Keep Phytt Privacy Notice We understand the importance of data protection. We will respect the confidentiality of your data and will always process it in accordance with the Data Protection Act (2018) and the General Data Protection Regulation (GDPR). Keep Phytt will act as the Data Controller for any personal data you give us.

The personal data we collect

We may ask you to supply the following personal data:

Your name, postal address and email address

Financial details

Relevant information about your health

Why we hold personal data

We use personal data for the following reasons:

Delivering our services: we will use your data on the basis

of Performance of a Contract to allow us to supply you with the service you order from us.

Keeping you informed: we may use your personal data to tell you about Keep Phytt services that we think will be of interest to you, using the basis of Legitimate Interests. These communications will be either direct emails or an e-newsletter.

Where your data is processed

We are based in the UK and most of our data processing happens here. However, TeamUp, who we use as a data processor, will store your data in the USA. TeamUp are signed up to the US-EU Privacy Shield agreement which permits them to import personal data from the UK and EU.

Who sees your personal data

It is necessary for us to work with third parties to allow us to deliver our services. These are:

TeamUp. This is a business management provider that stores our client data and allows us to plan and deliver our services and keep you informed

about them.

123 Reg. Our website host. When you submit information to our website, this company will collect it on our behalf.

Stripe and GoCardless. Keep Phytt does not process your payments. Instead, financial transactions are processed for us by two world-leading providers, Stripe and GoCardless.

We have taken all reasonable measures to ensure that third parties undertake to

protect your data and act in accordance with GDPR.

Data retention

We are legally obliged to retain client data for seven years.

However, we shall only retain your data for marketing purposes for one year after your last interaction with us.

How we will uphold your rights as a data subject

We will do our best to keep the data we hold accurate. However, if you spot any errors in the

data we hold on you, please let us know and we will amend it.

We will never use your personal data for anything we haven’t already

told you about. Unless obliged to do so by law, or to allow us to exercise our legal rights, we won’t share your data with anyone other than the organisations we have told you about. We will never use your data for any form of profiling or automated decision-making.

You can ask to see what personal data we hold on you at any time. If you gave us your consent to process your data, you can withdraw that consent. You can also request that we delete it.

You can request to be removed from our marketing email lists. Any marketing communications from us will give you the option to unsubscribe.

Where there is some dispute about our use of your personal data, you have the right to ask us to suspend the processing of your data until the dispute is resolved.

Where applicable, we can provide your data to you in a portable digital format.

Please note that if you choose to exercise your rights to withdraw consent or ask for your data to be deleted or its use restricted, we may be unable to fulfil the services you have requested us to undertake.

Contact us

To ask us any questions about how we use your personal data or to ask us to assist you

in exercising your rights, please email us at carole@boroughgreenphysio.co.uk

If you are unhappy with any aspects of how we use your personal data, do please let us know. You have the right to complain about our use of your personal data to the Information

Commissioner’s Office (www.ico.org.uk).