Privacy Policy
This policy explains how I collect, use, and protect your personal information in line with the UK General Data Protection Regulation (GDPR)
1. What Information I Collect
I may collect the following information when you book or receive a treatment:
-
Your name, date of birth, and contact details
-
Medical history,
-
lifestyle, and treatment notes (as relevant to your therapy)
-
Payment details (where required)
-
Communication records (emails, messages, forms)
2. Why I Collect This Information
Your information is collected to:
-
Provide safe, appropriate, and effective treatments
-
Contact you regarding appointments, aftercare, or updates
-
Maintain secure client records as required by professional and insurance standards
-
Meet any legal or regulatory requirements
3. How Your Data is Stored
-
Digital records will be stored using a cloud based password-protected system.
-
Only the practitioner(s) directly involved in your care have access.
The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorised alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you provide us and you do so at your own risk.
4. How Long Records Are Kept
-
Adult records: kept for a minimum of 7 years after last treatment (legal requirement).
-
After this time, records are securely destroyed.
5. Sharing of Information
-
Your data will never be sold or shared for marketing.
-
Information will only be shared with your consent (e.g. referral to another professional) or if legally required (e.g. safeguarding, court order)
6. Your Rights
-
Under GDPR you have the right to:
-
Access the personal data I hold about you
-
Request corrections to inaccurate data
-
Request erasure of your data (within legal/insurance limits)
-
Withdraw consent for non-essential communication at any time
-
Requests can be made in writing, and I will respond within 30 days.
7. Contact
If you have any questions or concerns about your data, please contact:
Practitioner Emma Wells IPHM Enlightened Sound
07535956985
If you have any concerns, you have the right to complain to the UK's data protection supervisory authority, the Information Commissioner's Office (ICO