This following document refers to any form of personal data which encompasses information that is not already in the public domain that concerns a living person.
The General Data Protection Regulation (GDPR) is EU wide along with the Privacy and Electronic Communications Regulations (PECR) and overall aim to protect and enhance the rights of EU data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU and its storage within the EEA.
Belvoir osteopathy provides the following information:
Osteopathic treatment is carried out in accordance with the Institute of Osteopathy’s patient charter http://www.iosteopathy.org/osteopathy/the-patient-charter/. The practice may also provide other treatments, about which staff will provide more details on.
Consent
Through agreeing to this privacy notice you are consenting to Belvoir Osteopathy processing your personal data for the purposes outlined. You can withdraw consent at any time by using the postal, email address or telephone number provided at the end of this Privacy Notice.
Personal Data
a) To inform diagnosis and treatment, Belvoir Osteopathy require detailed medical information. We will only collect what is relevant and necessary. When you visit our practice, we will make notes which may include details concerning your medication and any other issues affecting your health. This data is always held securely, is not shared with anyone who is not involved in your management. To be able to process your personal data it is a condition that you give your explicit consent to allow Belvoir osteopathy to document and process your personal medical data. Contact details provided by you such as telephone numbers, email addresses, postal addresses may be used to remind you of future appointments and provide reports or other information concerning your treatment.
b) It may be required for Belvoir osteopathy is share your medical records with other healthcare practitioners as an osteopath’s obligation and a primary healthcare practitioner. Where the sharing of your personal data is required you will be informed beforehand unless Belvoir osteopathy is under any legal obligation to comply.
c) For marketing purposes, Belvoir Osteopathy may also use the contact details provided by you to respond to your enquiries, including making telephone contact and emailing information to you which the practice believes may be of interest to you.
d) In making initial contact with the practice you consent to Osteopaths maintaining a marketing dialogue with you. You can opt out of this contact at any time. You can at any time ask to be removed from the marketing database by phoning the practice using the contact details provided at the end of this Privacy Notice.
e) Belvoir osteopathy website uses cookies, which is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. WordPress.org uses cookies to help Osteopaths to identify and track visitors and their website access preferences. Osteopaths’ website visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using Osteopaths’ website.
f) Osteopaths will only collect the information needed so that we can provide you with the services you require, the business does not sell your data.
Legitimate interests pursued by Osteopaths
To promote treatments for patients with all types of health problems indicated for osteopathic care.
Disclosure
Osteopaths will keep your personal information safe and secure and only the staff engaged in providing your treatment will have access to your patient records. Administration teams will have access to your contact details to allow them to make appointments with you. Belvoir Osteopathy will not disclose your Personal Information and only under the circumstances that legal obligations or requirements are made.
Retention of data Policy
Belvoir Osteopathy will process personal data during the duration of your treatment and will continue to store personal data for eight years after the contract has expired to meet the legal obligations. After eight years all personal data will be deleted, unless basic information needs to be retained by us to meet our future obligations to you. Records concerning minors who have received treatment will be retained until the child has reached the age of 25.
Data storage
All Data is obtained in the United Kingdom. Belvoir Osteopathy does not store personal data outside the EEA.
Your rights to your data
At any point whilst Belvoir Osteopathy are in possession of your data, you have the following rights:
• Right of access – you have the right to request a copy of the information on your case and treatment
• Right of rectification – you have a right to correct your data that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply you have a right to restrict the processing of your data.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing including marketing.
• Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.
In the circumstances that Belvoir Osteopathy refuses your request under rights of access, reason will be provided which you have the right to legally challenge. At your request Belvoir Osteopathy can confirm what information is contained and how it is processed.
You can request the following information:
• Identity and the contact details of the organisation that has determined the reasons to process your data.
• Contact details of the data protection officer
• The purpose and the legal basis for processing
• If the processing is based interests of Osteopaths and information about these interests.
• Recipient(s) or categories of recipients that the data is/will be disclosed to.
• How long the data will be stored.
• Details of your rights to object to the processing of the data
• Information about your right to withdraw consent at any time.
• How to make an complaint with the supervisory authority (ICO).
• Whether the provision of personal data is a statutory or contractual requirement and if you are obliged to provide the personal data and the possible consequences of failing to provide the data.
• The source of personal data if it wasn’t collected directly from you.
• Any details and information of automated decision making and expected consequences of the processing.
To access what personal data is held, identification will be required
Osteopaths will accept the following forms of identification (ID) when information on your personal data is requested:
· driving licence
· passport
· birth certificate
· utility bill (recent 3 months)
A minimum of one piece of photographic ID listed above and a supporting document is required. If Belvoir Osteopathy is dissatisfied with the quality, further information may be sought before personal data can be released. All requests should be made to 07947154717
Complaints Procedure
In the event that you wish to make a complaint about how your personal data is being processed by Belvoir Osteopathy you have the right to complain to us following the complaints procedure in place. To contact us:
Joanna Foxall
07947154717
If you do not get a response within 30 days, you can complete a complaint to the ICO. Contact details:
Wycliffe House, Water Lane, Wilmslow, SK9 5AF Telephone +44 (0) 303 123 1113 or email: https://ico.org.uk/global/contact-us/email/