This Privacy Statement explains how Elysia Hegarty (nee Doody) trading as The Female Wellness Hub and associated websites www.thefemalewellnesshub.com will process your personal and health information in accordance with the General Data Protection Regulation 2016 (GDPR) which comes into effect in May 2018, replacing the existing data protection framework under the EU Data Protection Directive.
PRIVATE PRACTICES AND DIRECT MARKETING
We will never use your data for direct marketing purposes without your consent. At any time you may opt out (i.e. refuse the use of your personal data), including at the time the data is collected, or on every subsequent marketing message. Unsubscribing will always be offered to you.
It should be noted that other methods of communication (confirmation of appointments or reminders, etc.) do not fall under “direct marketing”, however consent will still be collected for this and full details of our third party partners are outlined below.
COLLECTION OF DATA
We comply with the EU Data Protection Directive as set forth by the European Union regarding the collection, use, and retention of personal data from European Union member countries.
We collect two types of data: personal data, and sensitive personal data.
Personal data can be used to identify or contact you, and may include: your name, address, date of birth, telephone number, and email address. This will only be collected if you voluntarily submit it to us.
Sensitive personal data is relating to your health, and is collected for the purposes of clinical assessment, consultation, programme provision or advice, and is necessary to be obtained in order to provide the most accurate service for you.
Data is collected and used by us either via paper or electronically via third party providers as outlined below.
THIRD PARTY PROVIDERS
Below outlines a summary of all Third Party Providers used by The Female Wellness Hub to whom we liaise with for the collection of personal data relating to your health concerns, clinic operations, scheduling of appointments and assessment of your health concerns.
Contact information booking system – calendly.com
Your financial information – sumup.com
Analysis of nutritional information – nutritics.com
Laboratory testing – gdx.net
Access is restricted to Director, Elysia Hegarty (nee Doody) and third parties we liaise with on your behalf as listed above, who are bound by GDPR, their professional ethics and/or confidentiality agreements. We will never share your personal information with any other third party without your consent unless required to do so by law.
When you contact us to avail of any of our services, including but not limited to:
Wellness Consulting, Nutritional Therapy, Exercise and Personal Training
Online nutrition, exercise and lifestyle educational programmes
We will ask you to provide, either by phone or electronic means, your name and contact details. This information provided will be used by us to:
verify your identity
provide you with the service you have requested
respond to your enquiries or provide customer support
create your client file and book appointment(s)
send updates regarding your appointments and programmes
contact you in the case of a data breach
provide you with advice, dependant on the information you have given
seek feedback for ongoing service improvements and/or testimonials
communicate with you regarding other products and services
Pre and post consultation we may utilise other third parties as part of our assessment such as outlined above.
When we communicate with you regarding our products and services for the first time we will give you the option to “opt-in,” and on every subsequent communication there will be an option to “unsubscribe.” If you subscribe to either of our email newsletters, we use email tracking to record and save your email address to your subscriber record to monitor and store your preferences.
When you attend consultation you will be asked to provide further sensitive data to allow us to:
perform a clinical assessment
provide you with appropriate nutrition and lifestyle recommendations, programmes and/or advice
All of your personal and health data is stored securely onsite and in paper or electronic format on our secure system. All electronic communications are hosted within platforms which are SSL-secure, password protected and encrypted. We confirm we have adequate measures in place to ensure that your information is held securely. Any personally identifiable information you elect to make available publicly on our sites – e.g. posting comments on our websites, google or facebook recommendations will be available to others
Access is restricted to Elysia Hegarty (nee Doody) and third parties we liaise with on your behalf as listed above, who are bound by their professional ethics and/or confidentiality agreements. We will never share your personal information with any other third party without your consent unless required to do so by law.
We may provide non-personal data to third parties, where such information is combined with similar information of other users of our website; regarding the number of unique visitors to our website, the demographic breakdown of users of our website, or the activities that visitors to our website engage in while on our website.
We will disclose your Personal Data if we believe in good faith that we are required to disclose it in order to comply with any applicable law, a summons, a search warrant, a court or regulatory order, or other statutory requirement and you will be notified in line with statute.
DURATION OF DATA
Your data will be held by us as long as is legally required. In the case of healthcare, we retain records for a minimum of eight years from the date of last consultation. In the case of children’s records, the period of eight years begins from the time they reach the age of 18. After that time period your data will be securely deleted, as per our data destruction policy.
You can contact us at any time to:
Request personal or sensitive personal data about yourself
Correct any information if it is incomplete or misleading
Withdraw your consent regarding the processing of your data at any time
Any request should be put in writing and will be responded to by us within 30 days.
If you email us your request for changes, please ensure it is clear regarding exactly what personal data you would like changed. For your protection, we will only be able to implement requests with respect to the data associated with the particular email address on which the request was sent, and we may need to verify your identity before implementing your request.
USE OF OUR WEBSITES
We may collect information via our website www.thefemalewellnesshub.com including:
Any personal details you knowingly provide us with through forms and our email, such as name, address, telephone number etc.
Your preferences and use of email updates, recorded by emails we send you (if you select to receive email updates on products and offers).
Non-personal data like, your IP address; numbers unique to your computer that are recorded by web servers to monitor your usage of the Website.
We do no store your financial information
Any external links to other websites are clearly identifiable as such, and we are not responsible for the content or the privacy policies of these other websites.
We take our security responsibilities seriously, taking all reasonable steps, including appropriate technical and organisational measures to protect your data. We review our security measures regularly.
If you have reason to believe that your interaction with us is no longer secure, please contact us immediately via email firstname.lastname@example.org or phone 00353-85-1441163
SALE OF BUSINESS
We reserve the right to transfer information (including your personal data) to a third party in the event of a sale, merger, liquidation, receivership or transfer of all or substantially all of the assets of our company in the following cases:
provided that the third party will only use your Personal Data for the purposes that you provided it to us.
You will be notified in the event of any such transfer and you will be afforded an opportunity to opt-in.
UPDATES TO THIS PRIVACY STATEMENT
We may changes this privacy statement and date of update will be included. Any changes will be effective immediately.