Suresteps Wellbeing Service General Data Protection Regulation (GDPR)

General Data Protection Regulation came into force on 25th May 2018 to help protect your personal data and privacy. Your privacy is important to us, and we want to communicate with our clients in a way which has their consent, and which is in line with UK law on data protection including the General Data Protection Regulation (GDPR).

My Privacy Notice and this consent form refer to personal data. Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data includes your name, address, email address and phone number.

My Privacy Notice and consent form also refer to processing. Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means such as collection, recording, organisation, structuring, storage, adaption or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Processing includes using your contact details to communicate with you. When you supply your personal details to us during a consultation they are stored and processed for the following reasons:

1. We need to collect personal information about you in order to provide you with the best possible service. Your requesting service from us and our agreement to provide that service constitutes a contract. You can, of course, refuse to provide the information, but if you were to do that, we would not be able to provide service to you.

2. We also may need to contact you in order to confirm your appointment to see me/us, or to update you on matters related to the service you receive from us. This again constitutes “Legitimate Interest”, but this time it is your legitimate interest.

You may withdraw this consent at any time. Such requests will be acknowledged. We will not keep your record more than necessary.

Your records are stored:

• On paper, in locked filing cabinets and in the office is always locked out of working hours

• Electronically on the computer which has up-to-date security software. Access to this data is strictly password protected. We will never share your data with anyone who does not need access to it without your written consent. Only the people providing you service will have routine access to your data:

 

to keep me informed about the service I receive. I also understand that my personal data will be used for the legitimate interests and as part of our “contract” as outlined above