WHO WE ARE
Sumeya Jakhura Ltd Trades as The Amber Clinic and Vitality Dietitian. The Company is registered in England and Wales with company number 06705846 and has it’s registered office at:
Sumeya Jakhura Ltd
103 Leicester Road
Contact Email: email@example.com
Contact Phone: 07984780372
The Amber Clinic (referred to hereafter as the ‘We’ or the ‘Company’) are committed to protecting and respecting your privacy.
For the purpose of the Data Protection Act 1998 (the Act), and General Data Protection Regulations 2018 (GDPR) the Data Controller is The Amber Clinic.
To outline the Company’s processes aligned to Data Protection and Privacy relating to you.
WHO DOES THIS POLICY APPLY TO?
Any employee who works for the Company, as well as any other individuals working at or visiting the Company premises or engaged by the Company. It also applies to [apprentices signed up by The Amber Clinic (and their parents/carers, where they are deemed to be young people or vulnerable adults), and] visitors to the Company, as well as agency workers, casual workers, contractors, consultants, interns, seconded staff, agents, suppliers and sponsors, or any other person associated with us (“associated persons”).
INFORMATION ABOUT US
Our nominated data protection contact is Sumeya Jakhura who can be contacted at firstname.lastname@example.org.
By giving your consent you are accepting and consenting to the practices described in this policy. You may withdraw your consent at any time. An explanation of your rights is set out below.
If you are not satisfied with any action taken by us or response given, you have the right to complain to the Information Commissioner at:www.ico.gov.uk, or help line telephone number: 0303 1231113.
In this policy the following terms shall have the following meanings:
Cookie: a small file placed on your computer or device by our website when you visit certain parts of it or use certain features.
Cookie Law: means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003.
Data Subject: a natural identifiable person.
Personal Data: has the meaning set out in the Data Protection Legislation, being as at the data of this policy, any data which identifies a natural person (by way of example, name, address, phone number and so on).
WHAT THIS POLICY ALSO COVERS
This policy also explains:
- What personally identifiable information of yours is collected:
– on our website, when you interact with it;
– when you download from our website;
– when you interact with our website advertising and applications on third party websites and services.
- What organisation is collecting the information;
- How the information is used;
- With whom the information may be shared;
- What choices are available to you regarding collection, use and distribution of the information;
- What kind of security procedures are in place to protect the loss, misuse or alteration of information under our control;
- How you can correct any inaccuracies in the information; and
- How you can request the Personal Data we process and store to be removed.
HOW DO WE COLLECT INFORMATION?
When you contact “The Amber Clinic” regarding our services, send or receive information and make purchases, you provide us with personal information.
WHAT WE COLLECT:
We need to collect some personal information about you and your health in order to make sure there are no contraindications to your treatment, and legal requirements. You can of course, refuse to provide the information, however unfortunately we would have to refuse your treatment as this form is a legal requirement for our insurance.
We may collect the following information:
- Full name, occupation, gender and marital status;
- Contact information and personal details – home address, email, contact telephone numbers, details of GP and other medical professionals;
- Current and past medical history, current medications, body measurements (including before and after pictures with consent) and lifestyle information provided by the client;
- If you access our website, technical information including internet protocol (IP) address used to connect your computer to the internet, your log in information, browser type and version time zone setting, browser plug in types and versions, operating system and platform.
In order to process financial transactions, we may ask you for your bank or credit card details. All online transactions are encrypted using SSL (Secure Socket Layer). We do not store credit card details nor do we share customer details with any third parties. All financial transactions are completed using a payment platform called ‘Square’.
Data such as IP addresses (the location of computers on the internet through your ISP), pages accessed and files downloaded are collected by “The Amber Clinic”. Information of this nature is anonymised and no attempts are made to link this information with personal data held on record. This information is collected to help “The Amber Clinic” determine how our users are visiting and navigating our web pages. This information is used to help monitor and improve our service to you.
WHAT WE DO WITH THE INFORMATION WE GATHER:
We will use the data collected about you in the following ways:
- to provide services to you;
- to deal with your enquiry if you complete our contact form;
- to assess and understand your requirements;
- Professional clinical record keeping of client information;
- Your phone number and email may be used electronically, with your permission. This is for appointment reminders or occasional offers.
- If you wish to contact us via social media, this is password protected but for historic issues with privacy associated with social media sites, you may wish to think about what you send us.
WHERE AND HOW WE STORE YOUR PERSONAL DATA
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place appropriate technical, organisational and security measures to safeguard and secure the information we collect.
- As referred to above, our website is hosted by one.com No data is stored on our website.
- We keep all paper records containing your Personal Data in locked cabinets within the salon and only allow accessible by Staff to The Amber Clinic who need to access the Personal Data. We also use an online software called Ovatu to make bookings, store client data and request forms etc.
- Our laptops are password protected
- Digital Documents or records on salon’s software are password protected; and are only accessible by staff of The Amber Clinic.
- Records made by The Amber Clinic relating to the care of a client, will be stored for up to seven years from the time of your most recent appointment. After this time your records will be destroyed in a method compliant with GDPR. We may also be under an obligation to store your Personal Data for longer in accordance with our professional indemnity insurers requirements.
As a Data Subject under the Data Protection legislation referred to above, you have the following rights:
We will never share your data with anyone who does not need access without your consent. Only the Manager and Staff of The Amber Clinic will have access to your data
We will not share your information with third party marketing agencies without your consent, nor will we contact you for marketing purposes unless you give your consent. If you consent to us contacting you for marketing purposes at any stage, you can change your mind at any time by exercising your right to ask us not to contact you by e mailing us at: email@example.com
Our website may, from time to time, contain links to and from other websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Data to these websites.
You have the right to ask us to supply to you the information we hold, this is known as a data subject access request. For further details please contact us on: firstname.lastname@example.org
You have the right to ask us to rectify the data we hold if it contains inaccuracies or is incomplete. To discuss this please contact us on: email@example.com
You have the right to ask us to erase the Personal Data Provided the legal minimum period has elapsed, you may also ask the business to erase your records we hold if: (i) it is no longer necessary for us to hold the data; (ii) you wish to withdraw your consent to us holding the data; (iii) you object to us holding or processing the data; (iv) you believe that we have processed the data unlawfully; or (v) the data needs to be erased for us to comply with a particular legal obligation. To make a request please contact us on: firstname.lastname@example.org
DISCLOSURE OF YOUR INFORMATION
You agree that we have the right to share your Personal Data with:
relevant health professionals (only when consent is given by the client).
In exceptional circumstances information about a client may be disclosed without consent if it is in the public interest to do so. This might be in circumstances where disclosing the information is necessary to prevent a serious crime or serious harm to other people.
To a prospective buyer or seller if we sell or buy any business, shares or assets.
Strictly Necessary Cookies – a Cookie falls into this category if it is essential to the operation of our website, supporting functions such as logging in.
Analytics and Flash Cookies – it is important for us to understand how you use our website. For example, how efficiently you are able to navigate around it, and what features you use. Analytics Cookies enable us to gather this information and helps us to improve our website.
Functionality Cookies – enable us to provide additional functions to you.
Persistent Cookies – any of the above types of Cookie may be a persistent Cookie. Persistent Cookies are those which remain on your computer or device for a predetermined period and are activated each time you visit our website.
Session Cookies – any of the above types of Cookie may be a session Cookie. Session Cookies are temporary and only remain on your computer or device from the point at which you visit our website. To delete these cookies you will need to clear your browser history.
Before Cookies are placed on your computer or device you will be shown a cookie compliance statement, requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling us to provide you with the best possible experiences and services to you. You may wish to deny consent to the placing of the Cookies at which point we request you cease using our website.
EXTERNAL WEB SERVICES AND LINKS
SUPPLIERS AND OTHER SERVICE PROVIDERS
We would like you to rest assured that we treat your personal data responsibly and that we do everything we can to make sure that only people who can access that data have a genuine need to. Please feel free to contact Sumeya Jakhura by emailing email@example.com should you have any further queries or concerns. We will be happy to help you.
© 2020, The Amber Clinic.