Sambandha - Privacy Notice
1. Introduction
I, Paula Walsh, trading as Sambandha, am a Self-Love and Empowerment Coach and Energy Healer, providing these services to groups and individuals. For the purposes of Data Protection Law (GDPR), I have collected data from you, therefore I am a data controller.
This Privacy Notice applies to personal data held and used (“processed”) by me. This privacy policy is intended to provide information about how I will collect, use and store the personal data relating to individuals and is provided in accordance with the rights of individuals under Data Protection Law to understand how their data is used.
2. What Is The Lawful Basis For Processing Personal Data?
Under Data Protection Legislation, there must be a ‘lawful basis’ for the use of personal data. The lawful bases are outlined in Article 6, Section 1 of the GDPR. They are sub-sections:
a) ‘your consent’;
b) ‘performance of a contract’;
c) ‘compliance with a legal obligation’;
d) ‘protection of your, or another’s vital interests’;
e) ‘public interest/official authority’; and
f) ‘our legitimate interests’.
3. What Personal Data I Might Hold
Personal data means any information about an individual from which that individual can be identified.
Personal data can be received from individuals directly when booking a session and through the pre-session questions document, through attending workshops, meditations, programs or via website enquiries and downloads.
For insurances purposes, I am required to make notes in 1:1 sessions, which is also used to discuss and review your progress with you the client.
The information I may collect includes, by way of example:
a) Name, gender, date of birth
b) Billing address, email, telephone number
c) Medical history, medication details
d) Payment/transaction details
e) Notes made and discussed in a 1:1 session
There is a ‘legitimate interest’ for collecting this information to enable me to communicate with you regarding your bookings and purchases and to allow me to run my sessions safely and effectively.
4. How I Store Your Personal Data
Your records may be stored:
a) on paper in secure files and filing cabinets
b) electronically where they are password protected.
Your records will be held for 7 years after you cease to become a client and will then be securely destroyed.
I will never share your data with any third party without your written consent. I will never sell your data.
All sessions are strictly confidential, but in the case of any risk of a serious threat to harm yourself or others, I would be legally required to contact the relevant authority.
5. Your Rights
You have the right to see what personal data of yours is held and can ask for any factual errors to be corrected. Provided the legal minimum period has elapsed, you can ask for your records and data to be erased.
I want you to feel confident that I am treating your personal data responsibly. If you feel that your personal data is being mishandled in anyway, you have the right to complain. Please contact the ‘Data Controller’ as below:
Data Controller: Paula Walsh
Email: sambandha@sambandha.co.uk
If you are not satisfied with the response, then you have the right to raise the matter with the Information Commissioner’s Office.