The Bristol Massage Centre will always respect the privacy of individuals who browse our website and leave contact details.  Please read it carefully as it contains important information about what to expect when we collect personal information about you and how we use that data

Bryan Rookes I.T.E.C  I.P.T.I  M.I.R.P.T  trading as the ‘Bristol Massage Centre’

Tel: 07970178085

Email info@bristolmassagecentre.co.uk

ICO Reference Number:  ZA759111

Date created:

The GDPR (General Data Protection Regulation) of 25 May 2018 is the legal regulation that has been put in place to safeguard an individual’s personal information.  The GDPR is an EU-wide directive that all UK businesses need to be compliant with. The Bristol Massage Centre respect and protect your privacy. This notice sets out the different areas where user privacy is concerned and outlines the obligations and requirements of the users, the website at www.bristolmassagecentre.co.uk

The following privacy policy details the lawful basis for the Bristol Massage Centre to hold information, the type of information that the Bristol Massage Centre  holds about its clients, why that information is required, who it is shared with, how that information is used and protected and details the rights an individual has in terms of access to that information or, requests for information held to be amended or deleted.

INFORMATION YOU PROVIDE

Your privacy is important to the Bristol Massage Centre. By providing personal information such as your name and email address via the forms on this website, you agree to The Bristol Massage Centre contacting you with regard to the information you request.

Your personal data is only used for the purpose of your enquiry and to help provide a service to you at the Bristol Massage Centre . We will not pass your details to any other government department or third party for the purpose of marketing or unsolicited contact.

WHY THE INFORMATION IS REQUIRED

The lawful basis by which the Bristol Massage Centre holds this information is held under Special Category Data: Health.

In order to provide an effective and safe massage therapy treatment,  the Bristol Massage Centre requires information about your current health and your medical history.

This information is used only to provide you with the best possible course of treatment and advice.

When you buy a gift voucher we collect personal details such as your name, email, recipient’s name and possibly a postal address. This information is used to identify you and provide the service you have requested.

The Bristol Massage Centre also requires your contact details to arrange appointment times with you.

As a registered massage therapist with I.T.E.C (International Therapy Examination Council) and a member  of M.I.R.P.T  (Member of the International Registrar of Physical Therapist) I abide by these associations codes of conduct and confidentiality requirements.

HOW LONG IS THE INFORMATION HELD FOR

The Bristol Massage Centre  is required to keep your information for a period of 7 years after your last treatment for insurance purposes.

Your data will not be transferred without your consent .

In the case of treatment to minors, records shall be kept for 7 years after they reach the age of majority (18).

Seven years after your last treatment The Bristol Massage Centre will permanently delete all your personal information that are held

Disposal of Data: Once per year the Bristol Massage Centre will review all client records and destroy any records that are no longer bound by the regulated legal timescale for such records to be held.

CONSENT WITHDRAWAL

Should you wish to withdraw your consent at any time please email info@bristolmassagecentre.co.uk with your request.

If you withdraw your consent during the seven year retention period, we will archive your data until the seven year period expires.

Whilst your information is archived, we will not access or process it in any way accept if needed for legal protection or if the Bristol Massage Centre is required to do so by law.

Should you wish to withdraw your consent at any time please email info@bristolmassagecentre.co.uk with your request.

YOUR RIGHTS

Your Individual Rights under the Data Protection Act 2018.

You have the right to:

Access to your personal data;

Object to the processing of your personal data;

Restrict the processing of your personal data;

Rectification of your personal data;

Erasure of your personal data;

Data portability (to receive an electronic copy of your personal data)

MY RIGHTS

In exercising your Individual Rights, you should understand that in some situations the Bristol Massage Centre may be unable to fully meet your request, for example if you make a request for me to delete all your personal data, I may be required to retain some data for taxation, legal, regulatory and insurance purposes.

You should understand that when exercising your rights, a substantial public or vital interest may take precedence over any request you make. In addition, where these interests apply, we are required by law to grant access to this data for law enforcement, legal and/or health related matters.

YOUR CONSENT

When you provide us with your personal information in the course booking an appointment, completing your massage intake form, making a payment or contacting us about our services, you are giving your consent to us collecting that information and using it for that specific reason.

We will not use your personal information for any secondary reason, like marketing, unless we have asked you directly for consent to do so.

UPDATING, ACCESSING OR AMENDING PERSONAL INFORMATION

You have the right to review the personal information we store about you and your massage sessions at any time. These will be sent by email, in a Microsoft Word document attachment.

You also have the right to request we update or amend your data if it is incorrect.

To action any of these rights at any time please email info@bristolmassagecentre.co.uk with your request.

STORAGE AND SECURIRTY

Our appointment booking and document service is provided by Ovatu. Ovatu are committed to ensuring that the personal information we collect is secure. In order to prevent unauthorised access or disclosure,  Ovatu have put in place suitable physical, electronic and managerial procedures such as the pseudonymisation and encryption of personal information, to safeguard and secure personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.

COOKIES AND WEB BEACONS

We may use cookies on our Site from time to time. Cookies are text files placed in your computer’s browser to store your preferences. Cookies, by themselves, do not tell us your email address or other personally identifiable information. However, they do allow third parties, such as Google and Facebook, to cause our advertisements to appear on your social media and online media feeds as part of our retargeting campaigns. If and when you choose to provide our Site with personal information, this information may be linked to the data stored in the cookie.

We may use web beacons on our Site from time to time. Web beacons (also known as Clear GIFs) are small pieces of code placed on a web page to monitor the visitor’s behaviour and collect data about the visitor’s viewing of a web page. For example, web beacons can be used to count the users who visit a web page or to deliver a cookie to the browser of a visitor viewing that page.

We may use Google Analytics and other analytics tools such as Fabric.io to collect and process data. To find out how Google uses data when you use third party websites or applications, please see www.google.com/policies/privacy/partners/ or any other URL Google may use from time to time.

PAYMENT

If you choose to pay for your massage with a debit or credit card your information will be passed to our payment processors – either PayPal or Stripe for online card payments (for purchasing our gift vouchers) or iZettle for card payments in person.

We never store your credit card details, it is always processed by third-parties. It is encrypted through the Payment Card Industry Security Standard (PCI-DSS).

Both PayPal and Stripe offer a service whereby you can pay for your gift voucher quickly using credit or debit card details previously stored with them. We can’t see your stored card details or information.

Paypal, Stripe and iZettle all adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

LINKS TO THIRD PARTY WEBSITES

When you click on links on The Bristol massage Centre website we are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy.

AMENDMENTS

We may, at any time and at our discretion, vary this Privacy Policy. We will notify you if we amend this Privacy Policy, by contacting you through the contact details you have provided to us. Any amended Privacy Policy is effective once we notify you of the change.

When you provide us with your personal information in the course booking an appointment, completing your massage intake form, making a payment or contacting us about our services, you are giving your consent to us collecting that information and using it for that specific reason.

We will not use your personal information for any secondary reason, like marketing, unless we have asked you directly for consent to do so.

HOW CAN I ACCESS, UPDATE OR AMEND MY PERSONAL INFORMATION?

You have the right to review the personal information we store about you and your massage sessions at any time. These will be sent by email, in a Microsoft Word document attachment.

You also have the right to request we update or amend your data if it is incorrect.

To action any of these rights at any time please email info@bristolmassagecentre.co.uk with your request.