics. 

​

How I store your personal information / protecting your personal data 

​

I am committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, I have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information I collect from you. 

 

I will contact you using the contact preferences you have given me. 

​

All records held by Lisa Fossey Reflexology will be kept for the duration specified by guidance from my professional association AoR and then destroyed appropriately by permanently deleting computer files and shredding any paper documents.

 

Your data protection rights 

​

Under data protection law, you have rights including:

 

Your right of access - You have the right to ask me for copies of your personal information.  

Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.  

Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances. 

Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.  

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances. 

Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances. 

​

You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you. Please contact me at hello@lisafossey.com if you wish to make a request. 

​

Therapist's Rights​

 

Please note: 

•       If you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you.   

•       Your therapist has to keep your records of treatment for a certain period, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed. 

•       Your therapist can move their records between their computers and IT systems, as long as your details are protected from being seen by others without your permission. 

​​​

Website technical details 

​

Forms 

​

I use electronic forms on my website making use of an available ‘forms module’ which has a number of built-in features to help ensure privacy. I also aim to use secure forms where appropriate. 

I use cookies to collect information about how visitors use my site. I use the information to compile reports and to help improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.

Cookies are small. I do not make use of cookies to collect any private or personally identifiable information. The technical platform of this website uses cookies solely to aid the proper technical functioning of the website. The cookies used contain random strings of characters alongside minimal information about the state and session of the website – which in no way collects or discloses any personal information about you as a visitor.

Advanced areas of this site may use cookies to store your presentation preferences in a purely technical fashion with no individually identifiable information. Note also my statement on analytics software below – as analytics software also uses cookies to function.

 

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org 

​

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout 

 

Analytics 

​

Like most websites, I make use of analytics software in order to help me understand the trends in popularity of my website and of different sections. I make no use of personally identifiable information in any of the statistical reports I use from this package. I use an analytics package called Google Analytics who provide details of their privacy policy on the Google website.

 

Complaints

​

I am committed to protecting your personal information and handling it responsibly. If you have any questions or concerns about how your personal data is processed, please contact me using the details provided in this Privacy Policy. I will do my best to address and resolve your concerns promptly. Please submit your complaint to hello@lisafossey.com.

​

If you are not satisfied with my response, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent authority for upholding information rights. Further information can be found on the ICO website at www.ico.org.uk.