Privacy Policy

The following is in relation to and in compliance with General Data Protection Regulations (GDPR) 2018.

Who am I?

Cat Manasa Hawkins Holistic Therapist

MFHT Member of The Federation of Holistic Therapists.
ICHT International Council of Holistic Therapists.
MAIA Maya Arvigo International Association.
AP Arvigo® Practitioner.

Contact Information

Email – info@catmanasa.co.uk

My website address is: catmanasa.co.uk and winchesterarvigotherapy.co.uk
Please email me for telephone number and postal address.

When entering into a contract of service with me you are declaring you have read and understood my Terms and Conditions and Privacy Policy. 
Your privacy and safety is important to me. If you are unsure of anything outlined in this policy, please email me for clarification.

This privacy policy will be reviewed regularly and updated when necessary. Please check back regularly. Last updated 01/06/2018.


What personal data I collect and why I collect it.

To enable me to answer requests for information, or to book my services via my contact form or by direct email, you must provide me with certain information to allow me to process your request. This includes your name and email address. I will use your email address to respond to enquiries and to arrange bookings. Any information shared with me in your initial enquiry will be kept confidential whether you decide to book a treatment or not. I will keep this information for 1 year unless requested sooner. After 1 year, I will delete any email enquiries that didn’t result in a treatment. After initial contact has been made, if you choose not to book a treatment with me, any information that has been shared with me by email can be deleted immediately by request.

Enquiries through Facebook, either via my Facebook Page or my Personal Profile will be treated the same as outlined above.

If you enter into a contract of service with me (make and attend a booking) I will use your email address to respond to your enquiry and arrange bookings.  If you wish to discuss details of a personal or sensitive nature through email, I am happy to respond, however, please be aware that no email provider is 100% secure. Any information you give me will be kept confidential and will only be used to help provide you with the best treatment.
Your email address will not be added to any mailing list. If you would like to be on my mailing list, you will have to sign up separately.
I will never share your email address with anyone.

If you choose to enter into a contract of services with me i.e. come for a treatment, you will need to provide me with more in-depth information to allow me to perform a safe treatment and fulfil my insurance requirements. This will require you to have a full consultation with me prior to treatment. The consultation form is an essential pre-requisite to treatment and will provide me with an overview of your medical history past and present. I am also required to ask for information about your lifestyle and any other health information relevant to your treatment. This is to enable me to offer the most effective and safe treatment I can in accordance with my training, the Federation of Holistic Therapy Code of Conduct and Professional Practice and insurance requirements. This is my lawful basis for collecting the information I need to perform my service.


How do I collect your information?

When possible, I will post you the relevant paper consultation forms for you to fill in prior to our initial session. Your consultation will take place face to face during our initial session where I will discuss your consultation form and add any other information given. All forms and notes are handwritten.

If you choose to share personal information in an email or Facebook message, I may include a printed copy to add to your notes if it’s relevant and helpful to your treatment. By request, I can delete my copy of any email or message you have sent to me.
If we speak on the phone to arrange our initial session, I’ll write down your name and I might take notes about your situation. I’ll ask for your address and phone number if you’re making a booking with me. I’ll use your address to send you your consultation form and phone number if I need to contact you quickly. If our call does not result in a booking, I will destroy any notes and details written down.

 

Why do I need this information and who might I share it with?

The information you provide will give me an overview of your health and lifestyle. As a holistic therapist, I work to understand the bigger picture of your health and well-being needs. The consultation process is an essential part of your treatment and has to be completed before treatments can take place. You will also be required to update me on any new relevant information at each session throughout our treatment sessions. Any new information will be added to your notes. You may request to see your consultation form and treatment notes at any time. If you would like a copy of these, please let me know in writing and allow up to 30 days for delivery.

If you’re already under the care of a specialist health professional, or are pregnant, I may need to seek a referral from your health specialist/GP/midwife. This will be done with your knowledge and permission. In these cases, treatment can only commence once permission has been granted. This is to ensure you are given the most appropriate and safest treatment possible. I will never share your details with anyone without your permission.

In the case of treating children and young people under the age of 18 or vulnerable adults, a parent or guardian’s signature is required on the consultation form. The parent or guardian must be present throughout the consultation and treatment. The child, teen or vulnerable adult must give consent for the treatment to be given. As before, all information given is confidential and will not be shared with anyone. The only exception to this is if the child or vulnerable adult is deemed to be in danger. In those cases the relevant authorities will be notified and if it is required to disclose personal details to safeguard a child then I will disclose them. This is in keeping with the Children Act 1989 and 2004, and the Safeguarding Vulnerable Groups
Act 2006. 

If you’re coming to see me on a case study basis for Arvigo® Therapy, your consultation form and notes will be shared with my teachers at the Arvigo Institute. No identifiable information will be given to them i.e. name, address, email etc. however your medical details and session notes will be shared as part of my advanced training process. You will be made aware of this if you have chosen to see me on a case study basis and will have given me permission to do this.

 

How do I use the information I collect?

I will use the information I collect during our consultation and subsequent treatments to provide you with the most suitable and safe treatments within my scope of practice. This is in accordance with my training, FHT codes of conduct and insurance requirements.

 

How long will I store your information?

If you have a treatment with me, all personal data and information gathered will be confidentially and securely stored for 7 years after your last treatment. All email enquiries that don’t result in a treatment will be held for one year before deletion. This is to ensure potential clients have plenty of time to decide if I’m the therapist for them and that all non-clients data is eventually deleted and forgotten.

 

Where will I store this information?

All consultation forms and notes will be kept in a securely locked box to which I am the only key holder. Emails are kept in my inbox which is password protected. The devices I use to access my emails are also all password protected. I don’t use any shared devices when accessing my emails.

 

How will I destroy this information?

If you have been a client, after 7 years, paper records will be shredded and burnt. All email correspondence and Facebook messages will be deleted.
If you have made enquiries but not become a client, all emails and messages will be deleted one year after the last email received.
With regard to email and Facebook messages, both clients and non-clients can request that I delete any messages I’ve received from them at any time.

 

The lawful basis for requiring this information is as follows;

  • Consent: the clear consent for me to process your personal data for the specific purpose of giving safe and responsible holistic treatments.
  • Contract: the processing is necessary to uphold the contract you have with me as your holistic therapist. By signing the consultation form you are agreeing to my Terms of Service and will agree to abide by the necessary requirements for me to provide safe treatments, abide by my professional code of conduct and insurance obligations.
  • Legal obligation: the processing of your information is necessary for me to comply with the law.
  • Special category data: I hold health related special category data to enable me to work within the Federation of Holistic Therapists Code of Conduct and Professional Practice and validate my insurance. I adhere to client confidentiality rules as taught throughout my training and only use this information to ensure best practices as a holistic healthcare professional.

 

You have the right to:

  • Be informed – I will inform you of the reasons I need your information and how I will use it.
  • Access – You can have access to all information I hold about you. Please request copies of your notes verbally or in writing and allow up to 30 days for processing. I prefer to hand these notes over in person to avoid any identification issues.
  • Rectification – You can update and correct any information I hold about you if it is incorrect. Please inform me of any amendments you’d like to be made verbally or in writing and allow up to 30 days for processing.
  • Erasure/be forgotten – You can request that I delete any emails you have sent me if they’re no longer relevant, along with your email address from my address book. If you are, or have been a client, I am required to hold your treatment records for a period of seven years after the date of your last treatment to comply with legal obligations and to establish, exercise or defend any legal claims.
  • Restrict processing – If you choose not to return for treatment your information will be stored securely for seven years. That information will not be used or shared. After seven years it will be destroyed. If you have been a client, I am required to hold your treatment records for a period of seven years after the date of your last treatment to comply with legal obligations and to establish, exercise or defend any legal claims.
  • Data portability – if you would like copies of your consultation form and treatment notes sent to another holistic therapist, in particular, another Arvigo® therapist for continuity of care, please request this in writing and allow up to 30 days for processing. I don’t store your notes on a computer. Photocopies will be made, the envelope will be clearly marked Private and Confidential and they’ll be sent by registered post.
  • Object – I will never use your email address for direct marketing. I will only email you if you have emailed me asking for a reply. If you’ve signed up to my mailing list (which you’ll have to do separately) you’ll receive the occasional seasonal update from me containing offers and information about new blog posts. If you no longer wish to receive any newsletter style emails from me, please unsubscribe from my mailing list.
  • Not be subject to automated decision-making – I do not use any automated decision-making services on this website.

 

How my website collects information.

 

Comments.

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Contact forms

No information is collected or stored on my website if you use my contact form to contact me. This form simply sends your message direct to my email inbox.

Cookies.

This site, like many others, uses small files called cookies to help me customise your experience. They help me to provide you with a good experience when you browse my website. By continuing to browse the site, you are agreeing to my use of cookies. All modern browsers allow you to change your cookie settings. You can usually find these settings in the ‘options’ or ‘preferences’ menu of your browser. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of my site. To understand these settings, use the ‘Help’ option in your browser. If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

Embedded content from other websites.

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website. Embedded content on my website may include content from Facebook and Instagram.

Analytics.

When you visit my website I use third party services, Exactmetrics and Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. I do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. I do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. I use Google Analytics so that I can continually improve my service to you – read the Google Analytics privacy notice.

Who I share your data with.

My website is built with WordPress. WordPress does not share data with anyone.
I use some third-party plugins. These plugins do not track or collect any personally identifiable information. The plugins I use are:
Elegant Themes (provides the visual theme my website uses) – Privacy policy.
Google Analytics Dashboard for WP (GADWP) – Privacy policy.
Yoast (Search engine optimisation) – Privacy policy.
Smush (Image optimisation) – Smush does not collect any data from users on my website.

How long I retain your data.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue. 

What rights you have over your data.

If you have left comments, you can request to receive an exported file of the personal data I hold about you, including any data you have provided to me. You can also request that I erase any personal data we hold about you. This does not include any data I am obliged to keep for administrative, legal, or security purposes.

Where we send your data.

Visitor comments may be checked through an automated spam detection service. I use Akismet. Akismet collects information about visitors who comment on Sites that use our Akismet anti-spam service. The information collected depends on how the User sets up Akismet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).

How we protect your data.

All devices I use to access and update my website are password protected and I am the only user.

What data breach procedures we have in place.

This website does not collect or retain any identifiable data therefore a data breach that affects users is highly unlikely. If a data breach does occur that puts any identifiable data at risk, users will be informed immediately.

What third parties we receive data from.

This website does not receive any data from third parties.

What automated decision making and/or profiling we do with user data.

This website does not use any automated decision making or profiling.

Last updated 12/10/2018