Privacy Policy

‘Active Recovery - Body and Mind’ is committed to protecting and respecting your privacy. This privacy notice explains when and why we collect personal information, how we use it, who we share it with and how we keep it secure.

“We”, “our” or “us” refers to ‘Active Recovery - Body and Mind’

It is important that you take the time to read this notice so that you understand how we will use your personal data and your rights in relation to your personal data.

Personal data that we collect about you

Information you give us

This is information about you that you give us by filling in forms or by corresponding with us verbally or via telephone, email, online or social media. The information you give us may include your name, address, email address, telephone number, date of birth, sex, occupation, GP details, health & medical information and personal details about your lifestyle.
We are required to collect personal information about you and your health in order to provide you with the best possible treatment. You can of course refuse to give us your personal information, however in doing so we would not be able to provide you treatment.
We may wish to contact you to confirm an appointment or to update you on a matter relating to your treatment and/or aftercare.
We may wish to send you information relating to your health as well as the occasional promotional offer. These may be in the form of an email, article, newsletter or social media. You are able to withdraw from these types of correspondence by getting in contact with our data controller.

How your personal data is recorded & stored

Your personal data is recorded on paper or electronically on a client consultation form.
Some personal data may be recorded electronically on third party software such as Gmail, Google Drive and Rehab My Patient. All third party software used is fully compliant with the General Data Protection Regulations Act 2018.
All data stored electronically is password protected and the passwords are regularly changed.
We have a legal obligation to retain your records for seven years (eight years for Hypnotherapy clients; up to the age of 25 for a child under 16 when last seen and up to the age of 26 for a 17-18 year old when last seen) after your most recent appointment. After this period you can request that we erase your records.
All paper records are stored in a locked filing cabinet within securely locked premises.

Sharing your personal data

Some of your personal data (name, email address, telephone number & date of birth) may be provided to Rehab My Patient, which is third party software, for the purposes of exercises and aftercare treatment. Rehab My Patient is fully compliant with the General Data Protection Regulations Act 2018. Access to this software is password protected and is only accessible by our data controller.
Your personal data may be shared with other healthcare professionals i.e. physiotherapists, osteopaths or doctors, in order to provide the best possible treatment for you. Any data shared will be documented and signed for by the client as consent prior to sharing.
If you are under the age of 16 or considered as ‘vulnerable’ then your personal data may be shared with your appointed adult, carer or chaperone.
We will never share your data with anybody that does not need access to it without your consent.
Discussions within sessions are confidential; unless (for hypnotherapy clients only) I need support from my supervisor or I believe you are about to harm yourself or another (in which case I will contact your doctor). During hypnotherapy training peer supervision will take place during the classroom.
If I see you outside of a hypnotherapy session I will not approach you or acknowledge you unless you do so first.

Your rights

You have

The right to refuse us processing your personal data (in doing so we would not be able to provide you treatment).
The right to access the personal data that we hold about you.
The right to withdraw your consent to us processing your personal data at any time.
The right to request that we rectify your personal data if it is inaccurate or incomplete.
The right to request that we erase your personal data. Please note that there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it.
The right to object to the processing of your personal data for marketing purposes.
The right to complain to the Information Commissioner’s Office if you think that your personal data has been misused by us.

If you feel that we are mishandling your personal data in any way you have the right to complain. Complaints need to be sent to our Data Controller.

Nicola Brett – Data Controller & Owner

ICO Registration Number - ZA786623

activerecoverytherapy@gmail.com

07800 751452

If you are still dissatisfied with the response then you can contact the Information Commissioner’s Office (ICO)