PRIVACY POLICY

Who I am

I run STEADY Professional Massage Therapy as a Level 5 Sports Massage and Holistic Massage Therapist.

For data protection purposes, I am the data controller responsible for the personal information you share with me.

Contact details

Business address: 16a Spencer Close, Potton, SG192QX
Email: steadytherapy@talktalk.net
Telephone: 07795180034

What information I collect

I only collect information that I need to manage appointments, understand your needs and provide appropriate treatment.

This may include:

Contact details: Your name, address, email address, telephone number and emergency contact details, where provided.
Health information: Relevant medical history, health conditions, medication, injuries and lifestyle information that you share with me.
Consultation and treatment notes: Information recorded on your paper consultation form and notes about treatments, assessments, areas discussed or treated, and your feedback.
Financial records: Appointment, invoice and payment information.
Website information: Some technical information, such as IP addresses or cookie data, may be collected when you visit my website. This depends on the website services and settings in use.

How I use your information

I use your information to:

Respond to enquiries and arrange appointments.
Understand your health history and consider whether treatment is suitable.
Plan and adapt treatments to your individual needs.
Keep appropriate records of appointments and treatments.
Process payments and maintain business and financial records.
Meet relevant legal, professional and insurance requirements.

Why I am allowed to use your information

Data protection law requires me to have a lawful basis to collect and use personal information.

Depending on the information and purpose, I rely on the following:

Contractual necessity (Article 6(1)(b)): To use your contact and appointment details to arrange and provide your treatment.
Legal obligation (Article 6(1)(c)): To keep financial and business records where required by law, including for tax purposes.
Health information (special category data): Health information requires additional protection under data protection law. I process this information using the appropriate legal condition under Article 9 of UK GDPR and the Data Protection Act 2018.

Who I share your information with

Your privacy is important to me. I do not sell or rent your personal information.

I may share relevant information with service providers who help me run my practice, such as website, email or payment service providers, where necessary.
I may also need to share information where required by law or where there is a serious concern about someone's safety.
I will not routinely share your health information with family members or other healthcare professionals without your permission, unless there is another lawful reason to do so.

How long I keep your information

I keep personal information only as long as needed, taking into account relevant legal, professional, and insurance requirements.

My proposed retention periods are:

Adult client records: Seven years following your last treatment. After this period, I will securely destroy or delete the records.
Records for clients under 18: Retained until the client reaches the age of 25, subject to confirmation against my professional and insurance requirements.
General enquiries: Emails and website contact form enquiries where no appointment follows will be deleted after six months.

How I protect your information

I take the privacy and security of your information seriously.

I keep paper consultation forms and written records securely in a locked filing cabinet.
Access to client information is restricted to me.
I take care to prevent personal information from being accessed, lost or shared inappropriately.

Your privacy rights

You have rights regarding the personal information I hold about you. These include the right to:

Access: Ask for a copy of the personal information I hold about you.
Rectification: Ask me to correct information that is inaccurate or incomplete.
Erasure: Ask me to delete your personal information, where the law allows.
Restriction: Ask me to limit how I use your information in certain circumstances.
Object: Object to certain types of processing.

These rights are subject to certain legal conditions and exceptions. For example, I may need to keep some records to meet legal, professional or insurance requirements.

If you have a question or would like to exercise one of these rights, please contact me using the details in Section 1.

If you are unhappy with how I have handled your information, please contact me first so I can try to resolve your concerns.

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by telephone on 0303 123 1113.

How I handle your health information

To provide massage therapy, I ask you to share relevant health information so I can understand your needs and consider whether treatment is appropriate.

I collect this information in the following ways:

Initial consultation: You will complete a paper consultation form before your first treatment.
Before further treatments: I will talk with you about any changes to your health, medication or circumstances since your previous appointment.
Treatment records: I make notes about the treatment provided, areas addressed and your feedback or response.

I treat this information as confidential and take care to protect it. I will only share it where you have given permission or where there is another lawful reason to do so.

Changes to this notice

I may update this Privacy Notice from time to time to reflect changes to my practice, the services I use or relevant data protection requirements.

The latest version will be available on this website.

PRIVACY POLICY

​

Who I am

I run STEADY Professional Massage Therapy as a Level 5 Sports Massage and Holistic Massage Therapist.

For data protection purposes, I am the data controller responsible for the personal information you share with me.

Contact details

Business address: 16a Spencer Close, Potton, SG192QX

Email: steadytherapy@talktalk.net

Telephone: 07795180034​

​​

What information I collect

I only collect information that I need to manage appointments, understand your needs and provide appropriate treatment.

This may include:

Contact details: Your name, address, email address, telephone number and emergency contact details, where provided.

Health information: Relevant medical history, health conditions, medication, injuries and lifestyle information that you share with me.

Consultation and treatment notes: Information recorded on your paper consultation form and notes about treatments, assessments, areas discussed or treated, and your feedback.

Financial records: Appointment, invoice and payment information.

Website information: Some technical information, such as IP addresses or cookie data, may be collected when you visit my website. This depends on the website services and settings in use.

How I use your information

I use your information to:

Respond to enquiries and arrange appointments.

Understand your health history and consider whether treatment is suitable.

Plan and adapt treatments to your individual needs.

Keep appropriate records of appointments and treatments.

Process payments and maintain business and financial records.

Meet relevant legal, professional and insurance requirements.

Why I am allowed to use your information

Data protection law requires me to have a lawful basis to collect and use personal information.

Depending on the information and purpose, I rely on the following:

Contractual necessity (Article 6(1)(b)): To use your contact and appointment details to arrange and provide your treatment.

Legal obligation (Article 6(1)(c)): To keep financial and business records where required by law, including for tax purposes.

Health information (special category data): Health information requires additional protection under data protection law. I process this information using the appropriate legal condition under Article 9 of UK GDPR and the Data Protection Act 2018.

Who I share your information with

Your privacy is important to me. I do not sell or rent your personal information.

I may share relevant information with service providers who help me run my practice, such as website, email or payment service providers, where necessary.

I may also need to share information where required by law or where there is a serious concern about someone's safety.

I will not routinely share your health information with family members or other healthcare professionals without your permission, unless there is another lawful reason to do so.

How long I keep your information

I keep personal information only as long as needed, taking into account relevant legal, professional, and insurance requirements.

My proposed retention periods are:

Adult client records: Seven years following your last treatment. After this period, I will securely destroy or delete the records.

Records for clients under 18: Retained until the client reaches the age of 25, subject to confirmation against my professional and insurance requirements.

General enquiries: Emails and website contact form enquiries where no appointment follows will be deleted after six months.

How I protect your information

I take the privacy and security of your information seriously.

I keep paper consultation forms and written records securely in a locked filing cabinet.

Access to client information is restricted to me.

I take care to prevent personal information from being accessed, lost or shared inappropriately.

Your privacy rights

You have rights regarding the personal information I hold about you. These include the right to:

Access: Ask for a copy of the personal information I hold about you.

Rectification: Ask me to correct information that is inaccurate or incomplete.

Erasure: Ask me to delete your personal information, where the law allows.

Restriction: Ask me to limit how I use your information in certain circumstances.

Object: Object to certain types of processing.

These rights are subject to certain legal conditions and exceptions. For example, I may need to keep some records to meet legal, professional or insurance requirements.

If you have a question or would like to exercise one of these rights, please contact me using the details in Section 1.

If you are unhappy with how I have handled your information, please contact me first so I can try to resolve your concerns.

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by telephone on 0303 123 1113.

How I handle your health information

To provide massage therapy, I ask you to share relevant health information so I can understand your needs and consider whether treatment is appropriate.

I collect this information in the following ways:

Initial consultation: You will complete a paper consultation form before your first treatment.

Before further treatments: I will talk with you about any changes to your health, medication or circumstances since your previous appointment.

Treatment records: I make notes about the treatment provided, areas addressed and your feedback or response.

I treat this information as confidential and take care to protect it. I will only share it where you have given permission or where there is another lawful reason to do so.

Changes to this notice

I may update this Privacy Notice from time to time to reflect changes to my practice, the services I use or relevant data protection requirements.

The latest version will be available on this website.

Telephone: 07795180034