Pascale MN Chaillet Zen Shiatsu Therapy In Ealing, West London

DATA PROTECTION POLICY and PRIVACY NOTICE

Version JULY 2018


About Me

Zen Shiatsu Therapy (also referred to as “I”, “me”, or “my”) is the trading name of Pascale MN Chaillet, a Sole Trader and Complementary Health Therapist. My trading address is Suite 2, The Lawn, Ealing Green, W5 5ER.


Purpose of this Document

This document is designed to help you understand what kind of information Zen Shiatsu Therapy collects in connection with its services, how I safeguard this information, how I process, use and share this information, finally why I retain this information. In the course of providing you with services Zen Shiatsu Therapy collects and processes information that is commonly known as personal data.
Also, this document sets out your individual rights to know what data is held about you, how this data is processed and how you can place restrictions on the use of your data.


Personal Data Zen Shiatsu Therapy collects

In order for Zen Shiatsu Therapy to provide Complementary Health Services I collect and process the following categories of data:

  • Personal Data such as your name, address, date of birth, gender and contact details.
  • Special Categories of personal data such as your medical conditions, health history and life style details

  • You may provide me with personal data in the following situations:
  • When requesting information about my services or completing bookings either over the telephone or online via this website.
  • When completing the Consent Form for receiving complementary therapy treatment(s)
  • When subscribing to my newsletter or registering for workshop(s) I host or run.
  • When subscribing to one (or more) of my community groups on Facebook.

    You may provide me with special categories of personal data in the following situations:
  • When I ask you to share with me your health concerns that may benefit from receiving complementary therapy treatment
  • When I complete the treatment form at the beginning and the end of each session.

    Zen Shiatsu Therapy collects and uses the special category data to better understand your medical condition, history and life-style that may be the cause of symptoms you consult us for, to determine the most appropriate and tailored course of actions to support your therapeutic journey and to observe the evolution of your overall health throughout your therapeutic journey with me.

    Also, I collect your personal data when you visit my website, which uses cookies to improve your experience. Find out more about the use of cookies online Click Here.


  • How Zen Shiatsu Therapy handles Personal Data

    Where Zen Shiatsu Therapy collects data directly from you, I am considered to be the Data Controller, which means I determine the purposes and means of processing your personal data. For the purposes of meeting the Data Protection Act 2018 territorial scope requirements, the United Kingdom is identified as the named territory where the processing of personal data takes place.

    Where I contract with Service Providers to collect, store, share and use your personal data, these parties are known as Data Processors, which means they process personal data on behalf of Zen Shiatsu Therapy. These parties are the following:

  • Practice Pal, is a web-based health practice management Software based in the United Kingdom. I use Practice Pal to process your bookings both offline and online, to administer my client base and to communicate with you about your bookings and online payments. Their Security Policy is available online Click Here
  • Xero, is a web-based accounting software based in New-Zealand. I use Xero to communicate with you about your offline payments and administer my business. Their Security Policy is available online Click Here
  • Stripe, is a web-based card payment processing based in the United States. I use Stripe integrated with both Practice Pal and Xero to process your offline and online card payments. Their Security Policy is available online Click Here
  • MailChimp, is a web-based marketing platform based in the United States. I use MailChimp to communicate with you in different ways, should you complete an informed OPT-IN form either offline or online. It can be but not limited to my Newsletter, workshop invitations, seasonal promotions, or invitation to join one (or more) community group(s) on Facebook. Their Security Policy is available online Click Here

    I take the protection of your personal data very seriously, therefore I take all appropriate technical and organisational steps to protect the confidentiality, integrity, availability and authenticity of your data, including when sharing your data within contracted Service Providers.

    IMPORTANT - If you object to the collection, sharing and use of your personal data I may be unable to provide you with my services.


  • Why Zen Shiatsu Therapy retains Personal Data

    As a Complementary Health Service Provider insured with Zurich Insurance plc, it is a condition of my Insurance Policy to take and retain client records. Your records, which includes personal data and special category data, shall be kept for at least 7 years following the last occasion on which treatment was given. In the case of treatment to minors, it is advisable that records should be kept or at least 7 years after they reach the age of majority (18).

    This represents a “legitimate interest” in the eyes of the Data Protection Act 2018.

    Where you contact Zen Shiatsu Therapy for details of our services, and where this contact does not progress to a Complementary Health Service contract with me, I will retain your personal data for a period of 1 month maximum.

    Where you make a complaint, I will retain the data for 7 years.

    Where law enforcement agencies inform Zen Shiatsu Therapy about any active investigation, I will comply with legal requirements when retaining this data. The retaining of data is necessary where required for contractual, legal or regulatory purposes.


    Your Individual Rights

    Individuals are provided with legal rights governing the use of their personal data. These grant individuals the right to understand what personal data relating to them is held, for what purpose, how it is collected and used, with whom it is shared, where it is located, to object to its processing, to have the data corrected if inaccurate, to take copies of the data and to place restrictions on its processing. Individuals can also request the deletion of their personal data.

    These rights are known as Individual Rights under the Data Protection Act 2018. The following list details these rights:

  • The right to be informed about the personal data being processed;
  • The right of access to your personal data;
  • The right to object to the processing of your personal data;
  • The right to restrict the processing of your personal data;
  • The right to rectification of your personal data;
  • The right to erasure of your personal data;
  • The right to data portability (to receive an electronic copy of your personal data);
  • Rights relating to automated decision making including profiling.

    Individuals can exercise their Individual Rights at any time. As mandated by law I will not charge a fee to process these requests, however if your request is considered to be repetitive, wholly unfounded and/or excessive, I am entitled to charge a reasonable administration fee.

    In exercising your Individual Rights, you should understand that in some situations I may be unable to fully meet your request, for example if you make a request for me to delete all your personal data, I may be required to retain some data for taxation, prevention of crime and for regulatory and other statutory purposes.

    You should understand that when exercising your rights, a substantial public or vital interest may take precedence over any request you make. In addition, where these interests apply, I am required by law to grant access to this data for law enforcement, legal and/or health related matters.


  • Complaints

    If you are dissatisfied with any aspect of the way in which I process your personal data, please contact Zen Shiatsu Therapy. You also have the right to complain to the UK’s data protection supervisory authority, the Information Commissioner’s Office (ICO). The ICO may be contacted via its website Click Here , by live chat or by calling their helpline on 0303 123 1113.


    How to contact Zen Shiatsu Therapy

    If you have any questions regarding this document, the use of your data and your Individual Rights please contact Zen Shiatsu Therapy, Suite 2, The Lawn, Ealing Green, W5 5ER or by e-mailing Click Here or by telephoning 074 4438 2847.


    Zen Shiatsu Therapy is registered with the UK Information Commissioner, registration number ZA416135.


    click
    ©2018 Pascale Chaillet is powered by WebHealer
    Website Cookies   Privacy Policy   Admin Login