To treat you, we require relevant, detailed medical information. This information may include your and your family’s medical histories, other issues affecting your health, referral correspondence and a case history of your treatment at the Practice. It is a requirement for your treatment that you allow us to do this. Your medical information is only shared with those involved in your treatment.
We may also use your contact details to respond to your enquiries and email you general health information in the form of articles, advice, offers or updates to promote Osteopathy and the Practice. We may occasionally promote other practitioners and services based at the Practice (who we may not employ and are responsible for their own privacy obligations) but we will not sell or broker your data. In contacting the Practice, you consent to us having this dialogue with you, but we will also ask for your consent when you first attend for treatment and you can withdraw that consent at any time and ask us to remove you from our marketing database.
Basis for Processing Your Data
We have a legal basis to process your data to provide you with treatment (the contract between us) and because you have given us your consent. We also have a legitimate interest to process your data to provide this service and to promote treatments for all types of health problems including back pain and neck pain, tennis elbow, frozen shoulder, sciatica, headaches, sports injuries and other degenerative conditions.
By agreeing to this Privacy Notice, you are consenting to us processing your personal data for the reasons given above. You can withdraw your consent to us using that data for marketing purposes at any time.
We will only disclose your personal information if compelled to do so to meet legal obligations or regulatory requirements. We may also do so if we need to detect or prevent harm to the rights, property or safety of patients or staff. We will not pass your personal information to a third party except another healthcare professional (eg if you are referred elsewhere or attend another practice) or to your insurance company or legal representative. We would only do this with your consent.
We will process your data during your treatment and have a legal obligation to store your information for at least eight years after the date of your last appointment or until the age of 25, if you are under the age of 16 at the time of treatment. After this time and when we no longer require your information, it will be securely destroyed.
Your medical information is kept on paper and stored securely at the Practice. We do not store computerised data on servers outside of the UK or other EEA countries, except where Privacy Shield agreements are in place.
You have the right to:
Access (you can ask us for the information we have)
Correction (you can ask us to correct any inaccuracies or incomplete data)
Be Forgotten (in certain circumstances, we can will erase certain information regarding you)
Restrict Processing (where certain conditions apply)
Portability (you can ask us to transfer the data to someone else)
Object (you can opt out of certain types of processing eg marketing, automated processing or profiling)
What Information You Can Request
You can request the following information
Who at the Practice is responsible for your data
Why we process the information and the basis for doing so
What information we have collected, stored and processed
Who the information has come from (if not you)
Who we have disclosed that information to
How long we have stored the information for
Your rights as above
How you can withdraw your consent
How to complain
To access your information, we will require you to complete an Access Request Form and provide identification (details on the Access Request Form). Further information may be required before data can be released. We will process your request within 30 calendar days.
If you wish to complain about how we process and handle your data, you have the right to do so. If you are not satisfied with our response, you can complain to the ICO. Details for each of these contacts are:
Flitwick Osteopathic Clinic
Room 16, The Rufus Centre
Tel: 01525 712204
ICO Registration Number: ZA335537
Information Commissioner's Office
Tel: 0303 123 1113
email via https://ico.org.uk/concerns/