When you supply your personal data to Isis Sounds they are stored and processed in 3 ways:
1 - I have a legal obligation to maintain your notes in order to provide you with the right treatment. 2 - Provided we have your consent, we would like to contact you in order to confirm your appointment with me or to update you on matters related to your current care. Under the GDPR, this is known as legitimate interest. 3 - Again, provided I have your consent, I may occasionally send you general information in the form of articles, advice or newsletters. This also constitutes as legitimate interest under GDPR.
I have a legal obligation to retain your records for 7 years after your most recent appointment (or age 25 if this is longer), but after this period you can ask me to delete your records if you wish. Otherwise I will retain your records indefinitely in order than I can provide you with the best possible care should you need to come back for another session sometime in the future.
Your records are stored on paper, in a file which is in a locked box, kept in the property where I reside which is always locked out of working hours. I also have some emails stored on my home PC on my email account which is password-protected, backed up regularly and the PC is locked up out of working hours.
I will never share your data with anyone who does not need access without your written consent. Only myself, as the practitioner will have routine access to your data so I can provide you with treatment. I will not share your data with any third parties or outside companies for marketing or selling purposes.
This I uphold & promise to keep to as of 13th May 2018.