Additional Client Agreements
For clients who are interested in working either on a 'walk and talk' basis or using Trauma Centre Trauma-Sensitive Yoga (TCTSY), the following client agreements apply. I will ask you to manually sign a copy when we meet.
Individual and group yoga (TCTSY):
Data Protection and GDPR Information
Types of information I may hold about you:
(1) Your Name & Address
(2) Your Contact Telephone numbers and Text Messages (sent/received)
(3) E-mail address and e-mail correspondence (sent/received), including website enquiries
(4) GP contact details
(5) Emergency Contact persons phone numbers
(6) Any brief notes that I may make
(7) Data relating to how and when you access my website, including your IP address
This data is collected as part of our work together, in any additional correspondence we might have and (if relevant) through the new client intake online form or yoga group sign-up pages.
I use your data for the following purposes:
(1) To provide therapy services as agreed (if relevant)
(2) To comply with applicable laws and regulations
(3) To create aggregated statisical data about use of my website.
All data held by me is kept secured in line with data protection principles and UK law. More information on the data protection acts can be found on the ICO website - https://ico.org.uk/for-the-public/. More information on GDPR can be found here - https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/
Emilyharrisontherapy.com is hosted by the Wix platform. Ant data that you submit via the website will be stored through Wix.com’s data storage servers which are secured and behind a firewall.
I will only ever use your data to contact you as you have indicated in your communication with me. The data held is never be shared with third parties except for reasons outlined in the confidentiality agreement.
Data Retention Policy
I will keep the data I hold about you for 5 years following the end of our work together, unless we have agreed otherwise. At the end of the retention period I will securely destroy your data.
You have the right to request a copy of the data held or request any corrections that you feel are warranted. All requests received should be actioned within 28 days. I will check the validity of the request (to the best of my ability) to safeguard your data from misuse. Unless I am informed of changes in the data then you cannot be fully protected under the GDPR, but the data I hold will continue to be held in line with the GDPR.
If you have a concern about how your data is being handled, then you have the right to complain to the ICO (Information Commissioner’s Office) https://ico.org.uk/concerns/
By submitting any data via the website or communicating with me in a different way, you confirm that you are fully aware of what data is being held and that you are happy for this data to be held in line with the GDPR, UK law and my retention policy. If at any point in the future you change your mind, you can withdraw consent at any time.