The General Data Protection Regulations (GDPR) has brought in new legal protection for personal information from 25 May 2018. The information below tells you what personal information we hold and why, and what your rights are.
well beans is registered with the Information Commission Office to comply with the Data Protection Act 2018, which replaces the Data Protection Act 1998, together with the GDPR. These aim to promote high standards in the handling of personal information and to protect the individual's right to privacy.
In order to provide therapy for our clients, we keep the information provided by clients on their initial consultation form, and any clinic client notes made on that and subsequent visits. The personal information provided on the consultation form is minimal, and consists of name, town or village they live in, and contact details, as well as details of any medication they are currently taking.
We hold the forms and therapy session notes in locked filing cabinets. We also store name and contact details only of individual clients on a computer database for contact purposes only, should we need to talk to them about their appointments/health.
Should a client provide us with a testimonial or review, we may use it for marketing purposes but only attribute their first name and the town/village they live in to the words provided.
Please be aware that under the requirements of the GDPR we are legally obliged to hold client clinic records for a period of at least seven years following the last occasion on which treatment was given. Clients have the right to request to read their notes.
On their initial consultation visit, clients are requested to sign a GDPR privacy notice, acknowledging they have read and understood how and why we hold information provided by them.