PRIVACY POLICY
We are committed to protecting your privacy in accordance with the law. This privacy policy explains what information we collect about users of this website and how we will use it.
This website contains links to other sites. Please be aware that we are not responsible for the privacy practices of other websites. We encourage our users to be aware when they leave our website and to read the privacy policies on other websites. Operators of other websites may collect information from you which may be used in a manner inconsistent with this privacy policy.
Introduction
This statement explains the processing and use of data collected by The Physiotherapy Centre including sensitive data.
The Physiotherapy Centre is committed to protecting and respecting the privacy of its patients, employees and sub-contractors, providers and suppliers and anyone associated to The Physiotherapy Centre.
All Personal, Sensitive and other data you provide to us will be processed by us in accordance with the European Union’s General Data Protection Regulation (GDPR; 679/2016)
The information that we collect
The use of this web site does not require registration details. If you contact us via this web-site, we need to know your name, preferred telephone contact number and e-mail address.
Collection of data
We may process Personal and Sensitive data when you provide it to us via:-
– Telephone contact
– Website contact
– Email contact
– Face to face contact
– Or by any other contact means
This may include:-
1. For patients
a) Personal data
– Name
– Contact details
– Demographic data
– Records of consent
– Payment and purchase details
– Social and family activity/history as relevant
b) Medical information as relevant
– GP details
Any other necessary information
2. For employees
Personal data
– Name
– Contact details
– Demographic data
– Next of Kin contacts and GP contacts
– Health Declaration as relevant
– C.V.
– Previous employment references
– Relevant PAYE information
– Bank details
– Relevant HR & CPD/training records
Any other information necessary to the position held
3. Subcontractors & Suppliers
– Name
– Business Name
– Contact details
– Goods/Services supplied
– Payment/invoice records
– BACS details
Other information relevant to the business/service you are supplying
Lawful basis for processing Personal/Sensitive data
We may process Personal data where all or one of the following applies:-
1. Prior express consent has been given by the supplier of that data prior to the processing. If consent for the processing of personal/sensitive data relevant and necessary by law, to the services provided by The Physiotherapy Centre is refused then that service cannot be supplied by The Physiotherapy Centre to the client.
2. If the processing is necessary to uphold a contract between The Physiotherapy Centre and the data supplier.
3. If the processing required by applicable law for the purpose of providing the services of The Physiotherapy Centre.
4. The processing is necessary to protect the vital interests and the data supplier.
5. Where The Physiotherapy Centre has a valid legitimate interest in the processing of the data for the purpose of managing, operating or promoting The Physiotherapy Centre and that legitimate interest is not over-ridden by the interests, rights or freedoms for the data supplier.
6. For the purpose of Detection & Prevention of Crime including the prevention of fraud.
7. Where processing is necessary for the establishment, exercise or defence of legal rights
Purposes for which The Physiotherapy Centre processes Personal/Sensitive Data
The Physiotherapy Centre may process Personal/Sensitive data for the following purposes with consent or when required by legitimate law.
Provision of services to you relating to services provided at The Physiotherapy Centre, including:
a) Assessment and treatment for MSK conditions, services and associated Healthcare providers
b) Communication on your behalf and with your consent to other Medical or related and relevant Practitioners
c) Communication with you via any means (including via email, telephone, text messages, social media, post or in person) information regarding your association with The Physiotherapy Centre and your treatment, news items and other relevant information.
d) Financial management for individuals and companies and sales information
e) Surveys – engaging with you for the purpose of obtaining your views on the service of The Physiotherapy Centre
f) Security issues including records of your visits
g) Investigations for detecting and preventing breaches of policy, terms and conditions and criminal offences in accordance with applicable law
h) Establishing, exercising and defending legal rights
i) Compliance with our legal and regulatory obligations under applicable law
j) Improving our services and communication portals, identifying and correcting issues to such areas
Disclosure of Personal/Sensitive Data to 3rd Parties
The Physiotherapy Centre may disclose Personal/Sensitive data to other professionals/entities within the same company for legitimate reasons and in accordance with applicable law.
In addition we may disclose your Personal/Sensitive data to:-
1) Legal and regulatory authorities upon request or for the purpose of reporting any actual breach of law or regulation
2) Outside professional advisors (such as General Practitioners, Consultants, other Health Care Professional, Lawyers) subject to binding contractual obligations of confidentiality
3) Third party processors (such as payment service providers, solicitors, insurance companies)
4) Any relevant law enforcement agency or court for the purpose of prevention, investigation, detection or prosecution of criminal offenses or for the establishment, exercise or defence of legal rights
5) Any relevant party in the event that The Physiotherapy Centre business is sold, reorganised or put into dissolution or liquidation – Your data protection rights will still be subject to GDPR 679/2016 law in this event
Data Security
The Physiotherapy Centre implements appropriate technical and organisational security measures to protect your personal and sensitive data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access and other unlawful or unauthorised forms of processing in accordance with applicable law.
It is your responsibility that any data you send on to us by any method is sent securely as you feel is appropriate.
Data Accuracy
The Physiotherapy Centre takes every reasonable step to ensure that Personal/Sensitive data is:
a) Accurate
b) Up to date
c) Relevant
d) Erased when not needed or inaccurate
Data Minimisation
The Physiotherapy Centre takes every reasonable step to limit the volume of Personal data to that which is relevant and legally necessary for the provision of the services provided at The Physiotherapy Centre
Data Retention
The Physiotherapy Centre takes every reasonable step to ensure that Personal/Sensitive data is only retained for a long as is required by applicable law relevant to the services provided at The Physiotherapy Centre.
Medical information and necessary/relevant personal data relating to that information has to, by law, be held for a minimum of 8 years or indefinitely if appropriate.
Legal Rights of the Data Provider
Subject to applicable law you may have a number of rights regarding the processing of relevant Personal/Sensitive data help at The Physiotherapy Centre including:-
a) The right not to provide your Personal or Sensitive data (however please note that we cannot provide you with the full benefit of the services of The Physiotherapy Centre without the data required for such purpose)
b) The right to request access of copies of your relevant Personal/Sensitive data and information regarding the processing and disclosure of the relevant data
c) The right to request rectification of any inaccuracies in your relevant data providing these inaccuracies are proven
d) The right to request, within applicable law and on legitimate grounds
(i) Erasure of your relevant data (please note medical (sensitive)data and all relevant data associated to this has to be held for 8 years)
(ii) Restriction of processing of your relevant data
e) The right to object on legitimate grounds to the processing of relevant personal data by us on your behalf within applicable law
f) The right to have certain relevant data transferred to another processor
g) The right to withdraw consent to process your relevant data (such withdrawal does not affect the lawfulness of any processing performed prior to the date on which we receive notice of withdrawal of consent)
h) The right to lodge complaints within the Data Protection Authority regarding the processing by The Physiotherapy Centre of your relevant Personal/Sensitive data
To exercise one or more of these rights or ask a question about these rights or about the processing by The Physiotherapy Centre of your Personal/Sensitive data. Please contact The Physiotherapy Centre on 01795 435060
– We may require proof of identity before we can give effect to these rights
– Where your request requires The Physiotherapy Centre to instigate your request to establish additional facts, we will investigate promptly within 7 working days before deciding what action to take.
Direct Marketing
We may process your Personal data to contact you with information regarding services that may be of interest to you via email, telephone, direct mail or other communication forms.
All communication will always be in compliance with the law.
You may unsubscribe at any time from any communication, promotional lists but we may continue to contact you to the extent necessary for the purpose of any medical reason
How we may use such information
We use the information that we collect to:
- contact you and provide The Physiotherapy Centre services and support – both via the website and other channels within The Physiotherapy Centre;
- provide interactive services, including email – some of these services are activated by default while for others you may be invited to receive future e-mail communications and for these we will give you the option of opting out of receiving these e-mails when the invitation is first made. For all email based services you will be able to opt out of receiving them;
- Please be aware that we may need to disclose content provided by users to the police or other enforcement or regulatory agencies in order to assist with their investigations and that we will be required to disclose your details to third parties where we are required to do so by court order or by law.
We will not use your details for any other purpose.
We take reasonable precautions to ensure that any personal information which you provide is used only for the purposes set out in this policy. However, the internet is not a completely secure network and we cannot guarantee that such information will not be intercepted by other parties.
We advise against providing detailed personal medical through email.
Cookies
Our website does not use cookies (e.g. for tracking or marketing purposes).
Monitoring pages visited
We monitor visits to our website to administer the website and to track and analyse general trends in user movements. We use this aggregate information to help us to develop our website and our services.
Our records in this regard do not contain any personal information about users.
Notification of changes
If we decide to change our privacy policy, we will post those changes on this page so that our users are always aware of what information we collect and how we use it.
Updating your details
Only when you are in direct personal contact with The Physiotherapy Centre will we ask you to confirm your personal details. We do not save your personal data on this website or its servers. Management of your electronic data is handled securely and separately from this website.
For example, please let us know if you move house, change your name or change your e-mail address or your job role. This enables us to maintain accurate records and so provide effective, relevant services and support and to meet our legal, data management obligations.
How to contact us
We welcome your views about our website and privacy policy. If you would like to contact us with any queries or comments please do so.
You have a right of access to personal data that is held about you. To obtain a copy of such information, please contact us.