Privacy & GDPR

Windmill Therapies the home of Rugby Colonic Hydrotherapy and Food Intolerance Testing is managed by sole trader 'Lisa Marples' herinafter referred to as 'we', 'I', 'us' 'our' in this notice. Clients and customers of Windmill Therapies are hereinafter referred to as 'you', 'your' in this notice.

General Data Protection Regulation (GDPR) May 2018
Your privacy is important to us. This notice outlines how your personal data is used.

We ask each client to consent to us storing information that you have provided via a health questionnaire, by phone, text, Whatsapp, messenger, email, and post. Your consent means that we are able to contact you. If you no longer would like this information stored then you can request that it is deleted however, if you wish to return for another treatment, you will be required to complete another questionnaire prior to treatment.

We undertake measures in-line with our duty and requirements of the General Data Protection Regulation (GDPR) 2018, regarding data protection and take reasonable security measures to protect your personal data storage.
This notice outlines how that information is used, who we may share that information with, and how we keep your information secure. This notice is not exhaustive, but if you require further information or requests for data removal, please contact windmilltherapies@yahoo.com.

Our requirements under this legistlation are subject to regular review.

Who Are We and What Do We Do?
Windmill Therapies is the home of Rugby Colonic Hydrotherapy and Food Intolerance Testing. We provide Colonic Hydrotherapy, Food Intolerance Testing and other Holistic Therapies.

Storing Data Securely
All data, including health questionnaires are completed online and stored on the booking website at the time of booking and is stored securely on an encypted database for which we pay for. In the very rare advent that a paper questionnaire is completed, information such as the client’s name, address, email address, contact details and health/medical information would to be stored in a locked cupboard. Only authorised therapists will have access to this information. Printed data will be shredded when it is no longer needed or if a client contacts us to ask for data to be removed.

Links To Other Websites
From time to time, our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you subsequently provide upon visiting such sites. Other sites are not governed by this privacy statement and it is your responsibility to examine the privacy statement applicable to each website you visit. On occasions, with your permission, we may share your information with third parties e.g. Our laboratories for food intolerance testing. Please be assured that we do not will not sell, distribute or lease your personal information to third parties. You can withdraw your consent at anytime by emailing windmilltherapies@yahoo.com.

How Do We Obtain Your Personal Data?
You provide us with personal data in the following ways:

When you complete and sign a health questionnaire online or in clinic
Information obtained at your appointment
Information obtained by email, over the telephone, by text, WhatsApp, messenger or post.
Information provided by third parties that you have consented to being passed on to us.
Online payment or bank transfer.

This is not an exhaustive list but may include the following information:

Name, address, & contact details.
Details of contact e.g. referrals and appointment requests.
Health information e.g. previous medical history, dietary, lifestyle, supplement and medication details, copies of GP results that you or third party has provided us (with your consent).
GP contact information.
Payment details (Payments are processed by “Stripe” processing services (and Stripe are GDPR compliant)

How We Use Your Personal Data?
Lisa Marples is the Data Controller for the use of your personal data and also the controller and processor of any data from third parties such as the Food Intolerance Testing labs and online payments.

Do You Share My Information With Other Organisations?
Information is confidential and only disclosed to other third parties with your express consent with the exception of the following categories of third parties:

Any legal or crime prevention agencies in-line with legal obligations
Orders made on your behalf e.g. a test or vitamin supplements, with your consent.
Our professional body, for the processing of a complaint involving yourself.
If we believe that your life is in danger, an appropriate authority e.g. police, social services, GP.

What Are Your Rights?
You have the right to see, amend, delete or have a copy, of data held that can identify you. You do not need to give a reason to see your data. If you would like to access your data, you can make a subject access request in writing to windmilltherapies@yahoo.com. A £50 administration fee will be charged to pull this information together. Under special circumstances, some information may be withheld. You will receive a response within 20 working days from the date the request is received, if this timescale is not possible, e.g. due to the compexity of the request / legal issue, we will inform you as to the reason why and anticipated timescales.

We will provide details of the personal data we hold relating to you, to include:-

The sources the information was acquired.
The purposes of processing the information.
Persons or organisations with whom we are sharing the information.

You have the right to ask:-

Your information to be deleted
Your information corrected or updated, if it is not accurate
Request processing information to cease that is not required by law or a regulatory body.
Receive a copy of your personal data, which you have provided to us, in a readable format and have the right to transfer the data to another controller with your consent
Request at any time for us to stop processing personal data associated with you.

If you would like to exercise any of the above rights, please email us at windmilltherapies@yahoo.com

What Measures Are in Place To Ensure Data That Identifies Me Is Secure?
We only use information that may identify you in accordance with GDPR. This requires us to process personal data only if there is a legitimate basis. Any processing must be fair and lawful. Within the health sector, we also have to follow the common law duty of confidence, which means that where identifiable information about you has been given in confidence, it should be treated as confidential and only shared for the purpose of providing direct healthcare. We will protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared.

How Long Do You Hold Confidential Information For?
All records held by Windmill Therapies will be kept for the duration specified in Section B8 of the CNHC Code which requires registrants to keep client’s records safely and in good condition for eight years from the date of the client’s last visit or, if the client is 17 years old when the treatment ended, until his or her 26th birthday. This means that registrants have a ‘legitimate interest’ in retaining records for this period.

Website Technical Details
Our website is hosted by WIX and uses secure forms.

Payments are securely processed by Stripe.

Cookies collect information and help the site function more efficiently and all information collected is done anonymously. Cookies uses are minimal. We do not make use of cookies to collect any private or personally identifiable information. The technical platform of this website uses cookies solely for the proper technical functioning of the website. The cookies used contain random strings of characters alongside minimal information about the state and session of the website – which in no way collects or discloses any personal information about you as a client or a visitor to the site. Advanced areas of this site may use cookies to store your presentation preferences technically for functioning of the wesite but does not target and identify individuals information.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout

Complaints
If you have a complaint regarding the use of your personal data then please contact us windmilltherapies@yahoo.com

If your complaint is not resolved to your satisfaction and you wish to make a formal complaint to the Information Commissioner’s Office (ICO), you can contact them on 01625 545745 or 0303 1231113