Data Protection and GDPR Compliance:
1. Introduction
​
I am committed to ensuring the security and confidentiality of personal data, including health data, in compliance with the General Data Protection Regulation (GDPR). This policy outlines the procedures and measures in place to protect personal data collected and processed in the course of providing services.
​
2. Data Collection and Processing
​
Personal data, including health data, is collected and processed for the purposes of providing services. The types of personal data collected may include, but are not limited to, names, addresses, contact details, and health information relevant to the services.
​
3. Storage and Security:
​
Your data will be securely stored and accessed only by PH Therapy. Appropriate measures are in place to prevent unauthorized access, disclosure, alteration, and destruction of your information.
4. Duration of Data Retention:
​
Personal data, including health data, is retained for a period of seven (7) years, in compliance with relevant legal and ethical requirements. After this retention period, all documents containing personal data are securely shredded to prevent unauthorised access or disclosure.
5. Client Rights:
​
As a client, you have the right to request access to, rectification, or erasure of your personal data. To exercise these rights or if you have any concerns about the handling of your data, please contact Paul Hudson.