PRIVACY NOTICE.
Connections Chartered Physiotherapy and Holistic Massage Clinic is committed to preserving the privacy and security of your personal information. Please read this privacy notice carefully as it provides you with important information.
Who are we?
When we say Connections Chartered Physiotherapy and Holistic Massage Clinic we’re referring to Emma Clark-Eden Ltd, trading as Connections Chartered Physiotherapy and Holistic Massage Clinic.
What type of information do we collect?
The kind of personal data we collect includes identity and contact details, payment details, and information about you from e-mails or other communications with you or gathered in discussion with you.
We also collect special category data, where the law allows us to. This will include, in particular, medical history and health information, racial or ethnic origin and lifestyle information. This special information we collect may be in relation to children.
How do we collect your personal information?
We will collect personal information and relevant health information from you directly when you visit The Physio Suite for treatment. We may also receive information from you from insurance companies, or other medical professionals if you are referred to us for treatment. We may also collect children’s information from their parents / guardians.
How do we use your information?
We use your data for the management of patient and customer records, to communicate with you concerning your care, ensuring the quality of your care and the management and planning of services.
We have a legitimate interest in processing your personal data in order to provide you with the levels of individual assessment, diagnosis and treatment that enable our staff to deliver a responsive, caring, confidential and safe service. We also have a contractual purpose for processing contact details of suppliers and other medical professionals.
We process special category data, and in particular your health information, because processing it is necessary for the purposes of preventative or occupational medicine, for medical diagnosis, the provision of health care or treatment. We do not need your explicit consent if we are providing you with medical care. If we collect special category data for any purpose other than to provide medical treatment, we will gain your explicit consent.
We will not use your contact details for the purpose of marketing to you. Should we do so in the future, we will gain your consent first.
Who might we share your information with?
We will never disclose your information unless there is a legal basis for doing so. We may disclose your personal information to:
- Law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies where we are required or requested to do so by law
- Auditors, accountants and other professional advisers
- Insurance companies and medical professionals with whom you have a relationship
- Where we need to do so in order to exercise or protect our legal rights
- Family members or other individuals that you have instructed to act upon your behalf
- Parents/guardians of patients who are children
- In response to requests from individuals seeking to protect their legal rights or the rights of others
Security of your personal information
We take security of your personal data seriously and we maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable patient and customer information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.
The criteria we use to determine data retention periods include regulatory and legal requirements, good business practise, time periods applicable to assessing and defending claims and/or investigations and dealing with any queries you may have.
We’re based in the UK and we do not transfer any personal data outside the UK.
Your rights
Right to access: you can request a copy of the personal information that we hold about you. This is generally known as ‘Data Subject Access Request’ and we normally have 1 month to respond.
Right to rectification: we take reasonable steps to keep your information accurate and current. However, please remember that it is your responsibility to tell us about any updates to this information.
Right to erasure or to be forgotten: In certain circumstances, you are entitled to ask us to stop using your personal information.
Right to restriction to processing: In certain circumstances, you are entitled to ask us to stop using your personal information, for example where you think that the personal information we hold about you may be inaccurate or where you think that we no longer need to process your personal information.
Right to be informed: We must provide you with fair processing information.
Right to data portability: In certain circumstances, you have the right to ask that we transfer any personal information that you have provided to us to another third party of your choice.
Right to object to processing: Where our processing of your information is performed on the basis of ‘legitimate interest’ or ‘public interest’ then you can request we stop the processing.
Right not to be subject to a decision based solely on automated processing: We do not currently make decisions based solely on automated processing.
How to contact us about the privacy of your information
All comments, complaints and requests relating to our use of your personal information are welcomed and should be addressed to Emma Clark-Eden or Connections Chartered Physiotherapy and Holistic Massage Clinic or to e-mail emma@connectionsphysio.co.uk
You also have the right to complain to the Information Commissioner’s Office, which is the body created to uphold information rights. Go to ico.org.uk/concerns to find out more.
We may change this Privacy Notice from time to time. This Privacy Notice was last updated August 2020.