Body Links Soft Tissue Therapy (We) are committed to protecting and respecting your privacy.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. It also explains how your personal data is used and collected through the website at www.bodylinks.co.uk
For the purpose of this policy under the Data Protection Act 1998 and other relevant regulations, the data controller is Body Links Soft Tissue Therapy, 57 Ballard Chase, Abingdon, OX14 1XQ.
1 The information we collect
1.1 If you are using the Website (or directly accessing our booking system), we may collect the following information about you:
your email address;
your telephone number;
how you heard about us
credit or debit card information when you choose to pay for bookings online; and
any further information that you choose to provide to us, for example, if you contact us with questions, comments or feedback about the Website.
1.2 We also collect the following information about all Website users:
technical information such as the type of device you use to access the Website, unique device identifiers, information about your mobile operating system and the type of mobile browser you use;
information that is stored on your devices, such as photos and digital content where you choose to upload them; and
any additional content or information that you choose to upload to, or transmit via, the Website.
We are collecting this data because you have given consent to do so, and/or because the processing is necessary for a contract we have with you.
3 Uses made of the information
3.1 We use information held about you in the following ways:
to administer and manage your booking and to provide you with necessary information about our services;
to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, and services that you request from us;
to provide you with information about other services we offer that are similar to those that you have already purchased or enquired about;
to send you newsletters where you have consented to us doing so;
to notify you about changes to our service or the Website;
to ensure that content from our Website is presented most effectively for you and your computer;
to administer our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
3.2 Disclosure of your information
3.2.1 We may disclose your personal information to third parties:
where you or your legal representative have consented to us doing so for a specific purpose, for example, to discuss your health issues with other healthcare practitioners. In every case, we will seek your written confirmation of the specific information you ask or allow us to share and the name of the approved recipient of this information.
where we consider disclosure of your personal information to other businesses, financial organisations or law enforcement agencies to be necessary or desirable with a view to the prevention or detection of fraud, or if we are required or permitted to do so by law, or if we consider disclosure necessary to protect and defend the rights, property or personal safety of us or other users;
to enforce or apply our terms and conditions, or to investigate potential breaches; and
to protect the rights, property or safety of us, our users, or other third parties.
3.3 Where we store your personal data
3.3.1 All personal information you provide to us via the internet is stored in secure data centres. We will take all reasonable steps to ensure that your data is treated securely, and we will use strict procedures and security features to try to prevent unauthorised access.
3.3.2 If we ever need to transfer your personal data outside the EEA, we will make sure that appropriate safeguards are in place to protect your personal data, in compliance with UK data protection laws.
3.3.3 The transmission of information via the internet is never completely secure. We will do our best to protect your personal data, but we cannot guarantee the security of your data transmitted via the Website. Any transmission is at your own risk.
3.3.4 Hard copies of consultation forms and notes are scanned and destroyed afterwards. No hard copies are stored.
3.3.5 We also store information on password protected computers (in our office) and laptops (at treatment locations).
4 How long will we keep your data for?
4.1 Following requirements from the Complementary & Natural Healthcare Council, we store clients records for eight years from the date of the client’s last visit to us or, if the client is a child, until his or her 25th birthday, or 26th birthday if the client was 17 when the treatment ended.
4.2 If you are not our client, we will keep your basic contact data for the time of operation of the business or until you ask us to remove it.
5 Your rights as a data subject
5.1 You have the right to ask us not to process your personal data for marketing purposes. You can exercise this right by contacting us at firstname.lastname@example.org
5.2 You have the right to request a copy of the personal information that we hold about you, and where data is found to be inaccurate to have that data corrected. We may take steps to verify your identity before responding to your request. Once we have verified your identity, we will respond as quickly as possible and in any event within 14 days.
5.3 In certain circumstances, you have the right to have data held about you erased, or the use of it restricted. You have the right to object to the processing of your information and to have any inaccurate information corrected. You may be able to object to your data transferred to another data controller.
5.4 Our Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
You also have a right of complaint to the Information Commissioner’s Office (ICO) at www.ico.org.uk if you think we have dealt with your information inappropriately. You can also find out more about your data rights via their website.