Under data protection law you, as a patient of Weybridge & Walton Physiotherapy, have specific rights. To communicate these rights to you in a clear and concise manner, we are providing you with this privacy notice.
Weybridge & Walton Physiotherapy is the trading name of TwoTenOFour Investments Limited, the data controller of all the personal and other information provided to us by our patients and other 3rd parties. Our contact details are:
Weybridge & Walton Physiotherapy
10 Church Street
Weybridge
KT13 8DX
01932 847 900
gdpr@weybridgephysio.co.uk
We record and use the following categories of personal data which may include: name, address, date of birth, telephone numbers, email address and the information you provide us as part of your course of treatment. This may also include information that is provided to us from other healthcare providers involved in your treatment episode. For patients using medical insurance we record insurance policy details and other information required to process the claim on your behalf.
This information is kept and processed within our Practice management application for the purpose of administering your Patient account and maintaining a accurate clinical records. Where approriate, the personal data is used for the purpose of creating electonic exercise programmes.
This information may also be used for contacting you with the purpose of gathering quality of service feedback (for example requesting reviews, surveys etc) with the aim of service enhancement. We may also use this information to provide special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
The service providers we use for these purposes are:
Where third parties are used by us to store your personal data, we ensure they are compliant with the data protection law and any such data is not stored outside of the EU.
Beyond the purposes detailed above, we only share your personal data with your explicit consent, where, for example we need to contact a third party and give them your contact details and other medical information as an essential part of your treatment programme.
Whilst you are patient of us we will continue to store and use your personal data. We are required by law to retrain your treatment records for a period of 8 years after your most recent appointment with us. For children under the age of 17, we are required to retrain the treatment records for 20 years. Once these time periods have lapsed, medical records are destroyed. Limited information will be retained within our accounts systems indefinitely to maintain the integrity of the data.
As we process your personal data, you have certain rights. These are a right of access, a right of rectification, a right of erasure and a right to restrict processing.
Should your personal data that we control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. We will give you the contact details of the person who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.
You can contact the ICO via their website: http://www.ico.org.uk should you wish to make a complaint about the way we are processing your personal data.
We do not use any system which uses automated decision making or profiling in respect of your personal data.