{"id":135,"date":"2024-11-10T06:24:17","date_gmt":"2024-11-10T06:24:17","guid":{"rendered":"https:\/\/hybhsportstherapy.com\/hybh\/?page_id=135"},"modified":"2024-11-10T06:41:41","modified_gmt":"2024-11-10T06:41:41","slug":"data-protection-policy","status":"publish","type":"page","link":"https:\/\/hybhsportstherapy.com\/hybh\/data-protection-policy\/","title":{"rendered":"Data Protection Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Data Protection Policy<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

This Data Protection policy will lay out the procedures undertaken by HYBH Sports Therapy to ensure that HYBH Sports Therapy is compliant with relevant data protection legislation. It has been written in accordance with the information provided by the Information Commissioner\u2019s office prior to the release of the GDPR.<\/p>

ESTABLISHING A LAWFUL BASIS FOR HANDLING DATA<\/strong>
In accordance with Article 5 (2), This policy will document the \u2018lawful basis\u2019 by HYBH Sports Therapy to handle data. This \u2018lawful basis\u2019 is set out in Article 6 of GDPR. The lawful basis may be as follows:
Where express consent has been given.
HYBH Sports Therapy utilises a mailing list in order to communicate lesson or treatment availability. Express consent must be provided in order to be added to such a mailing list.
No credit card data is stored as all purchases are paid for via BACS.<\/p>

Legitimate Interests<\/strong>
Data may be collected for legitimate interests such as marketing purposes. This may include the marketing of events.<\/p>

Legal Obligations<\/strong>
As a service providing manual therapy, a medical form is filled out and signed by any client. This will collect and store data and is documented only in paper form. These files and kept under lock and key.<\/p>

CONSENT REVIEWS<\/strong>
Any mailing lists have an express option to \u2018opt out\u2019 every 3 months.<\/p>

GATHERING DATA FOR CONTRACTUAL PURPOSES<\/strong>
In accordance with S6 s(1) b attending a course will require the collection of data to enable contractual obligations to be fulfilled. This is a necessary procedure and only minimal data will be collected to enable this to take place appropriately. Such data will include:
Email addresses
Home\/business address
Telephone number
The above specified information enables appropriate invoicing to take place. Data will be stored for accountancy purposes only GDPR compliant software. At no point, will data be passed on to any other organisation.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t\t
\n\t\t\t\t\t<\/path><\/svg><\/div>\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

LEGAL OBLIGATIONS AND THE COLLECTION OF DATA<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
In accordance with S6 (1) (C) HYBH Sports Therapy will collect relevant data when acting in conjunction with another course provider. This section also applies to the collection of data from prospective employees and contractors to enable HMRC obligations to be fulfilled appropriately.<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

SAFEGUARDING PRIVACY\n<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
HYBH Sports Therapy will ensure privacy by engaging fully with the right to be informed. Privacy notices will include the following:\nThe purpose of processing the data\nHow long the data will be held for\nWho it will be shared with\nThis privacy information will be served at the time of data collection in the following foreseeable situations\nPurchasing a event via the website<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Privacy notices \n<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
Will be tailored for to suit the purposes of collection but will include in accordance with the guidelines provided by the Information Commissioner\u2019s Office\nThe contact details of HYBH Sports Therapy the name and contact details of the relevant representative\nThe purpose of the processing\nThe lawful basis of the processing\nThe legitimate interests for the processing\nThe categories of personal data obtained\nThe retention period of the personal data\nDetails of the contractual obligations\nDetails of transfers of the personal data to any third countries or international organisations\nThe right to withdraw consent\nThe right to lodge a complaint with a supervisory authority\nThis content will be contained in \u2018just in time notices\u2019 prior to online website purchases or telephone\/email purchases.<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t\t
\n\t\t\t\t\t<\/path><\/svg><\/div>\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

ENSURING RIGHT OF ACCESS TO PERSONAL DATA\n<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
HYBH Sports Therapy will allow a right of access to both personal data and supplementary information free of charge. Any requests for information will be provided within one month of receiving the request.\nWhere requests are complex and numerous the provision of data will be provided within a two-month period.\nWhere requests are excessive and repetitive and administration fee of \u00a350 will be charged to cover the administrative costs involved.\nResponses will be provided in an electronic format<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

ENSURING RIGHT TO RECTIFICATION<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
HYBH Sports Therapy recognises that an individual has the right to have inaccurate personal data rectified or completed if incomplete.\nRequests for rectification can be made either verbally or in writing\nHYBH Sports Therapy will ensure that rectification will occur within one month of the request being made\nENSURING RIGHT TO ERASURE<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Data erase<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
HYBH Sports Therapy recognises the rights of individuals to have their personal data erased.\nA request for erasure may be made either verbally or in writing\nHYBH Sports Therapy will respond to the request within one month of it being erased, this time will be extended to two months where the request is complex\nWhere data is being processed by HYBH Sports Therapy and a request for erasure is made, the processing of the data will cease<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

RIGHTS RELATED TO AUTOMATED DECISION MAKING INCLUDING PROFILING\n<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
Online purchasing is a form of automated decision making as acceptance onto a course occurs at the point of the online purchase. Data will be gathered as a result of this process to enable the fulfilment of the contractual obligation. The extent of information collected will be communicated in an appropriate privacy statement.\nHYBH Sports Therapy does not engage in automated profiling marketing systems. Automated decision-making systems are only used to enable a sale of a course or event<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t\t
\n\t\t\t\t\t<\/path><\/svg><\/div>\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

ENSURING ACCOUNTABILITY AND GOVERNANCE<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
In accordance with Article 5 (2) HYBH Sports Therapy ensures accountability and governance through the following procedures:\nRegular internal audits\nAppropriate staff training\nMaintenance of relevant processing documentation\nAppointment of a Data Protection Officer: Mr Stephen King<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

DATA PROTECTION IMPACT ASSESSMENTS<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
A data protection impact assessment will be carried out where processing is likely to result in a high risk to individual\u2019s interests. This is likely to be where special category information is collected.<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

SECURITY<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
HYBH Sports Therapy ensures that all data will be processed and stored securely to meet with GDPR requirements<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

PERSONAL DATA BREACHES<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
HYBH Sports Therapy will report any personal data breaches that risk rights and freedoms of a data subject to the relevant parties involved. All breaches of data will be recorded.<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Data Protection Policy This Data Protection policy will lay out the procedures undertaken by HYBH Sports Therapy to ensure that HYBH Sports Therapy is compliant with relevant data protection legislation. It has been written in accordance with the information provided by the Information Commissioner\u2019s office prior to the release of the GDPR. ESTABLISHING A LAWFUL BASIS FOR HANDLING DATAIn accordance…<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-135","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/hybhsportstherapy.com\/hybh\/wp-json\/wp\/v2\/pages\/135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hybhsportstherapy.com\/hybh\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/hybhsportstherapy.com\/hybh\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/hybhsportstherapy.com\/hybh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hybhsportstherapy.com\/hybh\/wp-json\/wp\/v2\/comments?post=135"}],"version-history":[{"count":12,"href":"https:\/\/hybhsportstherapy.com\/hybh\/wp-json\/wp\/v2\/pages\/135\/revisions"}],"predecessor-version":[{"id":206,"href":"https:\/\/hybhsportstherapy.com\/hybh\/wp-json\/wp\/v2\/pages\/135\/revisions\/206"}],"wp:attachment":[{"href":"https:\/\/hybhsportstherapy.com\/hybh\/wp-json\/wp\/v2\/media?parent=135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}