CAREA Directory Privacy Policy
1. Introduction
This privacy policy explains how CAREA collects, stores, uses, and protects your personal information. We are committed to safeguarding your data in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
This policy applies to:
– Registered practitioners listed in the CAREA Directory
– Users submitting forms or uploading documents via our website
– Visitors browsing our website
2. Who We Are
CAREA (Centralia Advanced Reflexology Education Authority) is a UK-based professional body that manages a public directory of qualified reflexology practitioners trained to Level 5 in Duopody™ Reflexology.
We act as the Data Controller for any personal information collected through our websites and services.
3. What Information We Collect
We may collect the following types of personal data:
For Practitioners (during registration):
– Full name and contact details (email, phone, address)
– Professional qualifications and training history
– Certificate uploads (PDFs/images of diplomas, insurance)
– Profile photo and biography
– Directory listing preferences
For General Users:
– IP address, browser type, and device information
– Contact form submissions
– Cookies and analytics data (see Section 9)
We do not knowingly collect or process special category data unless voluntarily submitted as part of your listing.
4. How We Use Your Information
We use your personal data for the following purposes:
– To verify practitioner qualifications and credentials
– To create and manage your public directory listing
– To respond to enquiries and support requests
– To manage subscriptions and payment records
– To send renewal or reminder emails
– To maintain website security and integrity
– To comply with legal obligations
5. Lawful Bases for Processing
We rely on the following lawful bases to process your data:
– Contractual obligation: When you register to be listed in the CAREA Directory
– Legal obligation: For verifying training and insurance records
– Legitimate interest: For maintaining the quality and accuracy of our public register
– Consent: For sending optional updates or newsletters (where applicable)
6. Sharing Your Data
Your information will only be shared with:
– Our website hosting and technical support partners (under strict data processing agreements)
– Payment processors (e.g., Stripe, PayPal – we do not store payment card details)
– Public users of the directory (limited to the profile details you choose to publish)
We will never sell or rent your personal data to third parties.
7. How We Store and Protect Your Data
Your data is stored securely on UK- or EU-based servers. All data transmission is encrypted using SSL (Secure Socket Layer) technology. Access to backend systems is restricted to authorised personnel only.
Uploaded documents are stored securely and are only accessible to administrators for verification purposes.
8. Data Retention
We retain your personal information only for as long as necessary:
– Practitioner data is retained for the duration of your membership, plus 12 months for renewal grace or legal purposes
– Contact form submissions are retained for up to 12 months
– Certificate uploads are deleted if your membership lapses or is cancelled
You can request deletion of your data at any time (see Section 10).
9. Cookies and Website Analytics
Our website uses cookies to enhance functionality and gather anonymous usage data via services like Google Analytics. These cookies do not identify you personally.
You can manage or disable cookies via your browser settings.
10. Your Rights
Under UK GDPR, you have the right to:
– Access a copy of the data we hold about you
– Correct inaccurate or incomplete data
– Request deletion of your data (where applicable)
– Withdraw consent (for optional communications)
– Object to or restrict certain processing activities
– Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, email: info@careareflexologyacademies.org
11. Third-Party Links
Our website may contain links to third-party sites (e.g., training academies). We are not responsible for their privacy practices, and we recommend reviewing their policies separately.
12. Updates to This Policy
This policy may be updated from time to time. The latest version will always be available on our website and marked with the “Effective Date” at the top.
Effective date: 30 September 2025
Organisation: CAREA – Centralia Advanced Reflexology Education Authority
Website: www.duopodyreflexologyregister.org
Contact email: info@careareflexologyacademies.org