GDPR Privacy Statement May 2018
25th May 2018
Privacy Statement May 2018
MusAbility have always been registered with Data Protection, and have treated your personal data with the highest level of security and respect that it deserves; however with the new data protection law coming into place we wish to advise that we have taken this into consideration and have updated our Privacy Statement.
Below is our Privacy Statement to explain how we store and use personal data that is collected:
Personal data is collected at MusAbility for several reasons, for example when:
- We are asked to provide a pricing, or to collate information for a referral
- We are transferred your information from another provider (e.g. if changing music therapists)
- You commission our services via contract
- You contact us via social media, email or give us a business card
We collect personal data from our current existing clients, new potential clients and anyone else who has expressed an interest in our services. This information is stored on secure encrypted database. The information we collect is as follows:
- Contact name
- Business name if applicable
- Contact numbers
- Email addresses
- Basic information about your request
The above information will never be sold on to any other companies or third party organisations.
Amongst other reasons the primary reason data is collected is for contractual obligations. This is to ensure:
- We (MusAbility) provide you with a price / referral which is relevant to you
- We (MusAbility) are aware of sensitive information which will inform our therapeutic work
- We (MusAbility) fulfil our contractual promises
- We (MusAbility) provide potential clients with information about our services which is relevant to them
Any personal data we hold will be held on our Database for different length of times depending on the relationship you currently have with MusAbility. Information will not be held any longer that our current data retention policy. This policy is governed by the relevant legislation.
Should you wish to find out what data We (MusAbility) hold about you, update this information or request that We (MusAbility) remove you from our Database either entirely or for one specific part of our work (e.g. media consent) then please contact firstname.lastname@example.org. We will act upon this request promptly.
As it is widely known MusAbility provides an incredible support to Children and vulnerable adults. We (MusAbility) wish to advise that any data relating to children under the age of 16 then a parent or guardian’s consent will be obtained first. We will ensure that all the information gained with consent will be, where possible, written in a language which children and vulnerable adults will understand, if not the parent or guardian will be asked to provide the consent.
We (MusAbility) will not work with any individual or group without the express consent of either the individuals themselves (if legally able to provide consent) or the parents/guardians/primary care-givers. We hold four-tiered consent forms in paper format within a locked filing cabinet which can be referred to if necessary.
MusAbility ensures that we have the right procedures in place to detect, report and investigate a personal data breach. The Database is only accessed by MusAbility’s Director and Administrator. Each staff member holds personal records of therapy on encrypted systems with different password to access the relevant data they require. Where a breach is highly unlikely, We (MusAbility) will notify those directly affected should this circumstance happen.
Currently the personal data held is not shared, stored or processed outside of the EU. Should this change then our privacy statement will be updated.
If you have any questions, comments or requests regarding our Privacy Statement then please contact email@example.com or should you wish to write to us;
2 Church Road
Please note our Privacy Statement is reviewed periodically and is amended to comply with regulations and to ensure that it is suitable for safeguarding our client’s personal data. Any changes which we make to this above Privacy Statement will be posted via our website.