Serenity Sports and Holistic Massage Therapies Privacy Notice
In compliance with the General Data Protection Regulation
In my practice it is very important that you feel secure and confident in my handling of any personal and confidential information (data) that is held about you.
Personal data is held in compliance with the General Data Protection Regulation.
This personal data being in the form of details taken during your initial contact either via telephone, email or messenger and at the time of your first and subsequent treatments in the form of your client consultation sheet which I complete with you, and ask you to sign before your treatment, and at the beginning of any subsequent treatments. At no time is any of this information disclosed or passed to any third party. Consultation sheets are held in a secure cabinet to which only I (Jenny Hudson – owner of Serenity) have access.
This data, or information, includes such things as your name; date of birth; address; telephone number; email address, medical history and notes as provided by you at the time of initial consultation and during subsequent treatments, in relevance to your condition/reason for treatment. Data obtained for me to contact clients or to review your details/health conditions prior to subsequent treatments in order to ensure your treatment is appropriate/beneficial. Parental consent is required for anyone under the age of 16. You will be asked for your consent during initial consultation as to future contact preference (text; email etc).
All data is stored in compliance with the GDPR and a copy, or sight of which is accessible by the client at any time upon request by sending an email to Jenny Hudson at firstname.lastname@example.org or by written request.
Data is stored for 10 years from the date of initial consultation and signature. After this time your records, if no longer in use, will be destroyed. I will periodically check for any requirements or updates in compliance with current regulation.
Information is not shared with any third parties (save for in compliance with legal obligations; and only if required by law).
Covid-19 relevant GDPR update to follow.