PRIVACY POLICY
My contact details
Name: Dr Lorraine Carmen Als, trading as Lolly Als SRMT
Phone Number: 07989585571
E-mail: lorraineals@gmail.com
ICO reference: ZA936907
Date created: 11/03/2021
I reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If I make material changes to this policy, I will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
The type of personal information we collect
We currently collect and process the following information:
Contact details, such as name, email address, phone number.
Appointment details.
COVID-19 screening data.
Current health information.
Medical history.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
To respond to your queries.
To send you information regarding your appointment.
To screen for COVID-19.
To assess for any contraindications to treatment.
To plan and provide you with the best possible treatment.
To send you after-care advice.
To keep you updated with relevant news.
We may also receive personal information indirectly, from the following sources in the following scenarios:
If a family member, friend, or colleague makes an appointment on your behalf, they may provide details such as your name, email address, and phone number. However, we will always request current health information and medical history directly from you.
We will never share your current health information, medical history, or treatment notes with anyone who does not need access without your explicit consent.
Your appointment details may be viewed by other therapists or admin staff who have authorised access to the booking system used at Natural Balance Therapies. However, they will not have access to your current health information, medical history, or treatment notes.
Under the General Data Protection Regulation (GDPR), the lawful bases I rely on for processing this information are:
I have a contractual obligation.
When you request a treatment and I agree to provide that care, we enter into a contract. I need to collect personal information about your health and medical history in order to provide you with the best possible care. You can, of course, refuse to provide the information, but if you were to do that, I would not be able to provide treatment.
I have a legitimate interest.
I have a legitimate interest in collecting this information because without it I couldn’t do my job effectively and safely.
I also think that it is important that I can contact you in order to confirm your appointments or to update you on matters related to your care/after-care. I feel this is in your legitimate interest.
Your consent.
I may occasionally send you information in the form of newsletters if you have given consent for me to process your personal data for this specific purpose. You may withdraw this consent at any time by emailing lorraineals@gmail.com or clicking the “unsubscribe” button.
How we store your personal information
Your records are stored in the following ways:
On paper, in a locked filing cabinet at my home address.
Electronically on a password protected computer.
Electronically “in the cloud” using:
Smilenotes (clinical notes and storage of pdf files i.e., COVID-19 screening forms, consultation forms*.
MailChimp (newsletters).
Wix (newsletters, contact form).
Access to data within these systems is password protected.
*Consultation forms are submitted electronically using Google Docs. These files are permanently deleted from Google Docs once saved electronically in Smilenotes.
If you have booked an appointment at Natural Balance Therapies, your data will be stored on the Natural Balance booking and marketing systems. Please see the Natural Balance Therapies privacy notice for more information.
I have a legal obligation to retain your records for 8 years after your most recent appointment (or until age 25, if this is longer), but after this period you can ask me to delete your records. We will then dispose of your information by either shredding (paper copies) or by permanently deleting electronic files. Financial files will be kept for at least 7 years, but these do not contain health-related details.
Cookies and this website
Cookies are small pieces of data stored on your browser. They are typically used to keep track of the settings you have selected and actions you have taken on a site.
My website is hosted on the Wix.com platform. Wix uses cookies for important reasons, such as:
To provide a great experience for visitors.
To monitor and analyse the performance, operation and effectiveness of Wix's platform.
To ensure the platform is secure and safe to use.
I have added a cookie banner to this site, which gives you the opportunity to accept or decline the use of non-essential cookies.
Links to other websites
This website may contain links to other websites of interest. Once you have used these links to leave this site, I do not have any control over the information you provide while visiting such sites. Please access the privacy policy of the individual website(s) for clarity on how they process and store your data.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information, provided the legal minimum period has elapsed.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at lorraineals@gmail.com if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to the “Data Controller”.
Here are the details you need for that:
Information held on the consultation form, treatment notes, Mailchimp (via Lolly Als SRMT), Wix, please contact: Lolly Als, lorraineals@gmail.com.
Information held on Fresha or Mailchimp (via Natural Balance Therapies), please contact the owner of Natural Balance Therapies: Mark Alexander, mark@anaturalbalance.co.uk.
If you are not satisfied with the response, then you have the right to raise the matter with the Information Commissioner’s Office (ICO).
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF