Privacy Policy
Privacy Policy
Sarah Hatswell Lymphatics & Reflexology
Sarah Hatswell
CT7 9AZ
07776762194
This privacy policy explains how Sarah Hatswell Lymphatics & Reflexology collects, uses, stores and protects your personal information in connection with reflexology and related wellbeing treatments. It also explains your rights under UK data protection law.
Collecting and using your personal data
In order to provide professional treatments, I may need to ask for and keep information about your health and wellbeing. Some of this information may be classed as special category personal data, which means it is handled with extra care.
I collect personal information during consultations, when you book appointments and during treatment sessions. I use this information to assess suitability for treatment, deliver safe and appropriate treatments, keep accurate records, and provide any relevant aftercare or advice.
The information I may hold includes:
Your contact details
Medical history and other health-related information
Treatment details and related clinical notes
For informing reflexology treatments and any advice I give because of your treatment.
I will not share your personal information with anyone else without explaining why it may be necessary and, where appropriate, obtaining your consent, unless I am required to do so by law. I may contact you using the contact preferences you provide in relation to: appointment booking, reminders and changes
information relevant to your treatment or health, newsletters or service updates, if you have chosen to receive them.
We use the information that you have given us to:
Provide you with the best possible treatment options, support and advice.
Storing and protecting your personal data
I am committed to keeping your personal data secure. Appropriate technical, physical and organisational measures are in place to help prevent unauthorised access, disclosure, loss or misuse of the information I hold. Your records will usually be kept for seven years after your final treatment or, in the case of
children, until the age of 25. After that time, your information will be securely deleted, destroyed or disposed of.
Your data protection rights
Under UK data protection law, you have rights including:
Right of access: You can ask for a copy of the personal information I hold about you.
Right to rectification: You can ask me to correct information you believe is inaccurate or incomplete.
Right to erasure: You can ask me to erase your personal information in certain
circumstances.
Right to restrict processing: You can ask me to limit how your personal information is used
in certain circumstances.
Right to object to processing: You can object to the processing of your personal
information in certain circumstances.
Right to data portability: You can ask for the personal information you provided to be transferred to another organisation, or directly to you, in certain circumstances.
You will not usually need to pay a fee to exercise your rights. If you make a request, I will normally respond within one month.
To make a request, please contact me at sarah@sarahhatswell.com.
Lawful Basis for holding and using Client Information
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:
-
Your consent. You can remove your consent at any time. You can do this by contacting me.
-
We have a contractual obligation
-
We have a legal obligation:
-
‘Claims occurring’ insurance: (records to be kept for 7 years after last treatment)
-
CNHC requirements to retain information for 8 years
-
-
We have a vital interest
-
We need it to perform a public task
-
We have a legitimate interest i.e.my requirement to retain the information to provide you with the best possible treatment options and advice.
As I hold special category data (i.e. health related information), the additional condition under which I hold and use this information is: for me to fulfil my role as a health care practitioner bound under the AoR Confidentiality as defined in the AoR Code of Practice and Ethics.
Therapist's rights and record keeping
If you do not agree to me keeping records of your treatment and relevant health
information, I may not be able to treat you safely or appropriately.
Even if you ask for your details to be erased, I may still need to keep certain records for the period set out above in order to meet professional, insurance or legal obligations.
Your records may be moved between secure computers or IT systems where necessary, provided they remain properly protected.
Sarah Hatswell Lymphatics & Reflexology How to complain
If you have any concerns about our use of your personal information, please refer to our GDPR Complaints Procedure.
If you have any concerns about how I use your personal information, please contact me first at
You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if
you are unhappy with how your data has been handled.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk