Carol Jordan, Natural Health Practitioner
This privacy notice explains in clear language, how Carol Jordan uses the personal information collected from Data Subjects, either through using our website, or in any other way, electronically, verbally or in writing.
- Data controller
- Basis for collecting your data (Lawful processing)
- Recipients of data and data transfers
- Sensitive Information
- Categories and type of Personal Data collected
- Retention policy
- Your Rights as a data subject
- Automated decision making
- Third part websites
- Contact details
Carol Jordan the organisation, is a data controller and Carol Jordan is nominated Data Controller. Carol Jordan can be contacted by email at firstname.lastname@example.org or telephone number +44 (0) 1342 843241
On what basis do we collect and process your data? (known as lawful processing)
Data Privacy law defines the basis by which we can lawfully collect and process personal data. For our data processing purposes, we have determined that the lawful purpose for processing personal data is by way of consent.
We will collect personal data when engaging with individuals on the basis of receiving consent to do so. We will continue to process (use and store) that data for the duration of our client relationship and subsequently after in order comply with our professional codes of practice and legal obligations.
Data recipients and data transfers
We do not sell any of your personal data to any third party – including your name, address, email address or credit card information. Carol Jordan. share limited non-sensitive data personal data with service providers such as accountants. Also, we may share your non-sensitive personal information with printing and mailing companies, as well as email service providers.
We may disclose your personal data with law enforcement and fraud prevention agencies, so we can help tackle fraud or where such disclosure is necessary for compliance with a legal obligation to which we are subject, in order to protect your vital interests or the vital interests of another natural person, or in connection with the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
Carol Jordan does process sensitive data as defined by Article 9 of the GDPR. This is in relation to health data of clients and is used for the sole purpose of ensuring the most appropriate therapies and remedies are recommended and provided to clients. Carol Jordan is a member of the International Federation of Professional Therapists (IFPA) and Association of Physical and Natural Therapists (APNT)
Categories and types of data
We process the following data of our clients:
- Phone number
- Email address
- Health Data
We collect data in relation to your communications and interaction with us. This can include emails, text messaging, postal service delivery, social media posting or other any other form of communication. In addition to the lawful purpose described previously for the above categories, we have a legitimate interest purpose to collect and retain this data to enable and improve our communication and for record keeping purposes. The data we collect from our data subjects is obtained directly from the data subject themselves.
The data we collect directly from you is the minimum we require to facilitate the lawful processing described above. Personally Identifiable Data placed in our system will be deleted in accordance with legal obligations, such as HMRC and our Professional Associations rules. Outside of that Carol Jordan has developed a retention policy to ensure personal data is held only for as long as is required for the purpose we collected it or for our legitimate purposes.
Data Storage and Security
We store personal data on physical records which in turn are kept in a secure environment.
Access is only available to Carol Jordan. Any data collected through email communication is stored on our own computing devices.
Your rights as a data subject
The regulations provide a number of rights to you as the Data Subject. Carol Jordan is committed to upholding those rights and those applicable to the personal information we collect and process are listed below. In addition to these rights, you have the right to escalate any concern to the Supervisory Authority, which in the UK is the Information Commissioners Office https://ico.org.uk. A full and detailed explanation of all rights can be found at https://ico.org.uk/for-the-public/
· Right of Access – you have the right to know what personal information is held, by whom and why.
· The Right to Rectification – If the information we have collected and processed is inaccurate or incomplete, you have the right to have it rectified.
· Right to Erasure – You have the right to have your personal data erased and to prevent processing in some specific situations.
· Right to Restrict Processing – If you contest the accuracy of the personal data we hold, we will restrict the processing of your data until accuracy is verified.
· Right to Data Portability – You have the right to move, duplicate or transfer your data easily from one IT environment to another in a safe and secure way.
· Right to Object – You have the right to object to profiling and direct marketing
· You also have rights in relation to automated decision making.
You also have the right to lodge a complaint with the UK’s supervisory body, The Information Commissioners Office www.ico.org.uk
Automated decision making
Carol Jordan does not utilise automated decision making.
Third party websites
How to contact us
You can write to us at this address:
Centre for Health, Caledonian House, Reigate Road, Hookwood RH6 0AP
You can telephone us on this number: +44 (0) 1342 843241