Privacy Policy

GENERAL DATA PROTECTION REGULATION (GDPR) POLICY

This page covers the collection and storage of personal information by Open Reiki and what your rights are.

Data Controller: Olievah NT-Dalladay

Information I hold and what I do with it

When you book a session and during the initial assessment I collect the following information in order to proceed;

Your name and contact details
Emergency contact details and their relationship to you
GP contact information as well as any relevant medical conditions, history and prescribed medication
Treatment details and related notes (which I will take after each consultation)

I will only use this information in relation to your reiki sessions and to maintain your well being.

How your information may be shared

I wont ever share your information with others, unless it is necessary for legal/insurance reasons which I will never do without your explicit permission.

the only exception to this is if you display certain 'red flag' symptoms in which case I am required to notify your GP, or in the event of a physical or mental health emergency (including if I believe you may be a threat to others). In this case I will contact emergency services, if it is possible I will ask for your permission to do so.

How your information is stored

Laptop: I will store forms and information gathered during assessments on a password protected laptop, kept stored securely when not in use.
Physical notes: during and after a session I may make some notes which will be stored in a locked container when not in use.
Mobile phone: I will store contact information on a secure mobile phone
Emails, Whatsapp messages: any emails sent via gmail will be stored on my laptop or proton drive as screenshots or PDFs and then deleted. Any emails stored in my proton mail will be stored there as ecrypted communications.Whatsapp/text messages will be stored on my phone until I deleted them (usually when we have finished our final session)

Any electronic communications you send will be held by you until you delete them yourself.

How Long I Retain Your Information for

If a client is under 17 I am required to keep their records until they turn 25, or 26 if they were 17.

After our final session I will delete all electronic communications with you within a month, however I am required to hold your session information/records for 7 years afterwards for insurance reasons. Once this time has elapsed I will destroy all remaining your information/records.

Your Rights

GDPR gives you the following rights:

The right to be informed:
To know how your information will be held and used (this policy page).
The right of access:
To see the records I hold of your personal information.
The right to rectification:
To tell me to make changes to your personal information if it is incorrect or incomplete.
The right to be forgotten:
You may request your information be erased

The right to restrict processing of personal data:.
You have the right to request limits on how your personal information is used
The right to data portability: you can request a copy of personal information held electronically so you can reuse it in other systems.
The right to object:
To be able to object to the use of parts of your information, or only to use it for certain purposes.
Rights in relation to automated decision-making and profiling.
The right to lodge a complaint with the Information Commissioner’s Office:
To be able to complain to the ICO if you feel your details are not correct, if they are not being used in a way that you have given permission for, or if they are being stored when they don’t have to be.

Full details of your rights can be found at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.

Please use the contact details provided if you wish to use any of these rights.

If you are dissatisfied with the response you can complain to the Information Commissioner's Office; their contact details are at: www.ico.org.uk