PRIVACY POLICY

Effective: May 25, 2018

​

Our Privacy Policy describes how we collect and process your Personal Data through our website, in the treatment room or at events. 

To comply with the requirements of the European General Data Protection Regulation (GDPR), this Privacy Policy outlines the legal basis on which we process your Personal Data and provides other information required by the GDPR.

 

What's Personal Data

"Personal Data" is information that can be used to identify you, directly or indirectly, alone or together with other information. This includes things such as your full name, email address, phone number, address. Also your medical history details.

​

​

How Move Free Pontypool Therapies collects and uses Personal Data

We collect your Personal Data in many ways and for various purposes, including:

1. When you subscribe to our website to receive newsletters. 

2. When you send an email

3. When you send a message through the website

4. When you book an appointment via telephone, chat, text or email

5. When you attend an event or get pitchside treatment 

6. When you fill the Patient Form on your 1st appointment

In the first 3 scenarios, we collect your email address. You will only receive newsletters if you subscribe to that service, otherwise, that email address will solely be used to reply to your queries.

If you book an appointment, we will ask you for your telephone number to stay in touch before the appointment -in case any changes must be done- and to send you reminders, making sure you don't forget about your booking. We will also ask for your full name, your age or date of birth and, once you attend the initial treatment, your address and some medical history.
None of these details is shared with 3rd parties. We collect them as identification details and to provide you with the safest treatment and assess if any changes should be made to adapt the techniques to your medical needs. In some cases, due to complicated medical conditions, we might seek further agreement from your GP. If this is needed, before proceeding, you will be informed and asked for your GP details.

​

​

How Move Free Pontypool Therapies discloses Personal Data

We don't disclose any of your private personal data.

However, you need to understand that, if you contact us publicly on FB or other Social Media, other followers will be able to see your profile photo and public profile. 
If you write a review on google and/or Facebook, other users might identify you.

​

​

Right to be forgotten and data retention

The GDPR introduces a right for individuals to have personal data erased. The right to erasure is also known as ‘the right to be forgotten, but GDPR also gives us the right to hold our client records to comply with your insurance Terms and Conditions and exercise defence of legal claims. Even if we don't see you again, to comply with our insurances, we need to keep our records for a minimum of 7 years. I the case of children, it will be kept for 7 years after they turned 18.

If you want to withdraw your permission to receive further newsletters or communications from us, you can unsubscribe from that service. You will find that option in each newsletter email.

​

Consent and withdrawal of consent

Consent means offering you real choice and control. Genuine consent puts you in charge and builds trust and engagement. In the initial appointment, you will be informed by written of all the treatment's contra-actions and will be asked to sign for consent. However, you will be asked for consent before every treatment, after you understand what will be done, the possible effects and the different options available.
You will also be asked for consent before carrying out a physical assessment. If you need to take any clothes off, you will be informed how much you should expose and why, and you can decide to do so or not. You will be asked for consent in every session, and can always decline or stop the treatment at any stage.

Children can consent from the age of 13, according to the GCPR, but they will be asked to still be accompanied by a parent or guardian, which will also sign the Patient Form and the consent.

​

​

Security

We implement appropriate technical and organizational safeguards to protect against unauthorized or unlawful processing of Personal Data and against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data. However, please be advised that we cannot fully eliminate security risks associated with the storage and transmission of Personal Data.