Who I am and how I process your personal data

​

I, Emma Firth, comply with my obligations under the General Data Protection Regulation (GDPR) by keeping personal data up to date; by storing (and destroying it) securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

​

I am registered as a data controller with the Data Commissioner's Office (ICO). Register number ZA734566.

​

I use your personal data for the following purposes

​

​I may send messages by post, telephone, text, email or other digital methods. These messages may be: 

• To help you manage your appointments.

• To meet my obligations to you as a client by offering information you need to make informed decisions.

• To respond to your enquiry about my services.

.

• I will only contact you as necessary in accordance with the services that are required for the management of our work together, and to maintain my own accounts and records.

• Your data will never be passed to a third party. I will never pass on your information to a third party to use in their own direct marketing without your consent. I do not record phone calls. After the sessions are completed only brief notes are retained as detailed above and all other contact information is deleted from my systems.

• For Rapid Transformational Therapy only: In accordance with my need to maintain access to ex-client’s data in the event that an ex-client may wish to subsequently re-commence therapy, I retain individual data for a maximum period of 12 months after therapy has ceased.

• For other services - All information I possess in relation to services other than

  Rapid Transformational Therapy is deleted and destroyed within 3 months of the service being delivered. 

​

My Lawful Basis for processing your personal data 

 

You have given clear consent for me to process your personal data for a specific purpose. Further, the processing is necessary for both yours and my own, legitimate interests. 

 

Your rights and your personal data. 

​

Unless subject to an exemption, you have the following rights with respect to your personal data:

​

• The right to request a copy of the personal data which I hold about you.

• The right to request that I correct any personal data if it is found to be inaccurate or out of date.

• The right to request your personal data is erased where it is no longer necessary for

  me to retain such data.

• The right to withdraw your consent to the processing at any time.

• The right to request that I provide you with your personal data and where possible, to

  transmit that data directly to another data controller, (known as the right to data portability), (where applicable) [N.B. This only applies where the processing is based on consent or is necessary for the performance of a contract with the data subject and in either case the data controller processes the data by automated means]. The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing.

• The right to object to the processing of personal data, (where applicable)
  [N.B. This only applies where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the purposes of scientific/historical research and statistics]

• The right under the General Data Protection Regulation (GDPR)as an individual data subject which you can exercise in relation to the information I hold about you. You can read about these rights on the ICO website.

​

Data Security

​

I am aware that the information you provide may be sensitive and I respect your privacy. I keep information about you confidential. This means I store it securely and control who has access to it. I may store some of your data electronically on a secure platform. I might also store some in paper format and this paper documentation will be stored in a secure locked cabinet. After we have completed our work together any contact information stored on my electronic devices will be deleted.

​

Complaints Notice

​

If you want to make a complaint about the way I have processed your personal information, you can contact the ICO as the statutory body which oversees data protection law – see ICO concerns. In most cases I will not disclose personal data without consent. However, if I am required to submit information regarding a complaint, for example, I will need to share personal information with the organisation concerned and with other relevant bodies.