How I handle your personal data
This page sets out our privacy policy and how Boost & Balance uses and protects any information that you may give me when you use this website.
I am committed to ensuring that your privacy is protected. Should I ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
What you can do
You are entitled to view, amend, or delete the personal information that I hold. If you would like to do so please email your request to me at sarena@boostandbalance.life.
You can also keep yourself updated with my privacy policy and ensure that you are happy with any changes I make. I may change the policy from time to time and I will keep you informed of these changes by updating this page.
This policy is effective from 01/09/2018.
This policy was updated on 18/04/2019 when I started using Healthkit software, who subsequently changed their name to Halaxy. See below for more details.
Your personal data
Given the services I offer you may provide me with personal data in the following ways:
- By completing a nutrition and lifestyle questionnaire
- By signing a terms of engagement form
- During a Nutrition or Health Coaching consultation
- Through email, over the telephone, internet (e.g. skype) or by post
- By taking credit card and online payments
Specifically this may include:
- Basic details such as name, address, contact details and next of kin
- Details of contact we have had with you such as referrals and appointment requests
- Health information including your previous medical history, dietary, lifestyle, supplement and medicine details, biochemical test results and clinic notes
- Health improvement plans
- GP contact information
- Bank details
I use this information to provide you with the best possible healthcare. This means that the legal basis for me to hold your personal data is either contractual (because you specifically asked me to) or for legitimate interest.
I have chosen to work with a reputable software provider to manage all of my client information, bookings, invoicing and clinical notes. I believe this is a far more secure and organised way of looking after your personal and sensitive health information. Whilst my chosen provider Halaxy acts as a data processor on my behalf, Boost & Balance remains the data controller. You can view the EU Privacy Policy for Halaxy here: https://www.halaxy.com/article/privacy-eu. Please contact me if you have any questions about how I capture, store and use your data.
I may from time to time send you personalised information that I consider is relevant to your ongoing healthcare which I also consider to be legitimate interest.
Following completion of your healthcare I retain your personal data and health records for the period defined by my professional standards. In most cases this is at least 7 years following your last appointment. For children, I am advised to keep records for at least 7 years after they reach the age of 18 (i.e. until they are 25 years old).
I may obtain sensitive information from other healthcare providers. The provision of this information is subject to you giving me your express consent. If I do not receive this consent from you, I will not be able to coordinate your healthcare with that provided by other providers which means the healthcare I can provide may be less effective.
I may also obtain sensitive medical information about you in the form of test results from biochemical testing companies. I use this information in order to provide you with direct healthcare. This means that the legal basis for me holding your personal data is for legitimate interest.
When someone visits www.boostandbalance.life I use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. I do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. I do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.