Rosie Humberstone takes privacy and confidentiality very seriously. Personal information is held strictly in accordance with the General Data Protection Regulations (GDPR). This is a legal requirement for any UK or EU business since the act was passed in 2018.
Rosie Humberstone is required by law to tell you about your rights and explain clearly how they collect, store and use any of the personal data you have given us or which we have collected.
Information I collect
All of the data I collect will come directly from the clients (you).
This information may include:
Contact details, contact preferences, date of birth.
Referral information
Attendance records
Why I use this data
I use this data to:
Provide effective sessions
Safeguard clients
Assess the quality of services
Comply with the law regarding data collection and sharing
Good practice
The legal basis of using your data
I only collect and use clients’ personal data when the law allows me to. Most commonly, I process it where:
I need to comply with a legal obligation
I need it to perform an official task in the public interest
Withdrawing consent
Where I have obtained consent to use clients’ personal data, this consent can be withdrawn at any time.
Consent can be withdrawn in writing and/or by contacting Rosie Humberstone.
Storing data
Information provided to Rosie Humberstone is held electronically in a secure manner.
When the session ends, this information is stored and kept for a 7 years. After this time personal data must be disposed of in a way that protects the rights and privacy of data subjects (e.g., shredding, disposal as confidential waste, secure electronic deletion). This is in-line with a mandate from HMRC.
Data sharing
Where it is legally required, or necessary (and it complies with data protection law) I may share personal information about clients with authorities like social services or the police.
Where I provide information for statistical purposes, the information is provided anonymously so that there is no privacy risk involved in its use.
Your rights regarding personal data
You have a right to request access to your personal data (commonly known as ‘data subject access request’) This enables you to receive a copy of the personal data I hold about you and to check that I am lawfully processing it.
If you make a subject access request I will:
Verify your identity
Give you a description of it
Tell you why I am holding and processing it, and how long I will keep it for
Tell you who it has been, or will be, shared with
Give you a copy of the information in an intelligible form if this is seen to be the best course of action
You have the right to:
Object to the use of personal data if it would cause, or is causing, damage or distress
Have personal information transmitted electronically to another organisation in certain circumstances.
Prevent personal information being used to send direct marketing
Have inaccurate personal data corrected, deleted or destroyed, or restrict processing - in certain circumstances.
Claim compensation for damages caused by a breach of the data protection regulations
1. If you have any concerns about Rosie Humberstone’s data processing, you can make a complaint to the Information Commissioner’s Office:
Report a concern online at https://ico.org.uk/concerns/
Call 0303 123 1113
Or write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Contact
If you have any questions, concerns or would like more information about anything mentioned in this privacy notice, please contact
Rosie Humberstone
07950501347
This document is written with regard to and guidance from: ICO & EU GDPR –2018.