GDPR & Privacy Policy
I take your privacy seriously and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what personal data I collect, why I collect it, how it is stored, and your rights.
What Information I Collect
In order to provide a safe and effective treatment, I collect the following information:
- Full name and contact details
- Medical history and relevant health information
- Appointment and treatment records
- Emergency contact (if applicable)
Why I Collect Your Data
Your data is collected for the following reasons:
- To assess suitability for massage and tailor treatments accordingly
- To comply with professional and insurance requirements
- To maintain accurate records for continuity of care
- To contact you regarding bookings or changes to your appointment
Your data will never be used for marketing purposes without your explicit consent.
How Your Data Is Stored
All personal and medical information is stored securely, within ClinicSense. Your records will be retained for a period of 7 years, in line with professional insurance requirements, after which they will be deleted.
Sharing of Data
Your data will never be shared with third parties unless required by law or with your explicit consent (e.g. sharing relevant information with a healthcare provider if necessary and agreed).
Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate information
- Request deletion of your data (where permissible)
- Withdraw consent for data processing (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
If you would like to exercise any of these rights, please contact me directly.