I am Robert Burgess, a Biodynamic Craniosacral Therapist, Shiatsu Practitioner & Focusing Practitioner in Northampton, UK. My practice address is 46 Fir Tree Walk, Westone, Northampton, NN3 3DT. I can be reached at rob.e.burgess@me.com or by post at the above address.

Client Information
If you choose to come for therapeutic sessions with me then I ask you to provide your personal case history which includes name, date of birth, contact details, current health & wellbeing information and medical & social history. This is collected through a form that you fill in online. This form is accessed through my website and is provided by GoogleForm. The information you submit is encrypted and protected by password. Google’s privacy policy can be found here: policies.google.com/privacy.

Throughout the course of your sessions, I will keep case notes. This information is stored in a cloud, hosted by Evernote and stored by them behind a secure username and password. Evernote’s privacy policy can be found here: Evernote Privacy Policy.

Newsletter Subscribers
If you sign up to my mailing list, I will receive your email address and first and last name. This information is hosted by MailChimp and stored by them behind a secure username and password. Mailchimp records other information about you and your responses to my emails such as approximate location, web browser, the date you were added to my mailing list, the date that you edited your preferences and the method by which you were added (i.e. manually added by me or electronically via an embedded web form) as well as whether you opened the email I sent to you or not. MailChimp’s privacy policy can be found here: MailChimp Privacy Policy.

Electronic Data
In order to establish and maintain security for all users, my website deploys a web application firewall. It sits locally on the server and scans all traffic against an ever-changing set of security rules. For reasons of Legitimate Interest, it may collect electronic data such as the website visitor’s IP address, operating system information, browser information, geographical location and the date and time of the website visit. In the event of an actual or potential security breach, the firewall shares the IP address and other electronic data with it’s developer, Defiant, Inc. (Privacy Policy) so they can protect other people from malicious IP addresses. This data will usually be stored for 90 days unless there is still malicious activity for that data in which case it is kept until no longer malicious. Additionally, my website contains electronic submission forms that use Google reCaptcha to prevent malicious use. If you submit a form on my website, you do so in agreement with Google’s Privacy Policy and Terms of Service.

Zoom – If you participate in online sessions, you will be required to download  an application called Zoom, which creates a virtual room for us to meet. Please view Zoom’s Privacy Policy which details what data of yours is collected by them, either automatically (e.g. IP address) or specifically entered by you (e.g. your name), to facilitate this service.

Google Analytics – My website uses Google Analytics for aggregated, anonymized website traffic analysis. In order to track your session usage, Google drops a cookie (_ga) with a randomly-generated ClientID in your browser. This ID is anonymized and contains no identifiable information like email, phone number, name, etc. My wesbite also sends Google your IP Address. My website uses GA to track aggregated website behavior, such as what pages you looked at, for how long, and so on. This information is important to me for improving the user experience and determining site effectiveness. If you would like to access what browsing information I have – or ask me to delete any GA data – please delete your _ga cookies, and contact me, and/or install the Google Analytics Opt-Out Browser Add-On.

International Data Transfers
In your use of my website, information which you provide may be transferred to countries which do not have data protection laws equivalent to those in force in the European Economic Area.

I collect your personal case history before your first session as this allows time for me to consider your case before you arrive. I keep case notes to monitor the progress of your sessions. This information is kept strictly confidential and secure. I will keep this information for seven years after the last visit for an adult; or up to the age of 21 plus seven years for a child; or for 15 years rather than 7 in the case of a child or adult who lacks capacity. After this time your information will be destroyed.

I rarely send out newsletters, but from time to time I think it is helpful to send out a few words regarding my practice, and I trust that this content is useful to you.

I will not share your information without your consent. I will maintain your confidentiality unless I am required to disclose your information by law. I am bound by the professional Code of Ethics of the Craniosacral Therapy Association.

You can make a request to see what personal information I hold of yours, and I will respond to this request within a reasonable time (1 month). You can request these things at any time by emailing rob.e.burgess@me.com, or writing to me at the above address.

You can unsubscribe from my mailing list at any time and manage your emailing preferences using the links at the bottom of the emails I send out. You can also ask me to delete your details from my mailing list.

If you require any further information on how I use and store your data please do not hesitate to contact me. Should you wish to contact the Information Commissioner’s Office, more details can be found on their website here: ico.org.uk/concerns.