Privacy Policy
Updated: 28th April 2020
Bobath Centre Privacy Policy
Registered Charity Number: 229663
In this document:
“we”, “Bobath Centre”, “our” and “us” means Bobath Centre
“you” and “your” means any person(s) about whom we collect and process non personal and/or personal information
1. Our Privacy Principles
Our charity will look after any personal information that is shared with us.
This is central to our values as an organisation. We want everyone who interacts with our charity to feel confident about how any personal information they share will be looked after or used.
People who share their data with us can be confident that:
• We only use personal information in the ways we need to, that is expected of us and that we have a lawful basis for. • We respect the rights you have as an individual by having procedures in place to protect these. • We will make it easy for you to tell us how you want us to communicate with you, including how to opt out from future communications, rectify inaccurate data or request access – and your request will be respected in a timely manner. • We will never release your information to organisations outside Bobath Centre for their marketing purposes. • We take all reasonable care to safeguard your personal information through security policies and secure business processes. • We will provide easy ways for you to contact us. We are always happy to answer any queries you have, at any time.
2. What information do we collect?
Browsing on our website
Lawful basis – Legitimate interest
We gather general information about the use of our website, such as which pages users visit most often and which services, events or facilities are of most interest. We may also track which pages users visit when they click on links in Bobath emails. We may use this information to personalise the way our websites are presented when users visit them, to make improvements to our websites and to ensure we provide the best service for users. Wherever possible we use aggregated or anonymous information which does not identify individual visitors to our websites.
Cookies: –
‘Cookie’ is a name for a small file, usually of letters and numbers, which is downloaded onto your device, like your computer, mobile phone or tablet when you visit a website.
Cookies let websites recognise your device, so that the sites can work, or work better, and also gather information about how you use the site. A cookie, by itself, can’t be used to identify you.
Our website does issue ‘cookies’. However, these do not contain personal information. The Bobath Centre does not share this data with third parties. You can disable cookies by altering the settings of your browser and the website will still function.
Provider of the Cookies we use: Google Analytics
Name of the Cookies we use: _utma, _utmb, _utmc, _utmz
Purpose of the Cookies used: These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they have visited.
More info about these Cookies: Google Privacy Policy
We use a number of suppliers who may also set cookies on their websites on their behalf. The Bobath Centre website does not control the dissemination of these cookies. You should check the third party websites for more information about these.
Your Contact and Enquiries
Lawful Basis- Legitimate Interest
If you contact us by telephone, email, website enquiry form or letter we retain a record of your contact to help us respond to our queries.
Bobath Centre’s email accounts are provided by Microsoft Outlook. All emails and associated details may be retained for a period of up to 3 years before being deleted.
We will not use your details for any other purpose than to assist with your enquiry.
Bobath Mailing List
Lawful Basis- Consent
We hold contact details for Bobath’s eNewsletters and Updates including Name, Organisation and Email. Bobath’s eNews mailing list is administered through MailChimp or another service, who store the above information of all individuals on the mailing list and track information on engagement with messages sent. MailChimp’s privacy policy can be viewed here.
The details will only be on the list if you have given your explicit opt in consent to the following:
• What? – Newsletters and additional news on ad hoc basis • Frequency – No more than once a month • Understanding that you can unsubscribe at any time
If you sign up to our mailing list at an event or training you will receive an email to us following this to receipt your subscription.
Social Media
Bobath Centre is active on social media such as Facebook, Twitter and Instagram. We do not collect data from these social media sources, though we will endeavour to answer any messages directed to us through these sources. All messages sent to Bobath in this regard are governed by the privacy policies of the chosen platform.
Expenses and Banking
Lawful Basis- Legitimate Interest
In the event that Bobath reimburses expenses for an individual, we will collect personal data in order to process such payments. We will securely store this information in order to meet the needs of our accounting processes.
Our Staff and Volunteers
Lawful Basis- Contract
We hold personal information about our staff, trustees, trainers and volunteers which is outlined in our contract with them.
Enquiries regarding training courses
Lawful Basis- Legitimate Interest
If you make an enquiry through email, online form or telephone about booking a training course we will store your name and contact details on our internal enquiry database to assist with your enquiry. Your details will not be used for any other purpose. If communication regarding an enquiry has ceased for 5 years we will delete your contact details.
Booking Training- NHS Trusts, Managers and Organisations
Lawful Basis- Contract
If you book a training course with Bobath Centre, the data protection terms are outlined in the contact. By signing the contract you have the obligation to notify and have the permission of the participants that you will be sharing their details with Bobath Centre in order for us to deliver the training and certification. They must know:
Their name, profession, training date, email and certification details with be added to our training database in order to:
• Send details about course arrangements • Send post course resources • Keep track of certifications within the group • Offer opportunity to keep in touch via our eNewsletters
We will store the training contracts, including Manager’s and participant’s name and contact details in our internal training contracts file. We will use this for the purpose of delivering the training including invoicing, trainee information and certification updates.
Course Trainees
Lawful Basis- Consent/Contract
If you sign up to attend our training courses you will either:
1. Be notified and give permission to your organiser for your details to be shared with us (see above) 2. Give permission on our online registration form for your details to be used by Us
How do we use your details:
• Send details about course arrangements • Sending post course resources • Keep track of your certification • Offer you the opportunity to keep in touch via our eNewsletters • May inform EBTA of successful course participants
Your details will be stored on our internal training database and not used for any other purpose than to deliver the above points. It will not be shared outside of Bobath Centre. We
will keep for a period of 5 years if uncertified. Those who complete certification will be kept for record purposes.
Treatment- Clients, patients, beneficiaries and Organisations
Lawful Basis- Contract
If you book treatment with Bobath Centre, the data protection terms are outlined in the contract. By signing the contract you have the obligation to notify us of your correct details and information about you / client’s medical condition and agree the Bobath Centre can use that information to deliver the therapy appropriate to you / the client’s needs. We must know:
Their name, age, medical condition, details of other therapists or medical professionals, contact details, email, telephone numbers and other details of contacts (such as schools or employers) as is necessary to support clients.
• To arrange treatment sessions • To record treatment session • To make onward referrals • To submit reports • To meet requests of clients.
We will store the contracts, contact details and medical notes in our ThankQ CRM on our computer server. We will use this for the purpose of delivering the therapy including invoicing.
3. What are your rights?
· The right to be informed
You have the right to be informed about how we manage your personal data, including our purposes for processing your personal data, retention periods for that personal data, and who it will be shared with. This should be presented in a concise, transparent, intelligible, easily accessible, and it must use clear and plain language.
✔ You can read about how your data is processed in our privacy policy written concise, transparent, intelligible, easily accessible, and it must use clear and plain language
· The right of access
You have the right to be aware of and verify the lawfulness of how we are processing your data.
✔ You can request to see the information we hold about you and verify its lawfulness by writing to us at [email protected]
· The right of rectification
You have the right to have your personal data rectified if it is inaccurate or incomplete.
✔ You can send us a request to rectify your personal details by emailing [email protected]
✔ We will respond to your request within one month, informing you in writing
· The right to erasure
You have the right to have your personal data erased, though the right is not absolute and only applies in certain circumstances.
✔ You can request deletion of your personal data by emailing [email protected] or calling 0208 4443355
✔ We will respond to your request within one calendar month
✔ We will inform any third parties about your request for erasure if applicable
· The right to restrict processing
You have the right to request the restriction or suppression of your personal data, though this is not an absolute right and only applies in certain circumstances. When processing is restricted, we are permitted to store the personal data, but not use it.
✔ You can send us a request to restrict the processing of your personal details by emailing [email protected] or calling 0208 4443355
✔ We will respond to your request within one month, informing you in writing.
· The right to data portability
You have the right to obtain and reuse your personal data for your own purposes across different services.
· The right to object
You have the right to your data being processed under legitimate interest, direct marketing and for scientific research or statistics, at the first point of contact.
✔ When you object to data processing at the point of first communication we will stop the processing if related to direct marketing without exception and for legitimate interest and research if it fulfils the criteria of the ICO guidelines
· Rights related to automated decision making including profiling
✔ Bobath Centre does not carry out or use any automated decision-making processes or systems
4. Who sees your personal information?
The personal information we collect about you will be used by our staff (and volunteers) at Bobath Centre.
We will never sell or share your personal information with organisations thus enabling them to contact you for any marketing activities. We will never sell any information about your web browsing activity.
5. Your Information Security
We take the security of your personal information extremely seriously.
We have implemented appropriate physical, technical and organisational measures to protect the personal information that we have under our control, both online and offline, from improper access, use, alteration, destruction and loss.
We only keep personal information as long as is reasonable and necessary. This may be to fulfil statutory obligations (for example, the collection of Gift Aid).
Here are some of the ways we protect your personal information:
• Offline, your personal information is kept securely in our databases and offices • Our website may contain links to other sites. While we try to link only to sites that share our high standards and respect for privacy, we are not responsible for the content or the privacy practices employed by other sites • At present, we do not offer online payments. In the future it is anticipated that any debit or credit card details which we receive on our website will be passed securely to Sage Pay, our payment processing partner, or another processing partner, according to the Payment Card Industry Security Standards
6. How to update or access your personal information
You may ask us at any time to update your details, correct or remove information you think is inaccurate by:
Writing: to our address, Bobath Centre, Tandy House, Regal Way, Watford WD24 4YE
Email: [email protected] or calling 0208 4443355
You also have a right to know what personal information the Bobath Centre holds about you.
To request a copy of your personal information we hold, contact us by one of the above methods.
7. Changes to our Privacy Policy
Our Privacy Policy is reviewed regularly to ensure that it reflects how we use your information. Any changes will be notified to you by updating this policy so please check this Policy to see if any changes have been made that are important to you. Where appropriate, changes will be notified to you by email.
This Privacy Policy (version 2.0) was last updated on 28/04/2020.
8. Who we are
We are committed to protecting your personal information and to reassure you that that you have control over the information we store about you and what types of information you would like to receive from us.
For further information about our privacy practices, please contact us by:
• Writing to Bobath Centre, Tandy House, Regal Way, Watford WD24 4YE
• Calling us on +44 (0) 208 4443355
• Emailing [email protected]