The Haven Spa collects information that could be used to identify you (personal information), such as your name, email address, home address, medical details and phone numbers. This information is collected for a number of reasons:
- in order to carry out a treatment, we need to know whether you are fit and healthy and that the chosen treatment is appropriate for your state of health;
- contact information is collected in order to contact you in the unlikely event of us not being able to carry out the treatment you have booked, for example, where your therapist has been taken ill;
- contact information is kept in order to send you a reminder of your appointment. This helps to cut down missed appointments which are chargeable if insufficient notice is provided.
- email addresses are also used to provide you with information pertinent to The Haven Spa, such as information about new products, treatments, events and offers. If you do not want to receive this information then please use the ‘unsubscribe’ link which can be found on every email sent out. We also have an opt in/out box on our Consultation Forms which all new clients need to complete prior to their first treatment and existing clients every 6 months, in order to ensure that the information we hold is up-to-date and correct.
The Personal Information is stored on our computer system which is protected with the latest of anti-virus software, which is updated regularly. It is not kept on a local server and it is backed up to Dropbox Cloud storage.
We will only hold your Personal Information for the period necessary to fulfil the purposes outlined in this policy, or until you request that the data be deleted in accordance with your right of erasure. Even if we delete your Personal Information, we reserve the right to maintain a copy for legal, tax or regulatory purposes. In such an event, we will do so only as long as necessary to fulfil those legal, tax or regulatory purposes.
We do not sell or share your Personal Information with any third parties. In the event of the sale of the business, we may disclose your Personal Information to the prospective buyer. If the transaction closes, then your Personal Information may be transferred to the buyer.
Under the GDPR, you have various rights in relation to your Personal Information, such as the rights of access, rectification, restriction, objection, portability, and erasure. To exercise these rights, please contact our Data Processing Officer by emailing either firstname.lastname@example.org or email@example.com. We will seek to deal with your request without undue delay. Please note that we may keep a record of your communications to help us resolve any issues you raise.
Occassionally, we may use links to other relevant websites via our own or from our enewsletters that we feel would be beneficial to the reader. The privacy policies of these websites rae not under the control of The Haven Spa. If you submit Personal Information to any of those websites, your information is governed by their privacy policies.
We do not intend to solicit or collect Personal Information from anyone under the age of 18. The exception to this is where a parent / gaurdian / responsible adult has accompanied a child to an appointment where the necessary medical information needs to be provided to ensure the safe provision of that and subsequent treatments.
We will occassionally update this Policy to reflect company and client feedback. The Haven Spa encourages you to periodically review this Policy to be informed of how we are protecting your Personal Information.