Osteopathy & Wellness

Chris Bates Wellness Privacy Notice

Data controller – Christopher Bates, 27 Grange Road Egham Surrey TW20 9QP, chrisbateswellness@gmail.com

This privacy notice has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act 2018.

You have certain rights, including how to get a copy of your data, how to get it corrected or deleted, and how to complain.  These rights are set out in more detail below.

• The information we collect about you and why we collect it
•  
• Personal information (such as name, date of birth, address and contact details)
• Appointment attendance records
• Medical and health records
• Treatment notes (including systems review)

For the purposes of providing treatment, all therapists require detailed medical and health related information. We will only collect what we consider is relevant and necessary for our assessment and your treatment. We make notes, including details concerning your medical history, medication, our assessment, your treatment and other relevant issues affecting your health and well-being.

Consent is required by signature to allow for any data to be used for clinical audit and if used, names and contact details are removed.

The legal basis on which we collect and use your personal information

The legal basis for processing your personal data is to meet our contractual obligations obtained from explicit Patient Consent and our legitimate interest to respond to enquiries concerning the services we provide.

How long we keep your personal information

• for a minimum of eight years after their last consultation;
• if the patient is a child, until their 25th birthday

We may share the personal information that you give us with the following organisations (or types of organisation) for the following purposes.

• GP or Specialist referral (e.g. physiotherapist).

Purpose: in the event of a referral we may write to the patient’s physician, however patient consent is gained prior to this and it is recorded.

We do not store or transfer your personal data outside Europe.

We do not make automated decisions using this information.

Data Security

• Personal information in the form of paper records is kept in a locked filing cabinet, drawer or other secured area.

• Personal information in the form of electronic records is kept on firewall protected servers and accessed through password protected systems.
•  

• Your rights over your personal information
•  
• You have a number of rights over your personal information, which are:
• the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
• the right to ask us what personal information about you we are holding and to have access to a copy of your personal information.
• the right to ask us to correct any errors in your personal information.
• the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
• the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
• the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
• the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonly-used, machine-readable format.
• Changes to our Privacy Policy
• We keep our privacy policy under regular review and will update it from time to time to make sure it remains up-to-date and accurate.