Leigh Kerr Reflexology – Privacy Policy

This notice was last reviewed in May 2026. Compliant with UK GDPR, DPA 2018, and Data (Use and Access) Act 2025. This tells you what personal information I hold and why, and what your rights are. Once you have read it, please complete and sign the declaration.

 

Our contact details 

Therapists Name: Leigh Kerr

Address: 85 Haymarket Crescent, Livingston, West Lothian, EH54 8AU

Phone Number: 07730555875

E-mail: leigh@reflexologywestlothian.co.uk

Data Controller Contact Details: Leigh Kerr (as above)

 

The type of personal information we collect 

To give professional reflexology treatments, I will need to ask for and keep information about your health. I will only use this for informing reflexology treatments and any advice I give because of your treatment. The information to be held is:

• Your contact details
• Medical history and other health-related information (which I will take from you at first consultation)
• Treatment details and related notes (which I will take after each treatment)

How we get the personal information and why we hold it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• For informing reflexology treatments and any advice I give because of your treatment.
• Any records of Compliments or Complaints.

We use the information that you have given us to:

• Provide you with the best possible treatment options, support and advice.

I will NOT share your information with anyone else (other than within my own practice, or as required for legal process) without explaining why it is necessary and getting your explicit consent.

Lawful Basis for holding and using Client Information

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:

• Your consent. You can remove your consent at any time. You can do this by contacting us on the details above.
• We have a legal obligation:
  • ‘Claims occurring’ insurance: (records to be kept for 7 years after last treatment)
  • Law regarding children’s records (records to be kept until the child is 25 or if 17 when treated, then 26)

• We have a legitimate interest (e.my requirement to retain the information to provide you with the best possible treatment options and advice)

As I hold special category data (i.e. health related information), the additional condition under which I hold and use this information is: for me to fulfil my role as a health care practitioner bound under the AoR Confidentiality as defined in the AoR Code of Practice and Ethics.

Protecting your Personal Data – How we store your personal information

I am committed to ensuring that your personal data is secure. To prevent unauthorised access or disclosure, I have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information we collect from you.

I may contact you using the contact preferences you give me in relation to:

• Appointment times
• Reflexology information or information related to your health

We do not retain any electronic information on clients, and your data is kept in a locked filing cabinet when not in use.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at leigh@reflexologywestlothian.co.uk or 07730555875, if you wish to make a request.

Therapist’s Rights

If you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you

Your therapist must keep your records of treatment for a certain period as described above, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed

 

How to complain

Step 1 – Raise it with Us First

If you believe we have not handled your personal data in accordance with UK GDPR or the Data (Use and Access) Act 2025, please raise your concern with us first. We are obliged to receive, consider and respond to your complaint. We will acknowledge your complaint within 30 days and provide a written outcome in plain, accessible language without undue delay.

Step 2 – Escalate to the ICO

If you are dissatisfied with our response, you may escalate to the Information Commissioners Office

(ICO), the UK’s independent data protection supervisory authority.

Website: www.ico.org.uk

Telephone: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Chesshire, SK9 5AF.

DECLARATION

I have seen and have been offered a copy of this document and understand that you will hold and use my personal information, using it in order to provide me with the best possible treatment options and advice in line with the statements above.

Name:

Date:

Signature: …………………………………………………………………………………………………………………………………………………………..

Note: for children under 16 a parental or guardian signature is required.