Privacy policy
My name is Lynn Hebblethwaite, trading as Heartful Being, I am responsible for data protection within this business. I take your privacy seriously and do everything I can to protect your personal data adhering to the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
The type of personal information collected
I currently collect and process the following information:
Personal identifiers, contacts and characteristics (for example, name and contact details).
Client health and medical data.
How you discovered my services.
Website user statistics including cookies.
How the personal information is collected and why I have it
Most of the personal information I process is provided to me directly by you or through the Heartful Being website for one of the following reasons:
To provide treatment and fulfil our contract.
To send a newsletter.
To assist me in gaining verification from the Complementary Natural Healthcare Council (CNHC).
I also receive personal information indirectly from Squarespace when you use the Heartful Being website. I use the information in the following ways:
To provide access to and functionality within the website informing you of my services.
To monitor usage, visits, statistics to improve my services to you.
Under the General Data Protection Regulation (GDPR) the lawful bases I rely on for processing this information are:
Your consent. You are able to remove your consent for receiving the newsletter at any time. You can do this by contacting Lynn Hebblethwaite or choosing to unsubscribe. There is a cookie banner placed on the Heartful Being website you are able to opt out at anytime.
I have a contractual obligation when you book in for a treatment.
I have a legal obligation to pass on personal information to a third party in certain circumstances i.e. contacting the Police or GP if a child, vulnerable adult is or may be harmed or if a crime has been or may be committed.
I have a legitimate interest in using website statistics and analytics in order to improve my services to you.
How I store your personal information
Your personal information is securely stored electronically, it is password protected. I use the following applications and software to deliver my services to you: Squarespace, Squarespace Scheduling, Paypal, Zoom, Google Workspace. As part of data processing your personal data may be sent outside of the UK and EEA. Data required to fulfil contracts is kept for five years after the contract has been fulfilled, after which it is deleted. I review all data processing on an annual basis.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask me for copies of your personal information.
Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of you personal information in certain circumstances.
Your right to portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request I have one month to respond to you.
Please contact Lynn Hebblethwaite on 07476461350 or lynn@heartfulbeing.co.uk if you wish to make a request.
How to complain
If you have any concerns about my use of your personal information, you can make a complaint to me Lynn Hebblethwaite, Heartful Being 07476461350 or lynn@heartfulbeing.co.uk .
You can also complain to the ICO if you are unhappy with how I have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk