The type of personal information we collect is in line with UK GDPR regulations
Personal information is any information that can be used to identify a living person. At Gabriel’s Touch Massage we will collect a customer’s email address, home address, customer financial information, medical history. We use this information as part of a client form to identify you as a living person and treat you appropriately. This data is stored on Acuity UK software – which also have T&C’s that can be found on the Gabriel’s Touch Massage website. It is also stored on a laptop at Gabriel’s Touch Massage c/o Yvonne Gabbriel which is password protected as well as a hard copy on file which is stored in a drawer under lock and key. If you, the client are unsure what personal information is, you can find more about what constitutes personal data on this link.
We currently collect and process the following information:
• Personal identifiers can include name and contact details, mobile number, in case of emergency contact, email address, personal home address, financial information (which you can choose to save on the booking system), medical history / information (which you need to inform the therapist if this changes).
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
• You are looking for treatment offered by Gabriel’s Touch Massage and/or;
a GP, Physiotherapist, Osteopath, Chiropractor, Personal Trainer has referred you to Gabriel’s Touch Massage for musculoskeletal treatment.
• A friend / colleague has referred you.
• You have a Gift Voucher and are required to provide your details.
We use the information that you have given us to understand what your medical history is, why you are coming for treatment and use it to help us treat you appropriately.
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:
(a) Your consent. You can remove your consent at any time. You can do this by contacting hello@gabrielstouchmassage.com
(b) We have a contractual obligation (Membership bodies).
(c) We have a legal obligation. (Insurance purposes)
(d) We have a vital interest. (To treat you appropriately)
(e) We have a legitimate interest. (So we know you are a real client)
We do not pass your details on to a third party unless agreed by you, the client. Gabriel’s Touch Massage will usually share third-party information with you the client so you can decide/choose whether you want to contact them. This third party if likely to be a professional that you have been referred to outside of Gabriel’s Touch Massage expertise who may be able to assist you.
How we store your personal information
Your information is securely stored.
We keep your client form, and any notes associated to your treatment for 6-years as per legal requirement. We will then dispose your information by shredding the client form and any notes associated with your form. Gabriel’s Touch Massage needs to legally keep records on your progress (and for insurance purposes) so we will update your client form every time you come for treatment. This is stored electronically and on locked file.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at hello@gabrielstouchmassage.com , or 07939623463 if you wish to make a request.
Customers’ Data Protection Rights
Based on the GDPR lawful basis assessment completed by Gabriel’s Touch Massage it is confirmed that Gabriel’s Touch Massage has a lawful basis to enter into a contractual agreement with a client for the purposes of carrying out services offered by Gabriel’s Touch Massage. For children under 18-years of age, the Parent or Guardian of the child will enter the contract on their behalf, confirming the child is a party to the contract and they have the necessary competence to enter into a contract. The Parent or Guardian must complete their child’s client form and sign a Consent form to treat the child when on site. The Parent or Guardian must accompany the child to the appointment and sign the form for each session as notes will be added to the client form as per each treatment to monitor progress. This is also for insurance purposes. This data is stored the same way as any Client form as stated on this Privacy Statement.
Legal Obligation to obtain data
For Gabriel’s Touch Massage to meet legal requirements given by the Massage Membership body, Insurance company and ICO data requirements, it is necessary for Gabriel’s Touch Massage to demonstrate who you are, why we are seeing you and record what treatment has been done. This is why you the client need to enter into a contract agreement (which is the client form), and why we need to keep a record of ongoing treatment.
Separate condition: If you the client discloses an illegal act or offence, under law, Gabriel’s Touch Massage or Yvonne Gabriel is obligated to share this with the Police. This is the only time any personal information would be shared to another Party.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at hello@gabrielsouchmasage.com for data protection queries.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk