Vitality Holistic Therapies Privacy Notice
The processing of personal data is governed by the General Data Protection Regulation 2018 (GDPR). This privacy notice provides information about the type of personal information I may collect and retain about you, and your rights under this regulation.
1. Contact details
Name: Alison Hastings
Business name: Vitality Holistic Therapies
Business Address: Grierson House, Crichton Business Park, Bankend Road, Dumfries, DG1 4ZS.
Mobile Number: 07587 866445
Email Address: vitalityholistics@outlook.com
2. The type of personal information I collect
I currently collect and process the following information:
- Contact information such as name, address, telephone number, email address.
- Date of birth.
- Health and medical information.
- Appointment assessment and treatment information.
3. How I get the personal information and why I have it
Most of the personal information I process is provided to me directly by you or for you for one of the following reasons:
- I use your contact information to make or rearrange appointments, to send reminders and to advise you of important business information/ updates.
- I use your contact information to send you marketing and promotional material, only with explicit consent.
- I may use your date of birth to help identify clients.
- Clients or prospective clients are asked to complete a medical consultation form either as a paper copy or online within a client booking system for the purpose of determining and delivering the most appropriate and safe treatment plan.
- I keep a record of appointment assessment findings and treatments performed to support a review of progress or change, or to provide evidence in the event of a complaint or insurance claim.
Under the General Data Protection Regulation (GDPR), the lawful bases we reply on for processing this information are:
- Your consent. You can remove your consent at any time. You can do this by contacting me using the contact details provided at paragraph 1 above.
- I have a legitimate interest.
Your personal data will be treated as confidential. I will not share your personal information with anyone without your written consent.
4. How I store your personal Information
Your personal information is securely stored.
- Paper records are stored within a locked filing cabinet. The clinic and building are locked out with working hours.
- Electronic records are held on a booking system, which is fully data compliant, and password protected.
I will keep your personal information for a period of 10 years from the date of treatment in accordance with insurance obligations. I then will dispose your information by deleting electronic records or by shredding paper records.
5. Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask me for copies of your personal information.
Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you. Please contact me using the contact details at paragraph 1 above if you wish to make a request.
6. How to complain
If you have any concerns about my use of your personal information, you can make a complaint to me using the contact details noted at paragraph1 above.
You can also complain to the ICO if you are unhappy with how I have used your data. The ICO’s address:
The Information Commissioner’s Office – Scotland, Queen Elizabeth House, Sibbald Walk, Edinburgh, EH8 8FT.
Telephone: 0303 123 1115
Email: Scotland@ico.org.uk