Privacy Policy
The Inner Health Practice Privacy Policy
About this document
This document will help you understand how I collect, use and protect your personal information. If you have any queries about The Inner Health Practice privacy policy, or how I process your personal information, please contact me on my mobile: 07735-615651, or email me on info@theinnerhealthpractice.co.uk
Who I Am
I am: The Inner Health Practice. 9 Still House, 29 East Street, Farnham, Surrey, GU9 7SW.
I am Rebecca Johnson and I am the ‘data controller’ under the Data Protection Act 1998 and under GDPR. I am registered with the Information Commissioner’s Office.
The information I collect about you
I require you to provide me with the following information: name, address,
date of birth, contact details, including telephone numbers and email address.
Should payment be made by cheque then your bank cheque details including sort
code and account number will be recorded by my bank, Barclays. In the event
of a professional conduct investigation, I may require additional information
such as criminal convictions, health details and medical history. If biometric
data on your health and condition is part of your treatment, then information
will be kept securely in password protected files as will all personal information.
How I Collect Information About You
I collect and update personal information from your first consultation and following that should you change or update details.
How I use your information
I store and use your personal information, as is necessary for legitimate interests, for the purposes of administering your treatment and, communicating to you about your treatment. Please note that details relating to payments are only kept where necessary or where required to ensure of proof of payment is recorded. I also might send news information and relevant information to you in the form of monthly newsletters and other information on other relevant matters, including responding to your enquiries.
Including
• informing you of news, events, and campaigns of relevance to the homeopathy profession.
• undertaking market research and statistical analysis, to enable me to develop new, or improve upon existing services.
• fulfilling my obligations owed to Holistic Insurance Services, who provide my insurance cover.
• fulfilling any obligations owed to a relevant regulator, tax authority or revenue service who I may be required to share your data with.
• If required (for legal and/or professional conduct issues), with authorised regulators and law enforcement agencies.
• Please note, I do not share your financial information with anyone.
How I store your data
Your data is securely stored both electronically and in hard copy. Only I have access to your personal information and data and all electronic systems are password protected. I do not use any cloud-based storage. I back-up data on a weekly basis to reduce the likelihood of accidental loss or damage to files.
How long do I keep your information
I will retain your personal information for several purposes, as necessary to allow me to carry out my business. Your information will be kept for a minimum of 7 years, after which time it will be archived or deleted. Any retention of personal data will be done in compliance with legal and regulatory obligations. Please note that data retention periods may be subject to change without further notice as a result of changes to associated law or regulations.
Your rights
Under GDPR you have the following rights:
• to obtain copies of the personal information that I hold about you.
• to require that I cease processing your personal information if the processing is causing you damage or distress.
• to require me not to send you news or marketing communications.
• to require me to correct the personal information I hold about you if it is incorrect.
• to require me to erase your personal information — this must be a written request, with your reasons for requesting erasure clearly stated.
• Please note that these rights may be limited by Data Protection legislation, Contract law, Criminal law, and Human Rights legislation, and I may be required to refuse requests where exemptions apply.