PRIVACY NOTICE – SOUTH BUCKS PHYSIOTHERAPISTS
South Bucks Physiotherapists (SBP) are aware of their obligations under the GDPR and are committed to processing your data securely and transparently. You give us consent to use your data as required by us, as professionals, by signing the consent form on your patient record.
Collecting Your Data
We need to collect personal information from you in order to provide the best possible and safest treatment. This then constitutes a contractual obligation. If you choose to refuse to provide the relevant information to us, we may not be able to treat you.
We have a legitimate interest in collecting this information from you. Without it, we could not do our job safely and effectively. It is in your vital interest to do so.
It is in your legitimate interest that we may contact you via email or phone to confirm your appointments or to update you on matters related to your care.
Storing Your Data
We have a legal, professional obligation to retain your records for 8 years after your most recent treatment (or age 25 if this longer).
Your medical records are stored on paper in locked filing cabinets.
Your identity / contact / financial data is stored on our computers which are password protected and backed up regularly.
Sharing Your Data
Your data is shared within SBP only where it is necessary for staff to undertake their duties in provision of the service to you i.e.
between practitioners in order that they can provide you with treatment.
Administrative staff in order that they can assist the practitioners with invoicing, diaries, communicating with consultants or doctors (involved in your care). They do not have access to your medical data. Any emails, concerning your treatment, sent to doctors are password protected. Other forms of communication may be via post or hand delivered.
Your insurance company – so that they can settle your invoices (if appropriate) or approve more treatment for you.
Solicitors / third parties – your data will only be shared with them if you have given written consent.
We will never sell your data.
You have the right to access the data that we hold on you and you can ask us to correct any factual errors. If you would like us to delete your data from our system, you can do so, so long as the legal minimal time has passed.
We strive to meet the highest standards when collecting and using personal information. If you feel we are mishandling your personal data you have the right to complain.
Please do this via email – email@example.com or write to:
Data Controller (SBP)
Park Hall Clinic
If you feel your data protection rights have been abused or breached in some way by us, you are able to make a complaint to the ICO at http://ico.org.uk/concerns/ by post, phone or email.
Information Commissioner’s Office
Tel: 0303 123113