This privacy notice explains why I collect your personal data, what I do with it and your rights regarding use of your data. The terms highlighted in bold relate to terms used in the Data Protection Act 2018 which incorporates the General Data Protection Regulation.
When you supply your personal details to me they are used for 3 reasons:
1) I need to collect personal information in order to provide you with treatment. Your requesting treatment and our agreement to provide that care constitute a contract. I am legally not able to provide treatment without collecting information.
2) I have a ‘Legitimate Interest’ in collecting that information because without it I would not be able to provide treatment effectively and safely.
3) It is important to be able to contact you to confirm appointments with you and to communicate matters relating to your medical care. This again constitutes ‘Legitimate Interest’ but this time it is your legitimate interest.
Consent to be contacted
Do you agree to be called by me the next day of your first treatment to check how you are and whether you have questions?
Do you agree to be called by me every 6 months to check how you are, provided that you may withdraw this consent at any time?
Do you agree I occasionally send you general health information in the form of articles, advice or a newsletter provided you may withdraw this consent at any time?
Storing Your Data and keeping it safe
I have a legal obligation to retain your records for a minimum of 7 years after your most recent appointment (or until age 25 if this is longer). After this period I will destroy them.
Your treatment file is held on paper and stored in a locked cabinet. When I take it to and from the clinic it remains in my personal possession at all times until it is returned to the locked cabinet.
Your contact details (name, email address and phone number) may be held on my phone and computer, which are all password protected.
Sharing your data
Your first name is shared with the reception staff the day you come for treatment so they know you are expected.
I will not share your data with anyone else without your written consent.
You have the right to see what personal data of yours I hold and you can also ask me to correct any factual errors. I must, however, keep your records for the minimum legal period mentioned above.
I want you to be absolutely confident that I am treating your data responsibly, and that it is only seen by people who have a need to do so, or to whom you have given explicit written consent.
If you feel I am mishandling your data then you have the right to complain. Complaints need to be sent to what is referred to as the ‘Data Controller’ – that’s me. Here are the details you need:
If you are not satisfied with my response then you have the right to raise the matter with the Information Commissioners Office.