Privacy Policy

Paula Lee Massage Therapy                       

Edinburgh

On 25th May 2018, the new Data Protection Act 2018 came into place. 

Paula Lee Massage Therapy is committed to safe guarding the privacy of clients while providing the highest possible quality of service. Under the terms of the new General Data Protection Regulations (GDPR), I am required to explain to you how I will treat any personal and/or private data which I collect from you. I have a responsibility for ensuring data is collected, stored and handled appropriately and processed in line with this policy and data protection principles. 

I/we refers to Paula Lee Massage Therapy and any contractors who may work under the ‘Paula Lee Massage Therapy’ umbrella in the future. Website refers to www.paulaleemassagetherapy.com. Facebook refers to https://www.facebook.com/paulaleemassagetherapy&nutrition/

Paula Lee - Massage Therapy  

Facebook’s privacy policy can be found at https://www.facebook.com/privacy/explanation

What information do I hold, why do I have it and who might I share it with?

I hold two types of data. General data which includes your name, address, email address, date of birth and various telephone numbers for the purpose of contacting you. This is collected via enquiries through the website, email communication, telephone, messages, whatsapp, facebook enquiries or comments. 

Health/treatment related data will include a consultation form completed by you and treatment notes completed by me. I am required by law to keep these for 7 years after the date of your last treatment, or for children the data will be kept for 7 years after their 21st birthday in accordance with regulations.

I may need to share your data with authorised legal, regulatory and insurance authorities, if required to defend myself. This will be the professional membership body I am registered with and the insurance company I hold my professional indemnity insurance with.

After 7 years following the last occasion on which treatment was given, I will destroy all of your records by shredding them.

How and where do I hold your data?

All Consultation forms and Treatment records completed prior to 20th October 2023 are kept in a secure filing cabinet within my house. All consultation forms and treatment records completed after this date are stored on an encrypted, secure and GDPR compliant practice software system. Only I have access to these records and I will take all appropriate steps to protect the confidentiality, integrity, availability and authenticity of your data.

Your Individual Rights under the Data Protection Act 2018. 

You have:

· the right of access to your personal data;

· the right to object to the processing of your personal data;

· the right to restrict the processing of your personal data;

· the right to rectification of your personal data;

· the right to erasure of your personal data; 

· the right to data portability (to receive an electronic copy of your personal data);

My Rights

In exercising your Individual Rights, you should understand that in some situations I may be unable to fully meet your request, for example if you make a request for me to delete all your personal data, I may be required to retain some data for taxation, legal, regulatory and insurance purposes.

You should understand that when exercising your rights, a substantial public or vital interest may take precedence over any request you make. In addition, where these interests apply, we are required by law to grant access to this data for law enforcement, legal and/or health related matters.

Complaints

If you are dissatisfied with the way in which I process your personal data, you have the right to complain to the UK’s Data Protection Supervisory Authority, the Information Commissioner’s Office (ICO). The ICO may be contacted via its website which is https://ico.org.uk/concerns , by live chat or by calling their helpline on 0303 123 1113.

How to contact me

If you have any questions regarding the use of your data and your Individual Rights, please contact me at info@paulaleemassagetherapy.com