This policy informs you of your privacy rights and describes how I gather, process and share information about you, that you have provided as a result of working with me and receiving my energy healing and coaching services.
Shirley Climpson is the data controller and responsible for your personal data.
What data I collect and how it is used
Personal data is that which can identify you as an individual and data I collect about you is for my legitimate business interests.
This includes contact data when you make an enquiry for my services or message me on social media for information about my services as well as phone number, email and home addresses as a means of contact if you choose to work with me.
I process personal sensitive data in the form of collecting a completed client questionnaire relating to your health history and other relevant information for the purpose of identifying areas of concern for healing or for personal development strategies to enable an increase in well being. This information is recorded and securely stored on a password protected computer or, if on paper, in a securely locked box on the premises.
For any client under the age of 16, their personal information will only be stores with the consent of a parent or guardian.
Financial data: Payment for services is made via direct transfer and data is encrypted by my bank, Santander, and bank details stored electronically on the account page.
Where your information is stored
Your information is stored on a client questionnaire form, completed before your first appointment, containing health and personal information, and stored securely either electronically or on paper and locked in a file on the premises. This form is updated during subsequent visits. Contact details are stored for the purpose of contacting you about legitimate business with you, such as feedback after an appointment or making further appointments. My computer and mobile phone are password protected to avoid anyone from being able to access this information. Your email address will be stored within my gmail account.
How long your personal and sensitive personal data is kept for
For tax purposes I am obliged to keep your data for a minimum of 6 years after the date of the last session – records will be kept while you continue to have sessions with me. After 6 years your information is deleted from my computer and any paper data is shredded. If you would prefer this data to be shredded sooner then please contact me at [email protected]
I do not share your data with any third parties for marketing purposes.
Sharing your data
I do not share any of my clients’ data for third party marketing. The only time your data would be shared is when it is in my legitimate interest to help run my business such as when my financial records are shared with my accountant purely to process my tax return.
My full details are:
Postal address: 36 Oakley Avenue, Rayleigh, Essex, SS69TE
Email: [email protected]
I may need to update this policy at any time and without notice. This policy was last updated on July 28th 2018.
It is important that any information I hold about you is accurate so if there are any changes to your personal information, please contact me via email – [email protected]
Under the Data Protection Act 2018 you have a number of rights in relation to the use of your personal data. These include:
The right of access to your personal data
The right to request correction to your personal data
The right to object to the processing of your personal data
The right to restrict the processing of your personal data
The right of erasure of your personal data
The right to request to transfer your personal data
The right to withdraw consent
You can exercise your rights at any time. There will not be a fee to process these requests, however, a reasonable administration fee may be charged if requests are repetitive or excessive. If you wish to exercise any of these rights, please email [email protected]
If you require further information on Individual Rights you can find this at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
In exercising your individual rights, in some situations I may be unable to fully meet your request, for example, if you make a request to delete all your personal data, I may be required to retain some data for taxation purposes.
If you are not happy with any aspect of the way in which I process your personal data, you have the right to complain to the Information Commissioner’s Office (www.ico.org.uk) the UK supervisory authority for data protection issues. However, I would appreciate the chance to resolve any concerns you may have before contacting the ICO so please contact me for further assistance.