Privacy Policy

DATA PROCESSING NOTICE

This is the Data Processing Notice (also known as a Privacy Policy) of Phoenix Rising Natural Health. It is issued in compliance with the Data Protection (Bailiwick of Guernsey) Law, 2017 “the Law”.

We care about your personal data and ensuring you are informed about how we use it.  We promise to protect your data, and to manage any information you share with us in line with data protection law.

This Notice sets out how and why we collect and use your personal data and our legal basis for doing so.

Who are we?

We are a locally-owned sole proprietorship. We are registered with the Office of Environmental Health and Pollution Regulation(OEHPR) under the Tattooing, Piercing, Acupuncture and Electrolysis (Guernsey and Alderney) Law, 2000, and abide by their Code of Practice, and are subject to annual inspection of our premises. Our premises Registration Number is G82/21, and Practitioner Registration Number is G167.

What do we do?

We provide a wide range of Acupuncture and Oriental Medicine Services including Acupuncture, Bodywork, Herbal Medicine, Nutrition, and exercise techniques such as Tai Chi and Qigong.

What data we collect

We only hold only minimal details of our clients. This not only enables us to contact our clients and to enable us to carry out our core business services and comply with a contract, but also to comply with statutory requirements and our legal obligations.

Where does this data come from?

The personal data we process is given to us directly by you, our clients. We do not collect any personal data from any other sources.

How we use your personal data

Your personal data is used to uniquely identify you as an individual and ensure that appropriate treatment is provided to you based upon your personal circumstances.

Our lawful basis for processing your personal data

In order to be able to provide you with the services you require, we use our legal contractual basis for processing your personal data and rely on our legitimate business interests.

In instances where we are not relying on a contractual and legitimate business interests’ basis, we rely on consent to lawfully process your personal data. This can be obtained orally or by email. You have the right to withdraw your consent at any time, however, it must be highlighted that by withdrawing your consent we may not be able to provide you with our core business services.

Types of personal data we collect

· Your contact details, such as name, postal address, email address and contact number.

· A record of our communications with you

· Information you provide to us on our ‘Consent to Treat’ form, and information gathered from you during our intake interview.

Special category data

Defined in the Law as – “Personal data revealing an individual’s racial or ethnic origin, political opinion, religious or philosophical belief, trade union membership, genetic data, biometric data, health data, data concerning an individual’s sex life or orientation, & criminal data.” The Law requires this data to be processed with additional protection.

As stated above, explicit consent is obtained via a signed ‘Consent to Treat’ form.

Sharing of your personal data

The minimal amount of data necessary to facilitate your claim against your Health Insurance policy may be shared with your insurer. In addition, data may be shared with other health professionals with your written consent. In cases where you have been referred to us by other health professionals, we may share your information with them to ensure completeness of your health records held by them.

Transfer of data

We do not transfer your personal data outside the Bailiwick of Guernsey.

Direct marketing

We do not use any form of direct marketing.

Retention of data

All data is retained securely and only used for the purposes for which it was collected under the Law. Data is only retained for as long as is required to comply with our statutory obligations, in order for us to provide you with the services forming part a contract or with your consent. In any event, data is reviewed and weeded accordingly after 7 years.

Your rights

The Law provides you with a number of rights, but specifically and of relevance, you have the right to:

· request confirmation of the personal data that we hold about you and what we are doing with your data

· request correction of your personal data if incorrect, out of date or incomplete

· request that we stop any consent-based processing of your personal data after you have withdrawn that consent

Social media

This notice does not cover any third-party websites or social media sites used in conjunction with Phoenix Rising Natural Health. We are not responsible for the actions or activities of third-party website/social media outlets. You are advised to read the data collection and privacy statements on other websites and social media outlets you visit.

Cookies

We do not use cookies.

Contacting us

· We are defined as a Controller according to the Law. If you have any questions or queries regarding how your personal data is being managed, please contact Andrew Vile by writing to Phoenix Rising Natural Health, Springfield, Longue Rue, St. Saviour, GY7 9QW or by emailing prnh@outlook.com

Contacting the regulator

· If you feel that your personal data has been handled incorrectly or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the data protection regulator – The Office of the Data Protection Authority (ODPA). You can contact them for advice by writing to: 

The Office of the Data Protection Authority

St Martin’s House

Le Bordage

St Peter Port

Guernsey

GY1 1BR

by telephoning (01481) 742074 or by email to enquiries@opda.gg or you can submit a complaint online at www.odpa.gg  and complete the ‘make a complaint’ section.

Last update/review April 4th, 2024