My month of social media free has come to an end and I feel like it has trained me to spend time on social media much less than I did before! 
October comes with a new challenge and this one is the pull up challenge! By the end of this month I am hoping to be able to do a pull up. I'm not sure if I will be able to achieve this one- but I will definitely try my hardest!

We are well into September and my month of social media free is proving challenging! I didn't realise how hard it would be. I have learnt that I probably spend too much time on social media- and especially before bed, so this time is being used much more constructively and I'm loving the amount of reading I've been doing before bed. 

The retreat in France was great- and I've never treated a group of such relaxed people before. My job was easy! The clients enjoyed early morning and evening sessions of meditation and yoga, delicious and nutritious food, walks after breakfast, relaxing by the pool, and of course some treatments. I offered reflexology and natural face-lift massage and I think the guests left the retreat happy and wanting to come back next year. 

My ted talks challenge for August went well, and I learnt a lot! Here is a list of some of my favourite talks:
Shonda Rhimes- My year of saying yes to everything
Nic Marks- The happy planet index
Jamie Oliver- Teach every child about food
Ken Robinson- Do schools kill creativity?
Christoph Niemann- You are fluent in this language (and don't even know it)
Tshering Tobgay- This country isn't just carbon neutral, it's carbon negative
Laurie Santos- A monkey economy as irrational as ours
Giulia Enders- The surprisingly charming science of your gut
Wendy Suzuki- The brain-changing benefits of exercise
Nora Atkinson- Why art thrives at Burning Man

I hope you are enjoying your September so far. The temperatures are getting cooler so now is the perfect time to try some hot stone reflexology if you haven't already!

Georgie x

My month of mindfulness in July went well: I clocked up 5 and a half hours of time meditated on the Headspace app, and listened to 34 sessions. I really got into the "sleep series" which is a 30 session pack teaching you how to have a better relationship with sleep- with some very handy tips. I also found the foundation series handy, with some meditation tools that you can learn and practice wherever and whenever you like. It's so beneficial to slow your mind down for a short period during the day, and you can even practice meditation during a reflexology or facial massage session. August's resolution is to watch / listen to daily Ted talks. I always find Ted talks really interesting, and they have such a huge selection of subjects- I'm hoping to learn a lot!

July is here, and with it comes a new resolution! This month is my Mindfulness month, and I am hoping to do a daily meditation. I have always struggled when it comes to meditation, not really knowing what to do/ how to do it, and whenever I do start a meditation course I can never keep it up for more than a week. So I think this is going to be a real challenge, but let's hope I can do it! 

June- Be a morning person. 
I think I chose the right month for this what with the light mornings, and sunny days. I find I am most proactive in the morning, but sometimes I struggle to get out of bed as soon as my alarm goes off. So this month I will do my best to set my alarm earlier than normal and jump out of bed to get things done!

I did it!!!

When I was creating my "monthly resolutions" list, I decided that the month of May would be to train for a triathlon. I decided to sign up to Blenheim Triathlon, with very little enthusiasm! I have watched my boyfriend compete in 4 triathlons, and never had the urge to do one myself. I think it's good to challenge yourself though, and then once you have accomplished a challenge, the sense of achievement is even greater. 

I never would have thought I would enjoy the triathlon so much, or even do as well as I did. Apart from it being a beautiful course, and  a lovely day: we had a big team of supporters there and enjoyed a huge picnic after the race. It was nice to do it with my boyfriend too, we started in the water together, and then met again at the bike transition stage.

​My main aim was to complete it and get around the course, but when I got my time I was over the moon! I was also really happy when it was over (and as you can see I had to celebrate)....but you never know, I may even do another one next year. 

Retreat 4 Your Feet will be providing reflexology and facial massage to the festival goers at Lovefit this Summer. We are taking our bell tent treatment space along to the festival, which will be taking place from 20th-22nd July at the St Clere Estate near London. The festival includes a huge range of fitness and adventure activities, wellness areas with hot tubs and treatments, a selection of healthy food and drinks stalls, and boutique after parties in the woods. Grab a ticket now at: ​www.lovefitfestival.com/tickets/ and book  in a treatment with me at the festival!

The GDPR brings new legal protection for personal information from May 2018. This tells you what personal information I hold and why, and what your rights are. 

​GDPR: Data Protection Policy: Georgiana Sandeman
Georgiana Sandeman
51A Barnes High Street,
London,
SW13 9LN
Tel. 07805075901
Email: retreat4yourfeet@hotmail.co.uk
 
Policy Purpose
This policy outlines my data protection policy, and thus how I comply with the GDPR.
 
GDPR Registration
I have registered with the ICO.
 
Policy Content
1.The data that I process and how it flows into, through and out of my business.
 
Data comes into my business in 5 ways:

1. Via email messages to me from potential clients (PC) and clients(C) that have my email number.
2. Via text messages (as above)
3. Via my website (www.retreat4yourfeet.com)
4. Via Facebook Messenger
5. Via Instagram messenger

 
It flows through my business via:

• My laptop - which goes from work to home
• My smart phone - everywhere I go
• My paper file – to and from home visits

 
The information does not flow out of my business.
 
2. The personal data I hold, where it came from, who I share I with and what I do with it.
 
Information Asset Register

• I hold personal information about my clients that they have given me.
• This includes name, address, contact details, and, where appropriate, age.  I also hold health and wellbeing information about them which I collect from them at their first consultation.
• I hold information about each treatment that they receive from me.
• I don’t share this information with anyone.
• I use the information I have, to inform my treatments and provide them with any appropriate advice within the realms of the treatment, my professional experience and qualifications.
• I keep all data for:

 

1.  claims occurring insurance: for which I am required to keep my records for 7 years after the last treatment
2. law regarding children’s records: for which I am required to keep my records until the child is 25,  or if 17 when treated then until they are 26.

 
3.The lawful bases for me to process personal data and special categories of data.
 
I process the personal data under:

• Legitimate interest: I am required to retain the information about my clients in order to provide them with the best possible treatment options and advice.
• Special Category Data - Health Related: I process under special category data, therefore the additional condition under which I hold and use this information is for me to fulfill my role as a healthcare practitioner, bound under the AoR Confidentiality as defined in their Codes of Practice and Ethics.

 
4. Privacy Notice
 
Individuals need to know that their data is collected, why it is processed and who it is shared with.  This information in included in my privacy notice on my website and within any forms or letters I send to individuals, including at my first consultation with my client.
I have written a privacy notice for my website and for my clients, and have ensured that the privacy notice includes all of the information included in the ICO privacy notice checklist at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-be-informed#table
 
5. Processes to recognise and respond to individuals' requests to access their personal data.
All individuals will need to submit a written request to access their personal data - either by email or by letter.  I will provide that information without delay and at least within one calendar month of receipt. I can extend this period by a further two months for complex or numerous requests (in which case the individual will be informed and given an explanation).
I will identify the client using reasonable means, which because of the special category under which I process data, will be photographic ID.
I will keep a record of any requests to access personal data.

6. Processes to ensure that the personal data I hold remains accurate and up to date.
I will ensure that client information is kept up to date during our treatments, and will update client information as I am informed of any changes.
Once a year I will also have a wholesale review of all data.

7. Schedule to dispose of various categories of data, and its secure disposal.
Once a year I will review my client information and will place dormant clients in a separate file.  This will be assessed each month to ensure that data that is no longer required to be kept under GDPR is destroyed securely.

8. Procedures to respond to an individual’s request to restrict the processing of their personal data.
As I only hold data in order to provide treatments, I cannot envisage a situation where I would receive a request to restrict their processing of an individual’s personal data.  However, if I do receive a request I will respond as quickly as possible, and within one calendar month, explaining clearly what I currently do with their data and that I will continue to hold their data but will ensure that it is not processed.
 
9. Processes to allow individuals to move, copy or transfer their personal data from one IT environment to another in a safe and secure way, without hindrance to usability.
 
Should clients wish their data to be copied or transferred I would work with the client to ensure that this is done in a way that was most appropriate for them - for example this could be an electronic summary of treatment received and progress made, copies of individual treatment records.  I do not hold any treatment information electronically.
 
10. Procedures to handle an individual’s objection to the processing of their personal data.
 
I will inform my clients of their right to object “at the point of first communication” and have clearly laid this out in my privacy notice.
 
11. Processing operations that constitute automated decision making.
 
I do not have any processing operations that constitute automated decision making and therefore, do not currently require procedures in place to deal with the requirements.  This right is, however, included in  my privacy statement.
 
12. Data Protection Policy
 
This document forms my data protection policy and shows how I comply with GDPR.
 
This is a live document and will be amended as and when any changes to my data processing takes place, at the very least it will be reviewed annually.
As the only member of staff I believe that I have done an appropriate amount of research around the implications of the new GDPR, including taking heed of the advice and guidance provided by my professional membership organisations (AoR and BTPA, and the CNHC for my work as a Reflexologist).
 
13. Effective and structured information risks management
 
The risks associated with my data, and how that risk is managed is as follows:

• Theft of electronic devices - both have password locks on all electronic devices which are changed regularly and are not shared with anyone.
• Break in to office - all my paper files are stored in locked filing cabinet in a locked room.  No one else has the key but me.
• Theft of paper file while at home - if I take any work home with me this is kept in my office, and my home is fitted with a burglar alarm. Consideration does need to be given to a second locked cabinet at home.

 
14. Named Data Protection Officer (DPO) and Management Responsibility
 
Although not required to have a named DPO, as the sole employee I am the DPO and will ensure that I remain compliant with GDPR.
 
15. Security Policy
 
As detailed in my risk assessment.  I have also chosen my electronic equipment based on their industry record as having the most robust inbuilt protection possible.
 
16. Data Breach Policy
 
A personal data breach means a breach of security leading to the destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
I understand that I only have to notify the ICO of a breach where it is likely to result in a risk to the rights and freedoms of individuals.
Where a breach is likely to result in a high risk to the rights and freedoms of individuals, I will notify those concerned directly and without undue delay.
In all cases I will maintain records of personal data breaches, whether or not they were notifiable to the ICO.
 
Data Protection Policy created: 10th April 2018
This is a live document and will be updated as and when changes occur.
 
Documented Created: 10th April 2018
Date of Last Review: 10th April 2018
Date of Next Review: 10th April 2019