Pip Morris is an Usui Reiki Master Teacher and also provides NO HANDS® Massage, Holistic Massage, Hopi Traditional Ear Candling and is a Baby Massage Instructor and Baby Yoga Instructor. Your privacy is important to us. This policy covers what information we collect from you, and how it is stored and used.
Our named contact and Data Protection Officer is Pip Morris, Owner, and our contact details are: 2 Camberwell Drive, Worcester WR5 3TN. Phone: 07834 356575. Email: email@example.com. We are registered with Information Commissioner’s Office, reference number ZA507913. Our named contact is Pip Morris as above.
Data we collect and hold, and what it is used for
GDPR Lawful Basis: Consent
We keep contact information given to us by people who have requested information from us about our services to provide said requested information.
We use online and offline services to collect personal information from you. Personal data is information relating to an identified or identifiable natural person, such as name, age, address, date of birth, gender and contact details. Personal information may also contain ‘sensitive’ data, such as information relating to a person’s health.
Your data is collected in a number of ways including by phone or email, online and in person. All data is processed in line with GDPR requirements. It is only used for the purpose(s) for which it was collected and is strictly confidential.
We collect and hold personal data provided by you in order to process and respond to requests/enquiries and make appointments. This may include name, address, email and phone number.
We also collect and hold personal data about current and previous clients registered with us, in order to arrange and provide effective therapy treatments, to notify you of any changes to our services, and to comply with legal, tax and insurance requirements. As well as personal contact information, this includes information about your health and medical history.
We are the sole owners of the information collected on this site. We only have access to/collect information that you voluntarily give us via email or other direct contact from you. We will not sell or rent this information to anyone. We will not share your information with any third party outside of our organisation, other than as necessary to fulfil your request.
If you have opted in to receive marketing information and updates from us, we will use your name and email address to communicate with you about our services, events, offers and news. You can unsubscribe at any time by phone or email.
How long we keep your data
We retain data for the period of time necessary to meet legal requirements, after which time your data is securely destroyed.
We are required under the terms of our insurance to keep client records for at least seven years following the last occasion upon which treatment was given. In the case of treatment to minors, we keep records for at least seven years after they reach the age of majority (18). Under tax law we are required to keep financial records for a minimum of five years after the 31 January submission deadline of the relevant tax year.
In rare instances we may need to retain your data for longer, for example if we are defending ourselves in a legal dispute or as required by law or where evidence exists that a future complaint or claim may occur.
Personal information that we use for marketing purposes will be kept by us until you notify us that you no longer wish to receive this information.
If you have signed up to receive marketing information, you can unsubscribe at any time by clicking on the unsubscribe option in marketing emails, or by emailing firstname.lastname@example.org. If you are not a client, you can also ask for your personal information to be erased.
Any request should be made in writing to Pip Morris, 2 Camberwell Drive, Worcester WR5 3TN or by email to email@example.com
In most cases we will not charge a fee to process these requests unless your request is considered to be unfounded or excessive, in which case we may charge a reasonable administration fee.
We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline. Wherever we collect sensitive information (such as credit card data), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the webpage.
While we use encryption to protect sensitive information transmitted online, we also protect your information offline by storing all physical documents in a locked filing cabinet. The computers/servers in which we store personally identifiable information are kept in a secure environment.
Linking to other websites and third-party content
Our website contains links to other sites. Linking does not constitute endorsement and we do not hold responsibility for the content of any linked website.
When you use the online booking system to make an appointment, as part of this process personal information will be collected from you, such as your name and email address.
Log files record information such as which files are requested from this website’s web servers. They capture information including your IP address, date and time of the visit, the type of device you used to access the website, and the pages you visited. We use this information to monitor and analyse web usage and trends in order to make improvements to our website.
We collect and process all of the data listed above because it is necessary to fulfil the terms of our client contracts and/or because we have a legal obligation to do so and/or because you have given consent to do so.
If you object to the collection, sharing and use of your personal data we may be unable to provide you with our services.
We may share your data with third parties as part of a sale or purchase of any business or assets, or where we are being acquired by a third party.
We may also share your data with third parties to enforce our terms and conditions or where we are entitled or required by law to do so.
Whilst we have taken measures to ensure the safety of your data, the internet is not a 100% secure channel of communications and we cannot guarantee the security of any information transmitted.
Consent, access to information and right to erasure
By filling in forms on this website or making contact by phone/email or through the online booking service, you are giving consent for us to hold your personal information. We use this information to give you the best possible service.
If at any point you believe the information we hold on you is incorrect you can request to see this information and have it corrected. In some cases you have the right to have data about you erased or the use of it restricted.
If you have made an enquiry about our services but have not gone on to become a client, you can ask for your information to be deleted at any time.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances. If you are a client, we are required to keep some information for legal, tax and insurance purposes for a minimum retention period. Depending on the circumstances, we may need to keep it for longer. Please note that we are not able to erase any data which we are required to keep by law and for tax and insurance purposes.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us using the contact details above if you wish to make a request.
In case of personal data we hold being breached, either accidentally or deliberately, leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data, we will take the following actions: On becoming aware of a breach, we will try and contain it and assess the potential adverse consequences for individuals. We will establish the likelihood and severity of the resulting risk to people’s rights and freedom. If it’s likely there will be a risk, we will contact the Information Commissioner’s Office (ICO). In very serious cases, we may inform individuals directly as soon as possible that a breach has taken place. All breaches, whether notified to the ICO or individuals or not, will be recorded.
How to contact us
Please get in touch if you have any questions about this Policy or the information we hold about you. Queries can be sent in writing to Pip Morris, 2 Camberwell Drive, Worcester WR5 3TN or by email to firstname.lastname@example.org
If you are not satisfied with our handling of your data, please contact us using the details above to raise a complaint. You also have the right to complain to the Information Commissioner’s Office (ICO).
How to complain
You can complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
Updates to this policy
We review our policy regularly and will update this page with any changes.