PRIVACY POLICY

Just Relax Baby Massage, Baby Yoga and Adult Massage

General Data Protection Regulation – May 2018
​
Under the new GDPR rules effective from 25th May 2018 we have a legal obligation to inform you of how your data is going to be used and shared within our business. Just Relax takes its responsibilities very seriously and implements practices to ensure it is up to date with current legislation practices.
Data Protection Officer: Hannah Hanraty
Data Protection Act 2018:
The principles under this legislation require personal data to be:

1. Processed lawfully, fairly and in a transparent manner.
2. Collected for specific, explicit and legitimate purposes.
3. Adequate, relevant and limited to what is necessary.
4. Accurate and where necessary kept up to date.
5. Kept in a form which permits identification of data for no longer than is necessary.
6. Processed in a manner that ensures appropriate security of the personal data.

What I do to meet this legislation:

1. All records are stored in locked filing cabinets.
2. Computers are password protected.
3. Consultation forms comply with insurance requirements, stored for up to 6 years of last treatment and after this point are shredded. You have the right to access your notes and must keep me up to date with any changes.
4. Privacy notices are signed by every parent regarding social media and photographs of their children.  You have the right to request to have any photographs removed. Photos are not stored, once posted they are deleted from the device.
5. No addresses or contact details are stored on accounting software or any other device.
6. Messenger is often used to set up groups to enable me to send you notes and update you of information relevant to your class. No details are passed on to 3rd party providers.