Our Privacy Policy


Policy Purpose

The purpose of this policy is for the users of this website to fully understand how I collect and manage their information. It further aims to explain the type of personal information I collect, and why I collect it.


Personal information is any information that can be used to identify a living person. For example, email addresses, customer financial information, employee data or website user stats.


Version: 10 August 2020


Who We ARE?

I am Jennifer Stratten and I run an allergy and intolerance testing practice in the South East of England. I provide a specialised service and advice to my clients who suffer from allergies and intolerances.


My Website: https://www.allerjen.co.uk


My Contact Details

I encourage you to contact me if you have any questions or concerns about how I manage and protect your information. I will respond in person via e-mail or telephone within 48 hours.

Name:             Jennifer Stratten

Address:           1 Brickyard Cottages, Churchsettle Lane Wadhurst TN5 6NG

Phone:             07961 316 174

Email:               jennifer@allerjen.co.uk


What I Collect And Why

It is my philosophy to only collect information and data that I need to provide my service to my clients and enable our operations. To this extent, I collect the following information:


What

Why

Contact Information

  • Name & Surname*
  • Postal Address
  • Email
  • Telephone no.


In order to liaise and collaborate with you during the process of providing our services and products to you

Medical Information

  • Date of Birth
  • Medical History
  • Medications: Current and Past


Due to the nature of my service I have to collect certain medical data to ensure the safety of my client and the appropriateness of the advice I provide

Comments captured in the contact form

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Cookies

If you access my site you may opt-in to saving your name, email address and website in cookies. These are for your convenience, so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. Please see my cookie policy for more information on Cookies.

Embedded Content

Articles or links on this site may include embedded content (e.g. videos, images, articles, etc.) Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Note: This policy does not cover such external links and how that organisation processes personal information. I encourage you to read the privacy notices on the other websites you visit.


How I Collect Your Information

I primarily only collect and process information that is provided to me directly by you for the purpose of providing you with the results of your test, nutritional information and ongoing treatment.


How I Store, Manage And Destroy Your Data


Security

I maintain only hardcopy records that is properly secured and under my direct control. I do not provide or allow anyone else access to my records.


Storage Period

I only retain your information for as long as I require it to provide you with advice and treatment. This is to enable me to provide ongoing or future advice or when my clients rebook tests at a later date.


Opt In

You can opt in if you wish for me to retain your information for longer than the minimum storage period. This is normally where I provide clients with ongoing advice or future treatment.


Sharing

I will never sell or pass on your information to any third party in the course of normal business.

If, for any legitimate legal reason, I am required under UK Law to share your information, you will be advised of this in the first instance.

 

Destruction

By default, I will destroy your records under the following circumstances:

  • If you decide not to engage my services after the initial contact
  • If you indicate that you will not return to use my service or request advise in the future
  • If you have not made use of my services during the preceding 24 months

I will also destroy your information on written request at any point in time.


Information is destroyed by the physical destruction of the hard-copy records that I maintain.


You Data Protection Rights

Under data protection law, you have rights I need to make you aware of. The rights available to you depend on my reason for processing your information.


You have the following rights:

Your right of access

You have the right to ask me for copies of your personal information.


Your right to rectification

You have the right to ask me to rectify information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.


Your right to erasure

You have the right to ask me to erase your personal information. This is often referred to as the “right to be forgotten”.


Your right to restriction of processing

You have the right to ask me to restrict the processing of your information.


Your right to object to processing

You have the right to object to processing if I am able to process your information because the process forms part of my public tasks or is in our legitimate interests.


Your right to data portability

This only applies to information which you have given me. You have the right to ask that I transfer the information you gave me from one organisation to another or give it to you. The right only applies if I am processing information based on your consent or under, or in talks about, entering into a contract and the processing is automated.

You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.

Please contact me using our contact information provided in this policy if you wish to make a request.

 

Lawful Basis For Processing

Under the General Data Protection Regulation (GDPR), the lawful bases I rely on for processing this information are:


(a) Your consent. (You can remove your consent at any time.)

(b) We have a contractual obligation.


How To Complain

Should you wish to make a complaint relating to my privacy policy, the storing and processing of your data, or if you believe there has been a data breach, please contact me in the first instance.


Should you be dissatisfied with the response you receive from me you should contact:


The Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline Number 0303 123 1113 or visit their website www.ico.org.uk