Image Alt

Privacy Policy

  /  Privacy Policy

First created and effective 1st June 2022

Last updated 11th August 2023

This is the privacy notice for our website (‘we’, ‘our’, or ‘us’) www.holisticwellbeingpractice.co.uk of the domain name Holistic Wellbeing Practice.

Contact email address: contact@holisticwellbeingpractice.co.uk

Introduction

Your privacy is important and we care about how your data is handled. This policy describes how we collect and process your personal data through your use of our website.

In the context of the law and this notice, ‘personal data’ is information that clearly identifies you as an individual or which could be used to identify you if combined with other information. Acting in any way on personal data is referred to as ‘processing’.

This notice currently applies to personal data collected through our website.

Except as set out below, we do not share, or sell, or disclose to a third party, any information collected through our website.

By providing us with your data, you warrant to us that you are over 13 years of age.

Personal data we process

  1. How we obtain personal data

The information we process about you includes information:

  • you have directly provided to us through; the contact form/calendar booking form on the website, via email or telephone.
  • as a result of monitoring how you use our website or our services

  1. Types of personal data we collect directly

When you use our website or our services, we ask you to provide personal data. This can be categorised into the following groups:

  • personal identifiers, such as your first and last names, your title and your date of birth
  • health data: any relevant information required when enquiring for or booking our services in order to accurately and safely provide the service
  • contact information, such as your email address, your telephone number
  • records of communication between us including messages sent through our website, email messages and telephone conversations

  1. Personal data from third parties

We do not collect personal data from any third parties.

  1. Types of personal data we collect from your use of our website and services

By using our website and our services, we process:

  • technical information about the hardware and the software you use to access our website and use our services, including your Internet Protocol (IP) address, your browser type and version and your device’s operating system
  • usage information, including the frequency you use our services, the pages of our website that you visit, whether you receive messages from us and whether you reply to those messages
  • your preferences to receive marketing from us; how you wish to communicate with us; and responses and actions in relation to your use of our services.
  • Data that is required relevant to carrying out the service requested (see below)

  1. Special or sensitive personal data

We need to collect sensitive data about you as outlined below in order to deliver the service of Jikiden Reiki treatments only. The type sensitive data we need to collect for Reiki treatments is health data. It is required that we collect this information so that we can deliver the Jikiden Reiki service in an effective way. Our lawful basis for collection and processing of health data is our legitimate interest (in order to be able to deliver the service) with special category (h).

Your personal data will only be used for the purpose for which it was collected. We will let you know, should an unrelated new purpose arise and the legal grounds for processing will be explained to you.

Your personal data may be processed without your knowledge or consent in the case where it is required or permitted by law.

  1. If you do not provide personal data we need

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform that contract.

In that case, we may have to stop providing a service to you. If so, we will notify you of this at the time.

The bases on which we process information about you

The law requires us to determine under which of six defined bases we process different categories of your personal data, and to notify you of the basis for each category.

If a basis on which we process your personal data is no longer relevant then we shall immediately stop processing your data.

If the basis changes then if required by law we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information.

  1. Information we process with your consent

Through certain actions when otherwise there is no contractual relationship between us, such as when you browse our website or ask us to provide you with more information about our services, you provide your consent to us to process information that may be personal data.

Wherever possible, we aim to obtain your explicit consent to process this information, for example, we ask you to agree to our use of non-essential cookies when you access our website. We also include a box to tick on our contact form before sending the message to show you have read and understood this privacy policy.

We continue to process your information on this basis until you withdraw your consent or it can be reasonably assumed that your consent no longer exists.

You may withdraw your consent at any time by instructing us by email at  contact@holisticwellbeingpractice.co.uk. However, if you do so, you may not be able to use our website or our services further.

We aim to obtain and keep your consent to process your information. However, while we take your consent into account in decisions about whether or not to process your personal data, the withdrawal of your consent does not necessarily prevent us from continuing to process it. The law may allow us to continue to process your personal data, provided that there is another basis on which we may do so. For example, we may have a legal obligation to do so.

  1. Information we process for the purposes of legitimate interests

We may process information on the basis there is a legitimate interest, either to you or to us, of doing so.

Where we process your information on this basis, we do after having given careful consideration to:

  • whether the same objective could be achieved through other means
  • whether processing (or not processing) might cause you harm
  • whether you would expect us to process your data, and whether you would, in the round, consider it reasonable to do so

For example, we may process your data on this basis for the purposes of:

  • improving our services
  • record-keeping for the proper and necessary administration of our
  • responding to unsolicited communication from you to which we believe you would expect a response
  • exercising our legal rights, including to detect and prevent fraud and to protect our intellectual property
  • insuring against or obtaining professional advice that is required to manage risk
  • protecting your interests where we believe we have a duty to do so

  1. Information we process because we have a legal obligation

Sometimes, we must process your information in order to comply with a statutory obligation.

For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order.

This may include your personal data.

  1. Information we process to protect vital interests

In situations where processing personal information is necessary to protect someone’s life, where consent is unable to be given and where other lawful bases are not appropriate, we may process personal information on the basis of vital interests.

For example, we may inform relevant organisations if we have a safeguarding concern about a vulnerable person.

How and when we process your personal data

  1. Information you provide

Our website does not include allowing you to post information or comments.

However please read this as a helpful caution regarding information that you post to social media or other websites. When you post information, you post it with a view to that information being read, copied, downloaded, or used by other people.

For example, when you leave a review or post a message on any platform, it is reasonably assumed that you consent for the message to be seen by others. We may include your username with your message, and your message may contain information that is personal data.

Other examples include:

  • tagging an image
  • clicking on an icon next to another visitor’s message to convey your agreement, disagreement or thanks

In posting personal data, it is up to you to satisfy yourself about the privacy level of every person who might use it. You should also check the privacy policy and settings of the website or social media platform you’re using.

  1. Payment information

Payment information is never taken by us or transferred to us either through our website or otherwise. We never have access to it.
At the point of payment, you are transferred to a secure page on the website of PayPal who provides the payment service. That page may be branded to look like a page on our website, but it is not controlled by us.

  1. Information obtained from third parties

We do not disclose your personal data to any third party (except as set out in this notice) and do not receive your personal data from any third party.

Use of information we collect through automated systems

  1. Cookies

Cookies are small text files that are placed on your computer’s hard drive by your web browser when you visit a website that uses them. They allow information gathered on one web page to be stored until it is needed for use at a later date.

They are commonly used to provide you with a personalised experience while you browse a website, for example, allowing your preferences to be remembered.

They can also provide core functionality such as security, network management, and accessibility; record how you interact with the website so that the owner can understand how to improve the experience of other visitors; and serve you advertisements that are relevant to your browsing history.

Some cookies may last for a defined period of time, such as one visit (known as a session), one day or until you close your browser. Others last indefinitely until you delete them.

Your web browser should allow you to delete any cookie you choose. It should also allow you to prevent or limit their use. Your web browser may support a plug-in or add-on that helps you manage which cookies you wish to allow to operate.

The law requires you to give explicit consent for use of any cookies that are not strictly necessary for the operation of a website.

When you first visit our website, we ask your consent to use only necessary cookies or allow all cookies.  If you continue to use the website without accepting, we will assume you are happy with the current setting. The information in our cookie banner allows you to check the cookie settings and enable/disable any cookies at the time and you can also manage cookie settings at any time after that via the link in the footer.

If you choose not to use cookies or you prevent their use through your browser settings, you may not be able to use all the functionality of our website.

  1. LiteSpeed Cache

This site utilizes caching in order to facilitate a faster response time and better user experience. Caching potentially stores a duplicate copy of every web page that is on display on this site. All cache files are temporary, and are never accessed by any third party, except as necessary to obtain technical support from the cache plugin vendor. Cache files expire on a schedule set by the site administrator, but may easily be purged by the admin before their natural expiration, if necessary. We may use QUIC.cloud services to process & cache your data temporarily. Please see https://quic.cloud/privacy-policy/ for more details.

Other matters

  1. Links

Embedded content from other websites

Some pages on this site include embedded content and links to other 3rd party websites (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. Therefore, when you click on these links and visit other websites, we no longer have control over the protection and privacy of your information you provide and such sites are not governed by this privacy statement. You should exercise caution and check the privacy application to the relevant websites you visit.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

  1. Your rights

The law requires us to tell you about your rights and our obligations to you in regard to the processing and control of your personal data.

We do this now, by requesting that you read the information provided at http://www.knowyourprivacyrights.org

  1. Use of our services by children

We do not sell services for direct purchase by children, nor do we market to children. Our Jikiden Reiki service is suitable for children but this will always be under parental/guardian consent and supervision (when under 16 years of age).

  1. Encryption of data sent between us

We use Secure Sockets Layer (SSL) certificates to verify our identity to your browser and to encrypt any data you give us.

Whenever information is transferred between us, you can check that it is done so using SSL by looking for a closed padlock symbol or other trust mark in your browser’s URL bar or toolbar.

  1. Delivery of services using third party communication software

With your consent, we may communicate using software provided by a third party such as Facebook (WhatsApp), Apple (Facetime), Microsoft (Skype) or Zoom Video Communications (Zoom).

Such methods of communication should secure your personal data using encryption and other technologies. The providers of such software should comply with all applicable privacy laws, rules, and regulations, including the GDPR.

If you have any concerns about using a particular software for communication, please tell us.

  1. Communicating with us

When you contact us, whether by telephone, through our website (contact form) or by email, we collect the data you have given to us in order to reply with the information you need.

We record your request and our reply in order to increase the efficiency of the way we work.

We may keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications with you to provide a high quality service.

  1. Complaining

If you are in any way dissatisfied about how we process your personal data, you have a right to lodge a complaint with the Information Commissioner’s Office (ICO). This can be done at https://ico.org.uk/make-a-complaint/. We would, however, appreciate the opportunity to talk to you about your concern before you approach the ICO so that we can try to resolve it for you.

  1. Retention period

Except as otherwise mentioned in this privacy notice, we keep your personal data only for as long as required by us:

  • to provide you with the services you have requested
  • to comply with other law, including for the period demanded by our tax authorities

  1. Compliance with the law

Our privacy policy complies with the law in the United Kingdom, specifically with the Data Protection Act 2018 (the ‘Act’) accordingly incorporating the EU General Data Protection Regulation (‘GDPR’) and the Privacy and Electronic Communications Regulations (‘PECR’).

  1. Review of this privacy policy

We shall update this privacy notice from time to time as necessary.

 

This privacy policy was created with the help of a template made by ©Andrew Taylor and Net Lawman Ltd available at https://www.netlawman.co.uk/