Data protection policy
Data controller – Satori Ltd
Processor – Mailchimp, a software tool to let Satori send eblasts.
Data Protection Officer – Jennie Lawrenson, Director, Satori.
Personal data held by Satori
Satori holds the following personal data:
- therapists’ details – for administration purposes
- email addresses and first names of clients who have signed up to the Satori eblast
To clarify what happens to your data as a client, client details are held by self-employed therapists – for looking after clients’ health, making sure their treatment history is recorded, for payments and for allowing future bookings (date of birth, address and medical details, phone number, address and email address, medical details eg. skin conditions, medication, medical history). Data is stored and processed by Schedul and also by the self-employed therapist.
For both clients and staff, Satori and self employed therapists obtain the data directly from the individual. Neither Satori nor self employed therapists share your data with any partners and would always request your consent if this was necessary. All therapists sign a confidentiality agreement to adhere to data protection principles when they start renting a room at Satori.
The lawful basis for processing data is specific direct consent to being sent an eblast newsletter, sent via Mailchimp. Clients can contact us to amend, check or ask for their data to be deleted email@example.com and will receive a reply within 2 working days. Eblasts all include a link to allow you to unsubscribe from the eblast mailing list.
Mailchimp holds first names and email addresses only in order to allow Satori to send eblasts.
Accessing your data
Accessing your data is known as a subject access request. We will respond to a subject access request within 2 working days. Please email firstname.lastname@example.org
If you are a client, Schedul (booking software used by self employed therapists) holds appointments, transactions and personal details information, which can be shared with you. Schedul allows the complete deletion of clients’ data.