Selah74
New Member
Hi I am new here and a recently qualified Massage Therapist. I want to set up a business from home, but feeling a little overwhelmed with the new Data Protection act. I have tried reading through the guide on the ICO website for small businesses but still a little unsure about my lawful basis and wording for my statement for my potential clients. Would anyone be able to give some advice or an example of a template I could use to ensure that I am compliant. I will be initially keeping their record card/consent with their name, any health disclosures relating to their treatments, and contact number/ email on paper file locked and stored away in a secured lockable metal file. I am planning to use fb to promote my business and of course use email as a form of contact for enquiries and bookings along with my mobile which is password protected. Still debating whether to have a separate business mobile. So I do not store numbers on my personal phone? Would really appreciate some good advice and feedback.