GDPR

Data Protection Policy – UK GDPR

General Statement of Healing Hands Haven Ltd

At Healing Hands Haven Ltd we take privacy seriously and only use the information we collect to provide our services. We do not share or sell information we collect for any other purpose. 

Healing Hands Haven Ltd will endeavour to ensure that all personal data is processed in compliance with this Policy and the Principles of current Data Protection Legislation, currently the Data Protection Act 1998 and (EU) General Data Protection Regulation 2016/679 (GDPR). The Protection of Freedoms Act 2012 is also relevant to parts of this policy.

Accessibility of this document 

This policy is written using clear and plain language and is considered age-appropriate (Age 16 and above) for the accessibility of all data subjects of Healing Hands Haven Ltd. A copy of this document will be posted on the Healing Hands Haven Website.

The principles 

Healing Hands Haven Ltd shall comply with the Data Protection Principles contained in the legislation to ensure all data is:

  • Fairly and lawfully processed in a transparent manner. 
  • Processed for a legitimate purpose. 
  • Adequate, relevant, and not excessive. 
  • Accurate and up to date. 
  • Not kept for longer than necessary. 
  • Processed in accordance with the data subject’s rights. 
  • Processed securely.

Personal Data 

We collect information about you when you book a workshop, visit our premises for our workshops, buy a product, whether contact is online, on paper, by email or over the phone.

The information you give us may include your name, address, email address, phone number, relevant history which may suggest that a service or workshop should not go ahead, or certain products should not be used (e.g. allergies, pregnancy, skin conditions), payment and transaction information.

For clients under the age of 16, we will only keep and use their personal information with the consent of a parent, carer, or guardian.

How information will be used

In law, we are allowed to use personal information, including sharing it outside our company only if we have a proper reason to do so, for example:

  • To fulfil a contract with you i.e. to provide the workshop you have requested and to communicate with you about your booking.
  • When it is in our legitimate interest i.e. there is a business or commercial reason to do so, unless this is outweighed by your rights or interests.
  • When you consent to it: we will always ask for your consent to hold and use health and medical information.

We have rigorous data protection and security policies in place with all our suppliers.

We will not share your information with any other third party without your consent except to help prevent fraud, or if required to do so by law.

Data Security and storage

The organisation will take appropriate technical and organisational steps to ensure the security of personal data. All staff will be made aware of this policy and their duties under the legislation. Healing Hands Haven Ltd, therefore all staff, and any other stakeholders are required to respect the personal data and privacy of others and must ensure that appropriate protection and security measures are followed to ensure the unlawful or unauthorised processing of personal data and against the accidental loss of, or damage to all personal data. Violations of this policy by staff may be treated as misconduct or gross misconduct in line with the Healing Hands Haven Ltd disciplinary procedure. An appropriate level of data security must be deployed for the type of data and the data processing being performed. Personal data must be stored in appropriate company approved systems and should be encrypted when transported offsite.

Rights of the Data Subject 

UK-GDPR expands the rights of the data subject over previous legislation, specifically data subjects have: 

  1. The right to be informed. 
  2. The right of access. 
  3. The right to rectification. 
  4. The right to erasure. 
  5. The right to restrict processing. 
  6. The right to data portability. 
  7. The right to object. 
  8. Rights in relation to automated decision-making and profiling. 

If you wish to exercise or receive a request to exercise any of these rights, please contact the company and email Healing Hands Haven Ltd. Information on the right of access and how to exercise that are specifically detailed in this policy.

Processing of Personal Data 

Healing Hands Haven Ltd maintains a Privacy Policy which details personal information processed and the legal basis for processing that data. A copy can be requested to be viewed by contacting the company. Healing Hands Haven Ltd processes some personal data for purposes considered direct marketing. Data subjects have the right to withdraw consent to these activities; these requests should be requested by email to info@healinghandshaven.co.uk

Criminal Convictions and Offences

Healing Hands Haven Ltd requires enhanced DBS checks for all staff within the training division. Where convictions or adverse findings are present, that data is used as part of a staff recruitment risk assessment and recorded. 

Rights of Access to

You have the right to access and remove their Personal Data held by Healing Hands Haven Ltd, subject to the provisions of current Data Protection legislation. Any client wishing to access their personal data should put their request in writing to info@healinghandshaven.co.uk Healing Hands Haven Ltd will endeavour to respond to any such written requests as soon as is reasonably practicable and, in any event, no longer than one month for access to personal data. The information will be made available to our client as soon as is possible after it has come to the company’s attention and in compliance with the relevant legislation. Proof of identity is required before any information will be made available. We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate. You have the right to ask us to object to our use of your personal information, or to ask us to delete, remove or stop using your personal information if there is no need for us to keep it.

Accuracy 

Healing Hands Haven Ltd will endeavour to ensure as far as reasonably practical that all personal data held in relation to all data subjects is accurate. Our clients must notify us of any changes to information held about them.

Retention of Data 

Unless you request otherwise, we will keep your information to contact you no more than three times a year for a maximum of 3 years from your last visit to Healing Hands Haven Ltd.

After 3 years we will delete all your personal information, except for your name, relevant client history (e.g. allergy test records which we keep for 4 years) and financial transactions (which we are obliged to keep for 6 years).

Marketing

We will contact you via phone, email, or SMS to confirm bookings and remind you of upcoming appointments. We consider your having made the appointment as consent to undertake this activity but, if you want, you may opt-out at any time. We would like to send you information about products and services which may be of interest to you. We will ask for your consent to receive marketing information. If you have consented to receiving marketing, you may opt out later.

You have the right at any time to stop us from contacting you for marketing purposes or giving your information to third party suppliers of products or services. If you no longer wish to be contacted for marketing purposes, please contact us via email at

E-Newsletters

We email e-newsletters to inform you about products, services and treatments provided by our company. You can unsubscribe from e-newsletters at any time.

E-newsletters may contain subscriber tracking facilities within the actual email, for example, whether emails were opened or forwarded, which links were clicked on within the email content, the times, dates, and frequency of activity. We use this information to refine future email campaigns and provide you with more relevant content based around your activity.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This is used to track visitor use of the website and to compile statistical reports on website activity.

You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.

Changes to our privacy notice

We keep our privacy notice under regular review, and we will place any updates on this webpage. This privacy notice was last updated on 11/01/2025.

How to contact us

Please contact us if you have any questions about our privacy notice or information, we hold about you:

By email at info@healinghandshaven.co.uk