And as the following website(s) and social media identities:
FB Kirsty Dignam-soul midwife
Your privacy is very important to me as a major component of a trusting relationship.
I have developed this policy in order for you to understand how I collect, use, communicate and make use of personal information.
When accessing my website, my Facebook page or my blog I learn certain information about you during your visit.
Under the EU’s General Data Protection Regulation (GDPR) this personal data is defined as:
“any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”
This information is collected electronically and personally during sessions by the following routes:
Email or newsletter subscription.
Messenger or social media including Twitter, Instagram, WordPress, Youtube, and Facebook.
Booking and Assessment forms
Enquiries and sales through website host
External services including cookies and IP addresses.
If you choose to correspond with me through email, or newsletter subscription I may retain the content of your email messages together with your email address and responses.
This electronic data is password protected and secure, available only to myself.
I am committed to keeping your e-mail address confidential.
I do not sell, rent or lease subscription lists to third parties, and will not provide your personal information to any third party individual, government agency, or company at any time unless strictly compelled to do so by law.
I will use your e-mail address solely to provide timely information about services, updates or products offered.
Email is not recognised as a secure medium of communication. For this reason, I request that you do not send private information to me by email. However, doing so is allowed, but at your own risk.
In compliance with the CAN-SPAM Act, all e-mail sent from me will clearly state who the e-mail is from and provide clear information on how to contact the sender.
In addition, all e-mail messages will also contain concise information on how to remove yourself from the mailing list so that you receive no further e-mail communication.
This site provides users the opportunity to opt-out of receiving communications by reading the unsubscribe instructions located at the bottom of any e-mail.
Users who no longer wish to receive any newsletter or promotional materials may opt-out of receiving these communications by clicking on the unsubscribe link in the e-mail.
Social media and external links:
This website may include links to third-party websites, plug-ins, and applications.
Clicking on those links or enabling those connections may allow third parties to collect or share data about you.
I do not control these third-party websites and am not responsible for their privacy statements.
When you leave this website, I encourage you to read the privacy notice of every website you visit.
Booking and assessment forms:
When you attend a workshop, event or course.
Alongside the above, I also keep records of your attendance, your booking and feedback forms.
Your details are collected on an attendance form and are handwritten.
By providing these details, you agree to be contacted by email, text, Messenger until you give notice or unsubscribe, which you can do at any time.
Your feedback which is handwritten or typed is used by prior consent on my website and social media platforms.
These will be removed as requested by you if the need arises.
Assessment one to one session forms.
The Sensitive Data Collected:
An assessment form is carried out.
Retained in printed or handwritten format within a secure cabinet or location and includes your contact details and where appropriate, signature.
The sensitive nature of such documents will generally be in relation to health or medical history.
These records help to provide you with the best possible care and treatment plan.
The records are paper and not kept in any digital method unless you send me the form back by email.
These records include many areas of personal data: name, address, telephone numbers, email address, GP details, health status and information including past and current medical history, previous investigations, any diagnosis, and treatment protocol.
You sign a consent form that you have declared all you need to and any feedback is allowed to be used in research with anonymity being maintained at all times.
Information may be used within the practice for audit purposes to monitor the quality of the services I provide.
All of your information is held securely on our premises and may be used for statistical purposes.
Where I do this, I take strict measures to ensure that individual clients cannot be identified.
In all cases, I am required by law and insurance reasons to retain these records for six years after the completion of our contract – or in the case of a minor, from six years beyond the date of their eighteenth birthday.
Enquiry or sales:
When you make an enquiry
The name and contact details you give and the content of your message(s) are retained for three reasons:
By your consent
As part of a ‘contract’ (only while we communicate)
For legitimate business interests – for good business practice I keep your email query on file
When you make an online purchase as a single purchase, a membership or subscription.
This is a contract for services.
Your contact details are dealt with as above (consent, contract, legitimate reasons) – also these, your purchase history and the payment details (sent to me from Paypal, Square or BACS) are retained for six years beyond the end of the contract for legal reasons – accounting law.
All of this is encrypted password protected.
External technologies including cookies and IP address:
Similar to other commercial websites, this site uses a standard technology called “cookies” (see explanation below) and server logs to collect information about how my site is used.
Information gathered through cookies and server logs may include the date and time of visits, the pages viewed, time spent at this site, and the websites visited just before and just after, as well as your IP address.
A cookie is a very small text document, which often includes an anonymous unique identifier.
A piece of information that is stored on your computer’s hard drive and which records how you move your way around a website so that, when you revisit that website, it can present tailored options based on the information stored about your last visit.
Cookies can also be used to analyze traffic and for advertising and marketing purposes.
When you visit a website, that site’s computer asks your computer for permission to store this file in a part of your hard drive specifically designated for cookies.
Each website can send its own cookie to your browser if your browser’s preferences allow it, but (to protect your privacy) your browser only permits a website to access the cookies it has already sent to you, not the cookies sent to you by other sites.
If you want to check or change what types of cookies you accept, this can usually be altered or canceled within your browser settings.
You can block cookies at any time by activating the setting on your browser that allows you to refuse the setting of all or some cookies.
However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of this site.
IP addresses are used by your computer every time you are connected to the Internet.
Your IP address is a number that is used by computers on the network to identify your computer.
IP addresses are automatically collected by this web server as part of demographic and profile data known as “traffic data” so that data (such as the Web pages you request) can be sent to you.
Your information your rights:
Storing and Sharing your data
All known electronic data is password encrypted known only by myself.
All handwritten data is stored within a secure unit.
I do not sell your data nor share it except by your consent or under the law.
When working together, I may give out elements of your personal information to another practitioner or therapist as part of a referral. This will always only be with your personal consent.
In continuation of current UK law on confidentiality, I also retain the right and in some cases the legal requirement to breach confidentiality to inform an authority such as the police or your GP of impending harm or illegality.
The GDPR sets out clearly the rights of the consumer and can be found in great detail on their website.
It also lays out deadlines for a reply and other rules which are reproduced for your information at the bottom of this section.
Right to be informed
You have the right to be informed about the collection and use of your personal data. This is a key transparency requirement under the GDPR.
I must provide you with information including my purposes for processing your personal data, my retention periods for that personal data, and who it will be shared with.
This ‘privacy information’ is provided above.
I must provide you with privacy information at the time I collect your personal data from you, in other words, it has to be available to you before you fill in a form or hand over your data such as your email address.
If I obtain your personal data from other sources, e.g. by referral or from the payment service provider you selected, I must provide you with privacy information within a reasonable period of obtaining the data and no later than one month.
There are a few circumstances when I do not need to provide people with privacy information, such as if an individual already has the information or if it would involve a disproportionate effort to provide it.
The information I provide to people must be concise, transparent, intelligible, easily accessible, and it must use clear and plain language. Therefore if there is anything you do not understand, please get in touch.
Right of access
You have the right to access your personal data and supplementary information. This allows you to be aware of and verify the lawfulness of the processing.
You are entitled to confirmation that your data is being processed, access to your personal data, and
other supplementary information as provided in this privacy notice
Right to rectification
You have the right to have the data your personal data corrected if it is incorrect, or completed if it is incomplete.
These changes although daunting and at times confusing are here to protect the information we share to ensure you are protected avoiding confidentiality breaches or fraud and are positive steps towards an empowering relationship on all levels between consumers and services.
Should you have any queries please contact me, I take this responsibility very seriously.
I may in the future need to restrict access to parts (or all) of our website and reserve full rights to do so.
If at any point, I provide you with a username and password for you to access restricted areas of my website, you must ensure that both your username and password are kept confidential.