GDPR Compliance

GDPR Compliance
We have put measures in to place to ensure we are GDPR compliant.
Below are our policies
Treatment Bookings
• Your personal data will be stored and be accessible by The Essential Treatment.
• Your information will not be shared to any third party companies.
• We will only contact you with regards to The Essential Treatment and associated matters and will never send spam to you.
Case History Forms
• Your personal data will be stored and be accessible by The Essential Treatment.
• Your information will not be shared to any third party companies.
• We will only contact you with regards to The Essential Treatment and will never send spam to you.
Record Keeping
• Your enrolment forms are kept on file in a locked filing cabinet at 74 Shaftesbury Avenue, Montpelier, Bristol, BS6 5LY
• Your files are not viewed or accessible by anyone other than Wendy Proctor, unless consent is given by yourself to share with other parties
• You can ask to view your client files at any given time.


Maintenance of Transcripts
Policy Statement – GDPR COMPLIANCE
The Essential Treatment was founded by Wendy Proctor
Staff Members of The Essential Treatment Ltd:

Wendy Proctor – Owner

The Essential Treatment regards the lawful and correct treatment of personal information as very important to the successful and efficient performance of its functions, and to maintain confidence between those with whom it deals.

To this end The Essential Treatment fully endorses and adheres to the Principles of Data Protection, as set out in the Data Protection Act 1998.

Purpose
The purpose of this policy is to ensure that the owner of The Essential Treatment is clear about the purpose and principles of Data Protection and to ensure that it has guidelines and procedures in place which are consistently followed.

Failure to adhere to the Data Protection Act 1998 is unlawful and could result in legal action
being taken against The Essential Treatment.

Principles
The Data Protection Act 1998 regulates the processing of information which includes the obtaining, holding, using or disclosing of such information, and covers computerised records as well as manual filing systems.

Data users must comply with the data protection principles of good practice which underpin
the Act. To comply with the law, information must be collected and used fairly, stored safely
and not disclosed to any other person unlawfully.

To do this The Essential Treatment follows the eight Data Protection Principles outlined in the Data Protection Act 1998, which are summarised below:

I. Personal data will be processed fairly and lawfully
II. Data will only be collected and used for specified purposes
III. Data will be adequate, relevant and not excessive
IV. Data will be accurate and up to date
V. Data will not be held any longer than necessary
VI. Data subject’s rights will be respected
VII. Data will be kept safe from unauthorised access, accidental loss or damage
VIII. Data will not be transferred to a country outside the European Economic Area, unless that country has equivalent levels of protection for personal data.

The principles apply to “personal data” which information is held in lockable filing cabinet from which they are identifiable. The Essential Treatment who process or use any personal information in the course of their duties will ensure that these principles are followed at all times.

Purposes

The Essential Treatment obtains personal data (such as names, addresses, and phone numbers) clients. This data is obtained, stored and processed solely to assist The Essential Treatment in the efficient running of services. Personal details supplied are only used to send material that is potentially useful. Most of this information is stored on the form.

The Essential Treatment obtains personal data and information from clients in order to provide services. This data is stored and processed only for the purposes outlined in the agreement and service specification signed by the client.

Financial data is never stored or recorded; all participants are requested to make financial payments with cash or via bank transfer, card details are never taken or stored.

Consent
Personal data is collected over the phone and using other methods such as e-mail or text message. During this initial contact, the data owner is given an explanation of how this information will be used. Written consent is not requested as it is assumed that the consent has been granted when an individual freely gives their own details.

Personal data will not be passed on to anyone outside the business without explicit consent from the data owner unless there is a legal duty of disclosure under other legislation.

Access
The contact details of those having a treatment will only be made available to The Essential Treatment. Contact details of clients will not be passed on to anyone outside the organisation without their explicit consent.

Any other information supplied on application will be kept in a secure filing cabinet and is not accessed during the day to day running of the organisation.

All confidential post is opened by the addressee only.

Accuracy
The Essential Treatment will take reasonable steps to keep personal data up to date and accurate. Personal data will be stored for 7 years after the last treatment.

Storage
 Personal data is kept in paper-based systems.
 Every effort is made to ensure that paper-based data are stored in organised and secure systems.
 The Essential Treatment operates a clear desk policy at all times.

Use of Photographs
Where practicable, The Essential Treatment will seek consent from individuals before displaying photographs in which they appear. This policy also applies to photographs published on the business website.