Feel free to contact us with any questions or feedback. We'll get back to you as soon as we can.
(Your email address will never be sold or passed on to any third party.)


Privacy Notice

What is a Privacy Notice?

Under data protection law you, as a patient of Weybridge & Walton Physiotherapy, have specific rights. To communicate these rights to you in a clear and concise manner, we are providing you with this privacy notice.

Who are we?

Weybridge & Walton Physiotherapy is the trading name of TwoTenOFour Investments Limited, the data controller of all the personal and other information provided to us by our patients and other 3rd parties. Our contact details are:

Weybridge & Walton Physiotherapy
10 Church Street
Weybridge
KT13 8DX
01932 847 900
gdpr@weybridgephysio.co.uk

The Personal Data We Process and What We Do with It

We record and use the following categories of personal data which may include: name, address, date of birth, telephone numbers, email address and the information you provide us as part of your course of treatment. This may also include information that is provided to us from other healthcare providers involved in your treatment episode. For patients using medical insurance we record insurance policy details and other information required to process the claim on your behalf.

This information is kept and processed within our Practice management application for the purpose of administering your Patient account and maintaining a accurate clinical records. Where approriate, the personal data is used for the purpose of creating electonic exercise programmes. 

This information may also be used for contacting you with the purpose of gathering quality of service feedback (for example requesting reviews, surveys etc) with the aim of service enhancement. We may also use this information to provide special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information. 

The service providers we use for these purposes are:

  • Blue Zinc 
  • Physiotec 
  • Birdeye

Where third parties are used by us to store your personal data, we ensure they are compliant with the data protection law and any such data is not stored outside of the EU.

Sharing Your Personal Data

Beyond the purposes detailed above, we only share your personal data with your explicit consent, where, for example we need to contact a third party and give them your contact details and other medical information as an essential part of your treatment programme. 

Retaining Your Personal Data

Whilst you are patient of us we will continue to store and use your personal data. We are required by law to retrain your treatment records for a period of 8 years after your most recent appointment with us. For children under the age of 17, we are required to retrain the treatment records for 20 years. Once these time periods have lapsed, medical records are destroyed. Limited information will be retained within our accounts systems indefinitely to maintain the integrity of the data.

Your Rights

As we process your personal data, you have certain rights. These are a right of access, a right of rectification, a right of erasure and a right to restrict processing.

  • You may request a copy of your data at any time. Please make such a request in writing or by email to us, at the address shown above. Please provide the following information: your name, address, telephone number, email address and details of the information you require.
  • If you believe any of the personal data we hold on you is inaccurate or incomplete, please contact us directly and any necessary corrections to your data will be made without undue delay.
  • If you believe we should erase your data, please contact us, at the address shown above.
  • If you wish us to stop storing or using your data, please contact as, at the address shown above.
  • Where you have provided explicit consent for us to use your data you have a right to withdraw this consent at any time.

Data Breaches

Should your personal data that we control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. We will give you the contact details of the person who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.

Should You Wish to Complain

You can contact the ICO via their website: http://www.ico.org.uk should you wish to make a complaint about the way we are processing your personal data.

Automated Decision Making and Profiling

We do not use any system which uses automated decision making or profiling in respect of your personal data. 
 


Chartered Society of Physiotherapy logo Health and Care Professions Council logo

bupa logo axa ppp healthcare logo aviva logo cigna logo cigna logo aviva logo aviva logo
Follow WWPhysiotherapy on Twitter