GDPR Policy – General Data Protection Regulation

Effective Date: January 2025

Data Controller: Bex Bridgford – Health Creation Coach, EFT & Yoga Practitioner

​

What Information Is Being Collected?

As part of working with me in a Health Creation, EFT, or yoga session, I will need to record personal details such as your full name, date of birth, address, phone number(s), and email address. Relevant medical or health-related information specific to your treatment may also be collected. Occasionally, your social media handles may be noted if relevant. Notes about your presenting symptoms, session details, treatment progress, and observations will also be recorded. You have access to your personal information at any time upon request.

​

How Is Your Information Stored?
Digital records are securely stored on a passcode-protected computer. Paper files are kept in a locked cabinet. No client files are left in public view. For mobile sessions, all notes are carried in a concealed, secure bag and transported in the vehicle boot, never left unattended. All physical records use a unique reference code so that in the rare event of loss or theft, your identity cannot be determined. Notes are kept for 8 years for adults or until age 21 for children. If you are no longer an active client after this period, your records will be securely destroyed.

​

Who Is Collecting This Data?
I, Bex Bridgford, collect your data either before or during your first session. This may happen through email, text, secure online portals (such as Clinkico), phone or video calls, or in-person conversations. Occasionally, relevant documents such as medical letters, scans, photographs, or mailed correspondence may form part of your file. No personal data is collected through social media.

​

Why Is Your Data Collected?
Data is collected to record and track your progress, communicate effectively between sessions, and support your ongoing treatment plan. It also helps identify patterns, concerns, and breakthroughs. In some cases, anonymised data may be used for relevant research, but only if you have opted in. All research data uses coded references to protect your identity.

​

How Is Your Data Used?
Your data will be used to confirm and manage appointments, monitor your treatment progress, provide relevant follow-up care or referrals (with consent), and occasionally share anonymised or consented case studies or testimonials.

​

Who Is Your Data Shared With?
Your information is rarely shared outside the clinical setting. If you need to be referred to another practitioner or service, I will request your full consent beforehand. If shared, your personal details and treatment information are sent separately using unique reference codes to ensure your identity remains protected. Any client story shared publicly will only ever be done so with full written consent.

​

How Is Your Privacy Protected?
No data is shared with or sold to third parties. Data is not stored on mobile phones unless the device is encrypted with a pin or fingerprint. In the event of a lost or stolen device, it will be remotely locked. Identifiable information is never sent in a single email. All files and devices are password protected and only accessible by those with permission.

​

Withdrawing Consent or Deleting Your Data
You may request for your data to be deleted at any time by contacting me directly.

I take data protection and client privacy seriously, and I am committed to maintaining a high standard of confidentiality and care. If you have any concerns or questions, they will be taken seriously and responded to promptly.

​

Bex Bridgford
Email: bexbridgford@gmail.com