Who am I and what services do I provide?
Who does this policy apply to?
This policy applies to anyone accessing the website https://sophiepratt.ie and/or availing of services provided by me, Sophie Pratt Registered Dietitian.
What is personal data?
Under the EU’s General Data Protection Regulation (GDPR), personal data is defined as:
“any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cult genetic, mental, economic, cultural or social identity of that natural person”.
What personal data do I collect and store?
The personal data I collect during appointment booking, consultations and communication with you include name, email address, phone number, address, date of birth and any other health data, as necessary.
Why do I need to collect and store your personal data?
To provide you with a professional service, I need to collect personal data relevant to you and your health. I will ensure that the information collected, is used appropriately for the purpose of providing my services and does not constitute an invasion of your privacy. I am committed to protecting the security of your data and do not require you to provide personal information unless you wish to avail of my services and/or features on this website.
When you provide data, it will be used only for the purpose of providing my services and any other reasonable purposes. Any information provided to me by my clients before, during and after an appointment is held in strictest confidence. I do not sell or distribute your personal information to third parties for purposes of allowing them to market products and services to you.
How is your data used?
I process (collect, store and use) the information you provide in a method compatible with the General Data Protection Regulations (GDPR) and any other data protection regulations. I will endeavour to keep your information accurate and up to date, based on feedback you provide to me during consultations and other communications, and not keep it for longer than is necessary.
It is a requirement to retain certain information in accordance with the law, such as that needed for audits. Individual business needs, specific business-sector requirements and agreed practices may also determine the retention period of personal data.
I store client data on the following 3rd party platforms, both of whom have their own privacy statements:
My website (https://sophiepratt.ie/) does contain links to other websites, mainly NutriAdmin and SumUp. If you follow a link to any 3rd party websites, please note that they have their own privacy policies which apply to the use of their services. They are obliged to keep your data securely. Please check their policies before you submit any personal data to them. I do not accept any responsibility or liability for those policies.
To provide the best service to you I use an online 3rd party web application called NutriAdmin Client Portal. This portal provides you with your own personalized login account to access information discussed with you during an appointment, such as consultation reports and meal plans.
To avail of services supplied by Sophie Pratt Registered Dietitian you may be required to provide personal information via the website (by completing the online booking and contact forms), the client portal, or by making an appointment either in person, by email or over the phone.
By submitting and the form and agreeing to the terms and conditions you are consenting to the use and storing of your personal data on NutriAdmin, NutriAdmin Client Portal, SumUp and any other platforms required to run my business and provide an effective and professional service to my clients.
Any information provided by you will only be used for the purposes as outlined in this privacy statement and any other relevant purposes; verification and statistical analysis, investigate any improper use of my products, services, or that of the 3rd party platforms; and carry out activities necessary to the running of my business.
From time to time I may contact you in relation to marketing my services. By booking an appointment and availing of my services you are consenting to receiving such communications. However you can choose to opt out of such communications by contacting me directly on email@example.com.
What are your rights ?
I will only retain your data for as long as is required in order to provide my service, or as required by law.
As a data subject, you have the following rights while I am in possession of your personal data:
Right of access – you have the right to request a copy of the information that I hold about you.
Right of rectification – you have the right to access your data and to correct any inaccuracies in the data held.
Right to erasure – in certain circumstances you can ask for your personal data to be erased from my records if I do not have a legitimate reason for retaining it.
You may request in writing, a copy of your data held by me as the data controller. I will provide you with a copy of the data held as soon as reasonably possible and no more than 30 days after receiving a valid request in writing.
Please send all requests in writing to:
Data Protection Compliance Officer, Sophie Pratt Registered Dietitian, Canta Clinic, Unit 3 Barrow Valley Retail Park, Graiguecullen, Co. Laois
or email firstname.lastname@example.org
Communications will not be sent every time this policy is updated. It is recommended to check back here regularly.
This statement was last updated on 24th May 2020.