The Ropley Retreat
Little Mount, Church Street, Ropley, Hampshire S024 0DP
The new General Data Protection Regulation (GDPR) came into force on 25th May 2018 and will replace the Data Protection Act 1998. This regulation requires The Ropley Retreat to provide information given in the Privacy Notice. This provides information on:
-How I use your data
-How you can control the way in which I use your data and
-What actions you can take if you would like to change the way in which your data is being used.
-How I gather information
I complete a consultation form, on your first visit, which includes a health questionnaire to ensure I can perform treatments safely and to ensure the best results. I will also take your contact details. This will be your email address, telephone number and address. You will sign this form to show you are happy for me to retain this data for insurance and reference purposes.
What I do with your data
The data is held in a locked cupboard in my treatment room and is only accessed by myself. I also hold your email address on my laptop so that I can send you information on a very occasional basis or to contact you about appointments. I have your telephone numbers on my phone to be able to communicate with you in regards to appointments or questions that may arise.
Protecting your data
Your data is kept secure in a locked cabinet. My laptop and my phone are password protected and cannot be accessed by a third party unless required to do so by law.
How long do I keep your data?
In accordance with my insurance company I will keep your data for 7 years. However if you would like to be removed from my mailing list or phone contacts then please email me to let me know and I will remove them immediately.
The law requires me to tell you the legal basis upon which I process your data.
This law allows me to process your data if it is in my legitimate interest to do so. I may only do so if we can demonstrate a business need and so long as your “interests or your fundamental rights and freedoms are not over ridden”. In essence, this means that I carry out an exercise to check that I will not cause you harm by processing your data, that the processing is not overly intrusive and that we will only do so in a way which is described in the Privacy Notice.
You have a variety of rights about the way in which I process your data. These are as follows:
-Where I rely on my legitimate interest to process data, you may ask me to stop doing so.
-You may request a copy of the data that I hold about you.
-You may ask me to cease sending you information.
-You may change or stop the way in which I communicate with you or process data about you and if it is not required for the purpose for which you provided it, then I will do so for you.
-If you are not satisfied with the way I have processed your data, then you can complain to the Office of the Information Commisioner.
If you have any questions about the Privacy Notice, about the way I process your data, or if you wish to change the way I use your data, including how I communicate with you, then please email me at firstname.lastname@example.org