Privacy policy.

1. Introduction

Krishane Health understands that your privacy is important to you and that you care about how your personal data is used. The value of the privacy of everyone is who visits this website (www.krishanehealth.com) or is treated by me is respected.  I do not collect personal data about you unless you contact me directly.  Any personal data I collect will only be used as permitted by law.

2. Information about Krishane Health

Contact details: Clinic Address: Sucklings Yard, Church St, Ware, Hertfordshire, SG12 9EN
Phone Number: 07956 309075
E-mail: info@krishanehealth.com
I (Philip Earle) am a member of the following associations: Sports Massage Association Association of Reflexologists

3. What is personal data?

Personal data is defined by the General Data Protection Regulation (UK-GDPR) as ‘any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person’ Personal data is, in simple terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers. On 25th May 2018, the Data Protection Act 2018 came into force and I’m required to inform you what data I hold about you, why I need it, what I will be doing with your data, who I might share it with and when I will destroy it.

4. What information do I hold, why do I hold it and who might I share it with?

Currently I hold a completed Covid-19 screening form, consultation form and treatment records with your details. These include your name, address, date of birth and various methods of contacting you.

5. Personal data

Address, phone/mobile numbers, email address – these are all required in order for me to contact you.

Via this website you can give your consent to receive further patient information/advice and other marketing material via email.

Generally, your personal information will not be used for any secondary purpose, such as marketing, unless I have directly asked you for consent to do so.

6. Health related data

Currently I hold a completed Covid-19 screening form, consultation form and treatment records with your details. These include your name, address, date of birth and various methods of contacting you.

7. How and where do I hold your data?

From June 2021 patient information is stored on Cliniko (practice management system). Security of information is a central feature of the system. Data is backed up automatically on a regular basis and located in ultra-secure facilities. For more information visit: https://www.cliniko.com/

Prior to June 2021 or if there is a need to keep a paper record of your patient information, then consultation forms and treatment records are kept in a locked safe, with treatment records maintained on a password-controlled laptop/password protected online storage cloud. I have sole access to these records and all appropriate steps to preserve the confidentiality, integrity, availability and authenticity of your data will be taken.

8. How and where do I hold your data?

If you choose to pay for your massage with a debit or credit card your information will be passed to payment processors – Stripe for card payments online or SumUp for card payments in person.

Your debit or credit card details will never be stored, these are always processed by third parties.  They are encrypted through the Payment Card Industry Security Standard (PCI-DSS).

Stripe offers a service whereby you can pay for your appointment quickly using credit or debit card details previously stored with them.  Your stored card details or information cannot be seen.

Stripe and SumUP both adhere to the standards set by PCI-DSS as managed by the PCI
Security Standards Council.

9. Third-party Websites and Services

Once you leave this website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy.

If you click on links on this website, they may direct you away from this website.  I am not responsible for the privacy practices of other sites and encourage you to read their privacy policies.

10. Your data protection rights

Under data protection law, you have rights including:

  • Your right of access - You have the right to ask for copies of your personal information. 

  • Your right to rectification - You have the right to request rectification of personal information you think is inaccurate. You also have the right to request completion of information you think is incomplete. 

  • Your right to erasure - You have the right to request erasure of your personal information in certain circumstances.

  • Your right to restriction of processing - You have the right to ask for restriction of the processing of your personal information in certain circumstances. 

  • Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

  • Your right to data portability - You have the right to request the transfer of the personal information you supplied to another organisation, or to you, in certain circumstances.

Please contact me at 07956 309075 or info@krishanehealth.com if you wish to make a request.

11. My Rights

In exercising your individual rights, you should understand that in some situations I may be unable to fully meet your request, for example if you make a request for me to delete all your personal data, I may be required to retain elements of this data for taxation, legal, regulatory and insurance purposes.

You should understand that when exercising your rights, a substantial public or vital interest may take precedence over any request you make. In addition, where these interests apply, I am required by law to grant access to this data for law enforcement, legal and/or health related matters.

11. My Rights

If you have any concerns about the use of your personal information, you can make a complaint at 07956 309075 or info@krishanehealth.com

You can also complain to the ICO if you are unhappy with how your data has been used.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

Last updated June 2021