I, Rowena Hayes respect your privacy and I have prepared this statement to help you understand how I deal with your personal information. I have set out how and why I collect, hold, use and manage your information. I may update this Privacy Policy periodically as required and the latest version printed out and made available to you.
I collect personal information in a number of ways:
I collect your personal information for the following purpose:
Name; Age; Address; Email address; Phone number – for contacting you about appointments.
Doctors details – if I was concerned that you were at risk that I may need to contact your doctor, with your permission.
Medications – it is essential for me to take account of medications you are prescribed by your doctor. This is to understand the side effects the medicinal drugs you are taking and to how they increase the sensitivity of different reflex points.
Allergies – it is important for me to know if you are allergic to some of the products I will be using on our treatment sessions.
Presenting conditions – So I would know your reason for reflexology and for me to be able to give emphasis to some problematic reflex areas though I treat the whole feet
Session notes – I keep brief notes of our sessions on paper; these are stored in a locked filing cabinet.
Consultation forms – which contain all the outlined data mentioned above, personally filled out by you the client, are stored in a locked filing cabinet.
I do not provide Personal Information to third parties. It is very unlikely I will share your data. I may have to share information if subpoenaed by court.
Paper data is kept in the locked filing cabinet.
Mobile phone numbers are saved into my phone contacts which I only have access to.
Correspondence made through Facebook messenger are stored in my Facebook messages in my phone, laptop and tablet which all have PIN and passwords which I only know and have access to.
I am obliged to keep your session notes for 7 years after you have finished working with me, after which I remove all contact information and destroy the files.
Under the General Data Protection Regulation, you as a data subject have a number of rights which are detailed below. Some of these only apply in specific circumstances and are qualified in several respects by exemptions in data protection legislation. I will advise you in our response to your request if I am relying on any such exemptions: