Sarah Phillips – Simply Massage, Llansadwrn SA19 8LS.
I am the sole data handler for Simply Massage.
A link to my Privacy Notice is available on my website or on request. My current and any new clients will be issued with a copy of my Privacy Notice and asked to sign to say they have seen it and that their records are up to date.
I collect information from my clients including their contact details and details about their health and any medication they are on. I use this information for the purposes of providing safe treatment to my clients and for fulfilling my obligations under my professional body’s Code of Conduct (Federation of Holistic Therapists, www.fht.org.uk) as well as adhering to my insurance company’s terms.
I update the client’s record after every treatment with the date, details of the treatment they have received and any other significant information. I ask my clients if the information I hold is up to date.
I do not disclose client details to any 3rd party.
I store client information only on their consultation form as a paper record.
I do not transfer any details onto a computer system, for this reason I am not required to register with the ICO (www.ico.org.uk).
Client records are kept securely in my treatment room in a locked filing cabinet.
Clients have the right to view their records at any time and I have to provide them with their records within one month of their request.
My insurance requires me to store my client records for a minimum of 10 years. If I have not seen a client for 10 years I will destroy their record.
I currently only use client contact details for the purpose of making contact with regard to appointment arrangements or to provide customers with aftercare information.
If in the future I start to send out marketing promotions or offers I will seek client’s permission first in writing. I will ask you how they prefer to be contacted or whether they’d prefer to opt out. If they do agree to receiving communications they will be free to opt out at any time.
If I suspect a breach of privacy of my client’s records I must report it to the ICO.