Privacy Notice
Please take the time to read through this information carefully.
Your Privacy is very important to Creating Harmony Holistic Therapies.
At Creating Harmony Holistic Therapies, we respect and protect your privacy. This notice sets out the different areas where user privacy is concerned and outlines the obligations and requirements of the users, the website at www.creatingharmonytherapies.uk and us, the website owners. Furthermore, the way we use, store and protect any personal data we collect from you, or that you provide to us, will also be detailed within this notice. We are committed to ensuring the security of your personal data and ensuring it is collected and used for the purpose it was requested for.
This Policy applies to CHHT customers or prospective customers such as an enquirer, booker, client of any of CHHT’s services including anyone contacting or using our services and website.
About Us
- In this Privacy Policy references to “we” or “us” or “CHHT” are to Creative Harmony Holistic Therapies.
- CHHT provides personal holistic therapy services including but not limited to massage, reiki and reflexology.
- In order to provide our services, we will collect and use personal information about individuals. We are the controller of all personal information we process pursuant to this Policy and we are responsible for complying with data protection laws.
- Where you provide personal information to us about other individuals (for example, members of your family, friend or another client) we will also be data controller of and responsible for their personal information. You should refer them to this Policy before supplying their data to us on their behalf.
- If you have any questions about how we collect, store or use your personal information, you may contact us using the details set out in the “Contact Us” section of this website or by the details set out in this document.
THE INFORMATION WE COLLECT
When you book an appointment we collect personal details such as your name, email address and contact number. This is usually over the telephone or through email correspondence. This information is used to identify you and contact you regarding your appointment you have made.
There are instances where personal information is taken face to face during the consultation process on the day of your treatment. This information will include medical and personal information such as name, address, contact details, GP contact details and detailed medical history. This allows us to assess suitability of treatment chosen and whether it can be carried out safely. To provide a thorough treatment we also collect information regarding your lifestyle choices. This information is only used to ensure your treatment and subsequent homecare/aftercare advice is tailored for your individual needs.
CHHT’s website allows you (the client) to fill the above consultation form through Jotform.com. This is a third party service that enabled us to design and provide the consultation form attached to the website. Once submitted the form will be sent directly to the email (info@creatingharmonytherapies.com). This email is password secured. Jotform is a secure website that is specifically designed to handle personal information.
Please review their Privacy Policy at: https://www.jotform.com/privacy/
When you buy a gift voucher, we collect personal details such as your name, email address, recipient’s name and possibly a postal address, if purchasing over the phone. This information is used to identify you and provide the service you have requested. Any payments taken remotely will be done through BACS payment, so none of your Banking information is required or stored.
CONSENT
When you provide us with your personal information in the course of booking an appointment, completing your online/paper-based Consultation Form, making a payment or contacting us about our services, you are giving consent for us to collect that information and use it for that specific reason.
We will not use your personal information for any secondary reason, like marketing, unless we have asked you directly for consent to do so.
How do I withdraw my consent?
For the purpose of legal protection and insurance requirements we are obliged to hold the personal information you have given to us for a minimum of seven years. This includes any records of treatment plans/notes documented during the duration of providing your treatments.
Seven years after your last treatment we will permanently delete all your personal information that we hold. This will be done through secure means.
If you withdraw your consent during the seven-year retention period, we will archive your data until the seven-year period expires.
Whilst your information is archived, we will not access or process it in any way except if needed for legal protection or if we are required to do so by law.
Should you wish to withdraw your consent at any time please email us at info@creatingharmonyterapies.uk with your request.
How can I access, update or amend my personal information?
You have the right to review the personal information we store about you and your treatment sessions at any time. These will be sent by email, in a Microsoft Word document attachment.
You also have the right to request we update or amend your data if it is incorrect.
To action any of these rights at any time please email us at info@creatingharmonytherapies.uk with your request.
DISCLOSURE
Unless required to do so by law, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.
DATA HANDLING & STORAGE
Our appointment booking and document service is provided by Google. They provide password secure collection and protection, processing and storing personal data.
Your data is stored through Google, and is protected by McAfee LiveSafe Premium+. This software secures accounts with dark web monitoring to ensure protection from theft.
Any forms completed face to face are stored in a secured filing cabinet and are kept up to date at all times.
PAYMENT
If you choose to pay for your treatment with a debit or credit card your information will be passed to our payment processor iZettle for card payments.
We will never store your credit card details, it is always processed by third-parties. It is encrypted through the Payment Card Industry Security Standard (PCI-DSS).
iZettle adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
THIRD-PARTY SERVICES
In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
The main third-party services we use are Jotform.com and iZettle. Both parties purposes are outlined above.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in the UK and your transaction is processed by a payment gateway located in the United States, then your personal information used to complete that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave this website or are redirected to a third-party website or application, you are no longer governed by this website’s Privacy Policy.
LINKS
When you click links on our website, they may direct you away from the website. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. This also applies to any paper-based forms filled out whilst at the salon. These forms will be securely stored in a locked filing cabinet in line with the Data Protection Act.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.
If this business is acquired or merged with another business, your information may be transferred to the new owners so that they may continue to provide you with the treatment services you have requested.
QUESTIONS & CONTACT INFORMATION
To request your information is updated, amended or deleted, or if you have any questions about how your information is collected, stored and used, please email us at info@creatingharmonytherapies.uk
COMPLAINTS
If, for any reason, you are unhappy with how we are handling your data, please raise your concerns with us first, so that we can seek a resolution. If you are still not satisfied, then you have the right to complain to the Information Commissioner’s Office (ICO).
Creating Harmony Holistic Therapies is registered with the ICO under the name of the owner and Reference Number: ZA797029.
This information is collected by Creating Harmony Holistic Therapies in accordance with the guidelines set out in the General Data Protection Regulation (GDPR).
Creating Harmony Holistic Therapies will never lease, distribute or sell your personal information to any third parties.
