GDPR
Legally all data we hold must be obtained directly from client. This is done by the client providing it at time of booking and when completing their client consultation form. The client needs to consent to the data being given.
We can only hold data for as long as it is necessary (7 years for insurance purposes)
We can only hold data that is necessary, I.e we shouldn’t ask for irrelevent data.
Data must be protected (in our case it is securely held on a cloud and on devices which are PIN protected and access is limited to only those that require).