The following statement explains how Asha Therapies collects and uses your information. Our aim is always to respect you and your privacy and to comply with the Data Protection Act 1998 and European Union General Data Protection Regulation (GDPR).
The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. We ask that you read this privacy notice carefully as it contains important information about who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and how to contact us and supervisory authorities in the event you have a complaint.
Who controls your information and how to contact us:
I, Natascha Gonnermann, am the data controller responsible for your information and this website. I can be contacted at: support@ashatherapies.co.uk
What information is needed and how is it used?
There are some essential pieces of information that we require to enable you to engage with the services that we provide.
The personal information that we collect and process include:
Personal information such as your name, address, date of birth and GP details.
Contact information, including phone number and email address.
Your health condition and status
Details of the appointments you have with us
Referral letter where appropriate and assessment letters/reports
Details about medication you take
Lawful Basis:
In order to effectively and efficiently provide and manage your treatment it is a contractual requirement that your data is captured, stored and updated on our systems.
How is it used and who is it shared with?
Your information is used to effectively plan and review your therapy.
Your clinical information is stored on an encrypted cloud based (highly secure) electronic system https://powerdiary.com which is also GDPR compliant.
I may also use your information to make onward referrals where appropriate and agreed with you and to report and raise any safeguarding/risk issues.
I will not disclose your information to third parties without your permission unless there are exceptional circumstances such as the health and safety of another person being at risk or where the law requires information to be passed on.
Data retention – how long we keep your data:
Any paper notes, such as formulations and diagrams, are scanned and uploaded to my electronic system once no longer required for your therapy sessions, and the paper copies are cross shredded.
I am required to keep personal information for a period of 7 years for clients 18 and over and for 7 additional years after a child or young person turns 18, in line with our liability insurance. After this time your data is securely destroyed/deleted from our system.
Linking to other websites/third party content:
Any links to external sites and resources from Asha Therapies website does not constitute endorsement, and Asha Therapies take no responsibility for the content (or information contained within) any linked website
Your rights:
The Data Protection Act and GDPR provide you with a number of rights in terms of your data - to learn more about these rights please see the ICO website https://ico.org.uk/
Please address any requests to Natascha Gonnermann as detailed above.
If you are dissatisfied with our response you can complain to the Information Commissioner's Office
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 (local rate) or 01625 545 745