Privacy Policy

YOUR PERSONAL INFORMATION – GENERAL DATA PROTECTION REGULATION (GDPR)

PRIVACY POLICY

GDPR is bringing in new legal protection for personal information from May 2018. This tells you what personal information I hold and why, and what your rights are. We are committed to protecting your privacy.

This privacy notice aims to give you information on how Shaantiwellness collects and processes your personal data through your use of this website, including any data you may provide through this website when you [sign up to our newsletter, purchase a product or service or take part in a competition].

This website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.

Therapist’s Names : Amit Jobanputra, Mnveer Arkan
Telephone: 07868079571

Data Controller
Contact Details: Amit Jobanputra
Email address:: amit@shaantiwellness.com

The Purpose of processing Client Data

In order to give professional treatments, I will need to gather and retain potentially sensitive information about your health. I will only use this information for informing of treatments and associated recommendations concerning aspects of health and wellbeing which I will offer to you.

Shaantiwellness and affiliated partners may from time to time, where relevant, communicate with you with respect to products, services and appointment bookings.

The data we collect about you

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.

• Contact Data includes billing address, delivery address, email address and telephone numbers.

• Financial Data includes bank account and payment card details.

• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.

• Technical Data includes [internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website§].

• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.

• Usage Data includes information about how you use our website, products and services.

• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

3. How is your personal data collected?

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you

• apply for our products or services;

• create an account on our website;

• subscribe to our service or publications;

• request marketing to be sent to you;

• enter a competition, promotion or survey; or

• give us some feedback.

• Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, [server logs] and other similar technologies such as the Google Fonts API (Google based outside the EU) to serve fonts to the website. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy https://www.shaantiwswellness.com/cookie-policy/ for further details.

• Technical Data from the following parties:

(a) analytics providers [such as Google based outside the EU];
(b) advertising networks such as Facebook and Twitter based inside OR outside the EU; and
(c) search information providers such as Google based inside OR outside the EU.

• Contact, Financial and Transaction Data from providers of technical, payment and delivery services based inside OR outside the EU.

• Identity and Contact Data from data brokers or aggregators based inside OR outside the EU.

• Identity and Contact Data from publicly availably sources such as Companies House and the Electoral Register based inside the EU.

• Via the telephone answering system or by email.

Lawful Basis for holding and using Client Information

As a full member of the GHR, I abide by the GHR Code of Practice and Ethics. The lawful basis under which I hold and use your information is

My legitimate interests i.e.my requirement to retain the information to provide you with the best possible treatment options and advice.

As I hold special category data (i.e. health related information), the Additional Condition under which I hold and use this information is: for me to fulfil my role as a health care practitioner bound under the GHR Confidentiality as defined in the GHR Code of Practice and Ethics.

I will NOT share your information with anyone else (other than within my own practice, or as required for legal process) without explaining why it is necessary and getting your explicit consent.

I have provided a summary to show you the purposes for which we may use your data:

To register you as a new customer

(a) Identity

(b) Contact

Performance of a contract with you

To process and deliver your order including:

(a) Manage payments, fees and charges

(b) Collect and recover money owed to us

(a) Identity

(b) Contact

(d) Transaction

(e) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary for our legitimate interests (to recover debts due to us)

To manage our relationship with you which will include:

(a) Notifying you about changes to our terms or privacy policy

(b) Asking you to leave a review or take a survey

(a) Identity

(b) Contact

(d) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary to comply with a legal obligation

(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)

To enable you to partake in a prize draw, competition or complete a survey

(a) Identity

(b) Contact

(d) Usage

(e) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)

To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identity

(b) Contact

(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)

(b) Necessary to comply with a legal obligation

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

(a) Identity

(b) Contact

(d) Usage

(e) Marketing and Communications

(f) Technical

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)

To use data analytics to improve our website, products/services, marketing, customer relationships and experiences

(a) Technical

(b) Usage

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)

To make suggestions and recommendations to you about goods or services that may be of interest to you

(a) Identity

(b) Contact

(d) Usage

(e) Profile

Necessary for our legitimate interests (to develop our products/services and grow our business)

How Long I Retain Your Information for

I will keep your information for the following periods 8 years (CNHC requirements) and children’s records (records to be kept until the child is 25 or if 17 when treated, then 26)

Your data will not be transferred outside the EU without your consent.

Protecting Your Personal Data

I am committed to ensuring that your personal data is secure. To prevent unauthorised access or disclosure, I have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information we collect from you.

I will contact you using the contact preferences you give me in relation to:

• Appointment times

• Information or information related to your health

Promotional offers from us

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have requested information from us or purchased [goods or services] from us [or if you provided us with your details when you entered a competition or registered for a promotion] and, in each case, you have not opted out of receiving that marketing.

Third-party marketing

We will get your express opt-in consent before we share your personal data with any company outside the Shaantiwellnes group t/a Amit Jobanputra

Opting out

You can ask us or third parties to stop sending you marketing messages at any time [by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or] by contacting usat any time].

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of [a product/service purchase, warranty registration, product/service experience or other transactions].

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see https://www.maxkirsten.com/cookie-policy/

Third Party Advertising

We may use third-party advertising companies to serve ads to www.shaantiwellness.com. They may use information about your use of this and other websites you visit to provide advertisements about products and services that may be of interest to you. Third party advertisers have NO access to your information. Third Party advertisers may also place or recognize cookies on your browser to help them target advertisements and measure the effectiveness of their advertising. This privacy policy covers the use of cookies by www shaantiwellness.com and does not cover the use of cookies by any of its advertisers.

Changes of Business Ownership and Control

Shaantiwellnes group may, from time to time, expand or reduce its business and this may involve the sale of certain divisions or the transfer of control of certain divisions to other parties. Data provided by users will, where it is relevant to any division so transferred, be transferred along with that division and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the data (including personal data) for the purposes for which it was supplied by you. In the event that the new owner or newly controlling party materially change this privacy policy, we will notify in advance.

Access To Information

The Data Protection Act 1998 (UK) gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to an administrative fee to meet our costs in providing you with details of the information we hold about you.

Changes to this Privacy Policy

Shaantiwellness reserves the right to change this Privacy Policy as we may deem necessary from time to time or as may be required by law. Any changes will be posted on the web site and you are deemed to have accepted the terms of the Policy on your first use of the web site following the posting of the alterations. Therefore, you should check our privacy policy periodically to ensure that you are aware of any changes.

Your Rights

GDPR gives you the following rights:

• The right to be informed:

To know how your information will be held and used (this notice).

• The right of access:

To see your therapist’s records of your personal information, so you know what is held about you and can verify it.

• The right to rectification:

To tell your therapist to make changes to your personal information if it is incorrect or incomplete.

• The right to erasure (also called “the right to be forgotten”):

For you to request your therapist to erase any information they hold about you

• The right to restrict processing of personal data:

You have the right to request limits on how your therapist uses your personal information

• The right to data portability: under certain circumstances you can request a copy of personal information held electronically so you can reuse it in other systems.

• The right to object:

To be able to tell your therapist you don’t want them to use certain parts of your information, or only to use it for certain purposes.

• Rights in relation to automated decision-making and profiling.

• The right to lodge a complaint with the Information Commissioner’s Office:

To be able to complain to the ICO if you feel your details are not correct, if they are not being used in a way that you have given permission for, or if they are being stored when they don’t have to be.

Full details of your rights can be found at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.

If you wish to exercise any of these rights, please use the contact details given above.

If you are dissatisfied with the response you can complain to the Information Commissioner’s Office; their contact details are at: www.ico.org.uk

THERAPIST’S RIGHTS

Please note:

• if you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you

• Your therapist has to keep your records of treatment for a certain period as described above, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed

• Your therapist can move their records between their computers and IT systems, as long as your details are protected from being seen by others without your permission.

I have seen this document and understand that you will hold and use my personal information, using it in order to provide me with the best possible treatment options and advice in line with the statements above. This may include communicating with you from time to time with regards to shaanti.wellness products, services and appointment bookings.

I consent to you holding and using my information as outlined above, and understand that I may withdraw that consent at any time by emailing amit@shaantiwellness.com