Draft for review. The highlighted passages need your real details before this page goes live, and it is worth having a qualified adviser check the finished text.
Who we are
Vibration Remedies (registered name and, if applicable, company number) is the data controller for the information described in this policy. We are based in Ashford, Surrey, United Kingdom.
You can contact us about anything in this policy at hello@vibrationremedies.com, or by post at postal address.
What we collect
Information you give us
- Newsletter signup: your first name and email address.
- Contact form or email: your name, email address, and whatever you choose to tell us.
- Bookings and sessions: your contact details and any information you share when arranging or attending a session. Confirm whether health information is recorded, and how.
- Orders: your name, delivery address, and order details. Card payments are handled by our payment provider and we never see or store your full card number. Name the payment provider.
Information collected automatically
- Analytics: pages visited, approximate location, device and browser type. Name the analytics tool, or state that none is used.
- Server logs: your IP address and request details, kept briefly for security and troubleshooting.
Why we use it, and our lawful basis
- To send the newsletter — on the basis of your consent, which you give by signing up and can withdraw at any time.
- To reply to your messages — on the basis of our legitimate interest in answering people who contact us.
- To arrange and deliver sessions or orders — on the basis of performing our contract with you.
- To keep financial records — on the basis of our legal obligations, including HMRC requirements.
- To understand how the site is used — on the basis of your consent, where analytics cookies are used.
Where we handle health-related information in the course of a session, we treat it as special category data and rely on your explicit consent. Remove this paragraph if no health information is recorded.
How long we keep it
- Newsletter details: until you unsubscribe, and then removed from the active list.
- Enquiries: up to 12 months after our last exchange.
- Session and client records: retention period — commonly 7 years for insurance purposes; confirm with your professional body.
- Financial records: six years, as required for tax purposes.
Who else sees it
We do not sell your information, and we do not share it for anyone else's marketing. We do use trusted service providers who process data on our behalf:
- Email provider — to send the newsletter. Name the provider.
- Website hosting — to serve this site. Name the host.
- Payment provider — to take payments securely. Name the provider.
- Booking system — where sessions are booked online. Name the provider.
Some of these providers may process data outside the UK. Where that happens, we rely on the appropriate safeguards permitted under UK data protection law, such as International Data Transfer Agreements or adequacy regulations.
We may also disclose information where we are legally required to do so, or to protect someone from serious harm.
Cookies
Cookies are small files stored by your browser. This site uses only what it needs to function, plusanalytics cookies, if enabled. You can block or delete cookies through your browser settings; essential cookies are needed for the site to work properly.
If analytics or marketing cookies are used, a consent banner is required before they load. Confirm what is in use and list each cookie, its purpose, and its lifespan.
Your rights
Under UK GDPR you have the right to:
- Ask what personal information we hold about you, and get a copy of it
- Have inaccurate information corrected
- Ask us to delete your information, where we have no overriding reason to keep it
- Restrict or object to how we use it
- Receive your information in a portable format, or have it sent to another provider
- Withdraw consent at any time, including by using the unsubscribe link in any email
To exercise any of these, email us at hello@vibrationremedies.com. We will respond within one month.
Keeping information safe
We use reputable providers, keep accounts protected with strong authentication, and limit access to what is necessary. No system is completely secure, but we take reasonable steps to protect what you share with us, and we will tell you and the Information Commissioner's Office promptly if a breach is likely to affect your rights.
Children
This website is intended for adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us their details, please contact us and we will delete them.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change how we handle personal information, we will update this page and revise the date at the top. Where the change is significant, we will let subscribers know by email.