PLEASE READ CAREFULLY,  IF YOU DO NOT ACCEPT THESE TERMS, YOU ARE ADVISED NOT TO USE THE WEBSITE

Use of this website, www.craniosacralworcester.co.uk, constitutes your legal agreement to the terms within this policy and your acceptance of this policy is deemed to occur upon your first use of the website.

Charlotte Burbidge may change this policy from time to time by updating this page. You should check this page before using the website to ensure that you are aware of and accept any changes.

What personal data do I collect?

Information that you provide to me is retained and processed in accordance with UK data protection legislation. This includes information you provide when you purchase a session or submit a contact form or email to me.

Contact: I have Contact Forms which are used to collect your name, email and phone number as well as your message, or other information so that I can contact you and provide details of my services to you, make bookings, confirm bookings and deal with general enquiries. Data is held on the grounds of being legitimate to my business interests and in order to provide my services to you.

Booking Forms: I use Appointlet for appointment bookings
which are used to collect your name, email and phone number, data of birth, pre-appointment information and any health information you wish to share, as well as your message, or other information so that I can contact you and provide details of my services to you, make bookings, confirm bookings and deal with general enquiries. Data is held on the grounds of being legitimate to my business interests and in order to provide my services to you. Appointlet is also connected to Google Calendar and Google Sheets within my Google Drive which is secured by a password system.

Treatment records:
I will maintain records of treatments and any other health information during treatments including your name, email and phone number, date of birth, appointment information and any health information you wish to share given to clients on Google Drive.

Emails: I retain copies of emails sent to me on my servers. Your personal information will be held by me in accordance with this Privacy Policy and will be on the basis of being legitimate to our business interests and in order to provide our services to you.

Social media: I use social media to engage with users and link to my pages on Facebook, Twitter, Instagram. I do not keep any specific data that identifies you as an individual user, but hold details of our followers on these platforms. You should refer to the Privacy Policies of these channels to understand how they treat your data in relation to linking to our site.

Facebook: https://www.facebook.com/privacy/explanation

Instagram: http://instagram.com/legal/privacy/

If you send me a direct message via social media, the details may be retained by me only as relevant to any ongoing contract or to further my legitimate business interests or as required for legal purposes. The third-party provider may also retain details in accordance with their Privacy Policy.

Charlotte recognises a data subjects' rights and will uphold these in accordance with data protection laws. You are entitled to see the information held about you and you may ask me about any of the following:

Subject access requests

Data subjects (i.e. individuals) have the right to access personal data that is held by submitting a subject access request (SAR) to Charlotte. I will endeavour to respond quickly to any such requests, which legally require me to respond within one month of receiving the request and necessary information. A subject access request can be made by emailing me using the contact form.

Right to rectification

Data subjects have the right to request that I amend or change personal information that is inaccurate or incorrect.

Right to erasure

Data subjects have the right to ask us to delete personal information from my systems without giving any reason and at any time. I will act on any such request without delay.

Right to restrict processing

Data subjects have the right to rectification or erasure of personal data in the following circumstances:

• Personal data is not accurate;
• The processing of data is unlawful - data subjects may request that processing is restricted;
• Data is required to exercise legal rights or defend legal claims;
• Data is unlawful but there may be lawful grounds for processing, which override this right.

 

Right to data portability

Data subjects have the right to obtain and request the transfer of their data to different service providers.

Right to object

Data subjects have the right to object to the processing of data at any time based on their particular situation. This includes objecting to profiling unless it is in the ‘public interest’ or exercised lawfully by an official authority. I will only process data under lawful grounds.

Right not to be subject to decisions based on automated processing

I do not use any automated processing that results in any automated decision based on a data subject’s personal information.

Using your rights

If you wish to invoke any of these rights, you should contact me by emailing me using the contact page.

Important Information

Questions and queries

If you have any concerns about how we handle your data, you can contact me by email

Changes to this policy

I reserve the right to change this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. You will be deemed to have accepted any changes to the terms of the privacy policy on your next visit of the website following the amendment.

Complaints

If you want to raise a concern about the use of your data, you can contact me by email. Alternatively, you can formally raise a concern or complaint to the Information Commissioner’s Office (ICO) directly on 0303 123 1113, or see the options for reporting issues on https://ico.org.uk/concerns/

No Waiver

No failure or delay by me in exercising any of my rights in accordance with this Privacy Policy or my terms and conditions shall be deemed to be a waiver of that right, and no waiver of a breach of any provision of the Agreement shall be deemed to be a waiver of any subsequent breach of the same or any other provision.

Severance

If one or more of the provisions of this Privacy Policy or my terms and conditions is found to be unlawful provision is unenforceable, or that the rest of the terms and conditions remain enforceable in spite of containing an unlawful provision.

Third Party Rights

The terms of this Privacy Policy shall not confer rights on any third parties and accordingly the Contracts (Rights of Third Parties) Act shall not apply.

Jurisdiction and Governing Law

The terms of this Privacy Policy and all disputes, whether contractual or otherwise, arising out of or in connection with the policy are governed by and shall be construed in accordance with the laws of England and Wales and each party submits to the exclusive jurisdiction of the English courts.