Effective: May 20, 2018
What's Personal Data
"Personal Data" is information that can be used to identify you, directly or indirectly, alone or together with other information. This includes things such as your full name, email address, phone number, address. Also your medical history details.
How A.F. Therapy collects and uses Personal Data
We collect your Personal Data in a number of ways and for various purposes, including:
When you subscribe in our website to receive newsletters.
When you send an email
When you send a message through the website
When you book an appointment via telephone, chat, text or email
When you attend an event or get pitchside treatment
When you fill he Patient Form on your 1st appointment
In the first 3 scenarios we collect your email address. You will only receive newsletters if you subscribe to that service, otherwise that email address will solely be used to reply to your queries.
If you book an appointment, we will ask you for your telephone number in order to stay in touch before the appointment -in case any changes must be done- and to send you reminders, making sure you don't forget about your booking. We will also ask for your full name, your age or date of birth and, once you attend the initial treatment, your address and some medical history.
None of these details are shared with 3rd parties. We collect them as identification details and to provide you with the safest treatment and to assess if any changes should be made in order to adapt the techniques to your medical needs. In some cases, due to complicated medical conditions, we might seek further agreement from your GP. If this is needed, before proceeding, you will be informed and asked for your GP details.
How A.F. Therapy discloses Personal Data
We don't disclose any of your private personal data.
However, you need to understand that, if you contact us publicly in FB or other Social Media, other followers will be able to see your profile photo and public profile.
If you write a review in google and/or Facebook, other users might identify you.
Right to be forgotten and data retention
The GDPR introduces a right for individuals to have personal data erased. The right to erasure is also known as ‘the right to be forgotten’, but GDPR also gives us the right to hold our client records to comply with your insurance Terms and Conditions, and for the exercise of defense of legal claims. Even if we don't see you again, in order to comply with our insurances, we need to keep our records for a minimum of 7 years. I the case of children, it will be kept for 7 years after they turned 18.
If you want to withdraw your permission to receive further newsletters or communications from us, you can unsubcribe from that service. You will find that option in each newsletter email.
Consent and withdrawal of consent
Consent means offering you real choice and control. Genuine consent puts you in charge and build trust and engagement. In the initial appointment, you will be inform by written of all the contra-actions the treatment can have, and will be asked to sign for consent. However, you will be asked for consent before every treatment, after you understand what will be done, the possible effects and the different options available.
You will also be asked for consent before carrying out a physical assessment. If you need to take any clothes off, you will be inform how much you should expose and why, and you can decide to do so or not. You will be asked for consent in every session, and can always decline or stop the treatment at any stage.
Children can consent from the age of 13, according to the GCPR, but they will be asked to still be accompanied by a parent or guardian, which will also sign the Patient Form and the consent.
We implement appropriate technical and organizational safeguards to protect against unauthorized or unlawful processing of Personal Data and against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data. Please be advised, however, that we cannot fully eliminate security risks associated with the storage and transmission of Personal Data.