COVID-19 Fully compliant with all PPE and infection control measures
PRIVACY NOTICE
GENERAL DATA PROTECTION REGULATIONS
1. PURPOSE
This privacy notice explains our approach to the personal information you supply to Greys Physiotherapy in connection with private Physiotherapy services. It also sets out your rights in respect of the processing of your personal information.
2. BACKGROUND
Christine Johnson is a sole trader, trading as Greys Physiotherapy providing Physiotherapy assessment and treatment services in private homes and care home environments. Christine Johnson is the data processor responsible for managing your personal information.
3. CONTACT DETAILS
If you have any questions about this privacy notice or want to exercise your rights, please use the contact facilities listed on this website.
4. PERSONAL INFORMATION COLLECTED
Personal information is collected in order to handle initial enquiries and provide assessment and treatment services. Information is collected in the following ways:
- email via website
- voicemail message
- telephone conversation
- face-to-face conversation
The information you provide is voluntarily given in order to help us meet your needs. The types of information we collect is called ‘special category data’, the condition we collect this under is section (h) of Article 9(2) of the GDPR regulations.
5. USE OF YOUR PERSONAL INFORMATION
We collect, document and process your personal information in order to provide Physiotherapy services and comply with our professional registration requirements. The lawful basis for the processing of your data is ‘Legitimate Interests’. We never give or sell your details to any third party and never share your information for commercial gain.
With your consent we may share information with: your GP, consultant, orthotist, outpatient clinic, carers or others involved in your care. We will act in your bests interests and may share information without your consent if: you have a cognitive deficit or dementia and are unable to give consent; there is an emergency; we have safeguarding concerns about you or anyone else in the household.
6. CHILDREN
For anyone under the age of 18 years, their information is collected, documented and processed in the same way as for an adult.
7. THIRD PARTY SERVICES
We use a third parties to provide website, email and documentation capture services. These third parties are based outside of the European Economic Area. When using these third party services this privacy notice no longer applies. Any dealings with third parties are subject to their own privacy policies. The third parties have notified us that they are GDPR compliant.
8. DATA LIFETIME
We keep your personal information for a minimum of 8 years from the date of your last appointment or your death. For those under the age of 18 years, we keep your personal information until at least your 25th birthday. Once the appropriate time has elapsed, the data is securely shredded, no copies are kept.
9. CONFIDENTIALITY AND SECURITY OF YOUR PERSONAL INFORMATION
We are committed to keeping your personal information secure and will take all reasonable precautions to protect your personal information from loss, misuse or alteration.
10. ACCESS TO YOUR INFORMATION
You have rights regarding the personal information we hold about you. You can request a copy, request amendment if records are inaccurate or incomplete and request erasure of the data. We will comply fully with all requests however erasure takes place within the constraint of professional registration demanding we keep a copy of records for the period stated above. Data can be provided in paper or electronic format. We will cover all reasonable costs to provide this.
If you have a concern about any aspect of our privacy practices, including the way we have handled your personal information, you can report it to the UK Information Commissioner’s Office (ICO). You can find details about how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.