BLUE TIGER PHYSIOTHERAPY LTD
DATA PRIVACY NOTICE
At Blue Tiger Physiotherapy Ltd we respect your privacy and are committed to protecting your personal information. Any information we ask you to provide by which you can be identified when using this website or our services will only be used in accordance with this privacy statement.
Blue Tiger Physiotherapy Ltd is the data controller and we are responsible for your personal data (referred to as ‘we’, ‘us’ and ‘our’ in this privacy notice).
What information do we collect about you?
Personal data is information capable of identifying an individual. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2018 (the “GDPR”).
This privacy policy sets out how we use and protect any personal information collected from you by Blue Tiger Physiotherapy Clinic either in person, by letter, e-mail or over the telephone. It also relates to information about you that is shared with us from third parties, for example, other healthcare providers or an insurance company.
What is the legal basis for processing your personal data?
Our lawful basis for processing your special categories of personal data is a legal or contractual obligation to do so as we have to fulfil documentation criteria to meet professional standards. We ensure that processing is adequate, relevant and limited to what is necessary to provide a physiotherapy service to you.
How do we gather information about you?
We collect and process information when you telephone the clinic to make an enquiry or appointment, when you email us, when we receive a referral about you, or if you visit the clinic in person. This may include Sensitive data such as health data.
At the point of enquiry or booking we will ask you for the following personal data:
· Name
· Date of birth
· Gender
· Address
· Telephone number, either landline, mobile or both
· E-mail address
At your appointment at the clinic we may ask for information regarding:
· General health
· Previous health
· Information regarding the condition you are seeking advice about
· Activities you undertake
· Employment
· Medication you take
We will also record findings of a physical examination and continue to keep a record of your treatment each time you attend the clinic.
We will also record transaction data which may include details about payments made between us.
How do we process your personal data?
We write and store paper notes and electronic data and we use information as follows:
· To provide a legal record of any treatment or advice we provide
· To ensure continuity of care
· For accounts purposes
· To contact you about your ongoing treatment including sending exercises by e-mail
· To contact you if new information or treatments become available that may be of interest to you.
· With your permission, to liaise with other medical professionals who may be involved in your care; this may include GPs, consultants, occupational health departments, class instructors or other health care professionals.
· For quality feedback and audit purposes
We do not pass on your personal data for commercial purposes.
We take all reasonable steps to ensure that our information is kept up to date and rectified if necessary. It is your responsibility to inform us if any personal information changes, in order that our records are accurate.
How long do we keep your personal data?
We keep your personal data for no longer than is reasonably necessary. We have a legal obligation to retain records for 8 years after the conclusion on treatment. If the record relates to a child or young person, the records must be kept until the patient’s 25th birthday or 8 years after death.
We may retain electronic records indefinitely for use if you return for another episode of care within 8 years and for analytical purposes.
How do we protect your personal data?
We are committed to ensuring that the data you provide to us is held in a secure manner. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect from you.
Our website may contain links to other websites not owned our managed by ourselves and we cannot be held responsible for the privacy of information collected by such websites. We encourage you to check their privacy policy prior to submitting any personal information. We may change our privacy policy from time to time. Please check back periodically to stay up-to-date.
Sharing your personal data
We may pass information, with your permission, to other medical professionals or insurance companies who are involved in your care; this may include GPs, consultants, occupational health departments or other health and care professionals.
This information may be passed on in the form of a written letter which is given to you – if this is the case, the letter becomes your responsibility and the protection of its contents is your responsibility. If the information is passed electronically by email, it will be password protected and we will take all reasonable precautions to transmit the information securely.
We require all third parties to whom we transfer your data to respect the security of your personal data and treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.
Providing us with your personal information
You are under no statutory or contractual requirement or obligation to provide us with your personal data but failure to do so may mean we are unable to offer services at our clinic.
Accessing and updating personal information
You may choose to restrict the collection or use of your personal information in the following ways:
· You have the right to request a copy of the personal data we hold about you. In accordance with GDPR regulations we will provide this free of charge within 30 days of receiving your request.
· You have the right to request that we correct any personal data if it is found to be inaccurate or out of date.
· You have the right to erase the personal data we hold about you, although please note UK Law will require us to hold medical information for a certain period of time.
· You have the right to request that we transfer your data directly to another data controller (known as the right to data portability)
· You have the right to restrict how your data is being shared with other organisations and you can withdraw your consent to data sharing at any time.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
· You have the right to lodge a complaint with the Information Commissioners Office if you are not satisfied with the way your data has been managed. You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
Contact details
To exercise all relevant rights, queries or complaints please contact us at Blue Tiger Physiotherapy Ltd, Poppleton Junior Football Club, Millfield Lane, Nether Poppleton, York, YO26 6NY. You can also email us at bluetigerphysiotherapyclinic@gmail.com
It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information is incorrect or changes by emailing us at bluetigerphysiotherapyclinic@gmail.com so that we can rectify this promptly.
DATA PRIVACY NOTICE
At Blue Tiger Physiotherapy Ltd we respect your privacy and are committed to protecting your personal information. Any information we ask you to provide by which you can be identified when using this website or our services will only be used in accordance with this privacy statement.
Blue Tiger Physiotherapy Ltd is the data controller and we are responsible for your personal data (referred to as ‘we’, ‘us’ and ‘our’ in this privacy notice).
What information do we collect about you?
Personal data is information capable of identifying an individual. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2018 (the “GDPR”).
This privacy policy sets out how we use and protect any personal information collected from you by Blue Tiger Physiotherapy Clinic either in person, by letter, e-mail or over the telephone. It also relates to information about you that is shared with us from third parties, for example, other healthcare providers or an insurance company.
What is the legal basis for processing your personal data?
Our lawful basis for processing your special categories of personal data is a legal or contractual obligation to do so as we have to fulfil documentation criteria to meet professional standards. We ensure that processing is adequate, relevant and limited to what is necessary to provide a physiotherapy service to you.
How do we gather information about you?
We collect and process information when you telephone the clinic to make an enquiry or appointment, when you email us, when we receive a referral about you, or if you visit the clinic in person. This may include Sensitive data such as health data.
At the point of enquiry or booking we will ask you for the following personal data:
· Name
· Date of birth
· Gender
· Address
· Telephone number, either landline, mobile or both
· E-mail address
At your appointment at the clinic we may ask for information regarding:
· General health
· Previous health
· Information regarding the condition you are seeking advice about
· Activities you undertake
· Employment
· Medication you take
We will also record findings of a physical examination and continue to keep a record of your treatment each time you attend the clinic.
We will also record transaction data which may include details about payments made between us.
How do we process your personal data?
We write and store paper notes and electronic data and we use information as follows:
· To provide a legal record of any treatment or advice we provide
· To ensure continuity of care
· For accounts purposes
· To contact you about your ongoing treatment including sending exercises by e-mail
· To contact you if new information or treatments become available that may be of interest to you.
· With your permission, to liaise with other medical professionals who may be involved in your care; this may include GPs, consultants, occupational health departments, class instructors or other health care professionals.
· For quality feedback and audit purposes
We do not pass on your personal data for commercial purposes.
We take all reasonable steps to ensure that our information is kept up to date and rectified if necessary. It is your responsibility to inform us if any personal information changes, in order that our records are accurate.
How long do we keep your personal data?
We keep your personal data for no longer than is reasonably necessary. We have a legal obligation to retain records for 8 years after the conclusion on treatment. If the record relates to a child or young person, the records must be kept until the patient’s 25th birthday or 8 years after death.
We may retain electronic records indefinitely for use if you return for another episode of care within 8 years and for analytical purposes.
How do we protect your personal data?
We are committed to ensuring that the data you provide to us is held in a secure manner. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect from you.
Our website may contain links to other websites not owned our managed by ourselves and we cannot be held responsible for the privacy of information collected by such websites. We encourage you to check their privacy policy prior to submitting any personal information. We may change our privacy policy from time to time. Please check back periodically to stay up-to-date.
Sharing your personal data
We may pass information, with your permission, to other medical professionals or insurance companies who are involved in your care; this may include GPs, consultants, occupational health departments or other health and care professionals.
This information may be passed on in the form of a written letter which is given to you – if this is the case, the letter becomes your responsibility and the protection of its contents is your responsibility. If the information is passed electronically by email, it will be password protected and we will take all reasonable precautions to transmit the information securely.
We require all third parties to whom we transfer your data to respect the security of your personal data and treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.
Providing us with your personal information
You are under no statutory or contractual requirement or obligation to provide us with your personal data but failure to do so may mean we are unable to offer services at our clinic.
Accessing and updating personal information
You may choose to restrict the collection or use of your personal information in the following ways:
· You have the right to request a copy of the personal data we hold about you. In accordance with GDPR regulations we will provide this free of charge within 30 days of receiving your request.
· You have the right to request that we correct any personal data if it is found to be inaccurate or out of date.
· You have the right to erase the personal data we hold about you, although please note UK Law will require us to hold medical information for a certain period of time.
· You have the right to request that we transfer your data directly to another data controller (known as the right to data portability)
· You have the right to restrict how your data is being shared with other organisations and you can withdraw your consent to data sharing at any time.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
· You have the right to lodge a complaint with the Information Commissioners Office if you are not satisfied with the way your data has been managed. You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
Contact details
To exercise all relevant rights, queries or complaints please contact us at Blue Tiger Physiotherapy Ltd, Poppleton Junior Football Club, Millfield Lane, Nether Poppleton, York, YO26 6NY. You can also email us at bluetigerphysiotherapyclinic@gmail.com
It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information is incorrect or changes by emailing us at bluetigerphysiotherapyclinic@gmail.com so that we can rectify this promptly.