1. Who We Are
Sherene Banner/ Circular Flow ltd, is the data controller.
You can contact me regarding your data at sherene@circularflow.co.uk
2. Data We Collect
To provide safe, tailored treatments and satisfy insurance requirements, I collect:
- Personal details: Name, date of birth, address, email, and phone number.
- Health & medical history: Details about previous injuries, medical conditions, medications, and lifestyle.
- Treatment records: Notes on assessments, treatments applied, and your progress.
3. Why We Collect It & Legal Basis
Your data is processed based on:
- Contractual necessity: To book appointments and provide effective bodywork, movement or 121 services.
- Legitimate interests: To ensure it is safe to treat you and to defend against legal or insurance claims.
- Explicit consent: For sending marketing communications, which can be withdrawn at any time.
4. Sharing Your Data
Your data will never be sold. It is kept strictly confidential unless:
- Shared with other healthcare professionals (only with your express permission).
- Required by law, regulatory authorities, or my professional indemnity insurance to defend a claim.
5. Data Retention
I only keep your information for as long as necessary. To comply with standard UK clinical and insurance requirements, adult treatment records are securely retained for 7 to 8 years after your last treatment. Financial and tax records are kept for 6 years.
6.Your Data Rights
Under the UK GDPR, you have the right to:
- Access and receive a copy of your personal data.
- Request that I correct or delete your data.
- Restrict or object to how your data is processed.
- Lodge a complaint with the ICO if you feel your data is mishandled.
When you book through Fresha:
Here are their Privacy Policies-
https://terms.fresha.com/privacy-policy