PRIVACY NOTICE FOR PATIENTS
This Privacy Notice sets out the basis on which Personal Data collected from you, or that you provide to us, will be processed by us.
1. DATA CONTROLLER
Crushes Manor Clinic Limited is the Data Controller.
Crushes Manor Clinic Limited is a company registered in England and Wales with its place of business at 501 Ongar Road, Brentwood Essex CM15 9JP.
2. YOUR PERSONAL DATA
2.1 To enable us to keep medical records for legal processing we require the following Personal Data from you;
- your name;
- your date of birth
- your contact telephone numbers;
- your geographical address;
- your email address,
- third party/health insurance company information (if applicable).
2.2 If you have provided us with third party/health insurance company reference numbers you consent to Crushes Manor Clinic Limited, processing or delivering invoices, or notifying you of the status of your invoices.
2.3 Your physiotherapist will also keep medical records regarding your condition.
3. WHY WE NEED YOUR PERSONAL DATA
3.1 We need to hold your Personal Data in order to;
- provide the services for which you are attending the clinic;
- to keep accurate medical records on a legal basis;
- to contact you in reply to phone calls or emails from you or to inform you of scheduled appointments or to make changes to scheduled appointments;
- to ensure remuneration is received for services provided.
We will not collect any personal data from you that we do not need to carry out these tasks.
Please inform us if your personal information changes.
4. HOW WE WILL USE YOUR PERSONAL DATA
4.1 Your Personal Data shall be kept confidential by us.
4..2 Your Personal Data will be processed by our staff in the UK.
4.3 We will use your Personal Data for the legitimate purposes of;
- providing the services for which you are attending the clinic
- contacting your GP, Consultant, Health Insurance Company or other Medical Service Provider to assist us in delivering the services we are providing to you;
- alerting you to any product and service changes and updated information;
- collecting remuneration for services we have provided to you or to invoice your health insurance company for the services we have provided to you.
4.4 You have the right to not have your Personal Data used for alerting purposes. If this is the case, please let us know either by telephone, in person or by email email@example.com.
4.5 We shall not pass your Personal Data to any third party for marketing or any other purposes.
5. RETENTION OF YOUR PERSONAL DATA
5.1 Crushes Manor Clinic Limited will comply in all regards with our obligations under the GDPR (General Data Protection Regulations) including taking all appropriate measures to ensure that your Personal Data is kept secure.
5.2 Your Personal Data with be kept and used as is necessary for the purposes set out in this Privacy Notice.
5.3 Your Personal Data will be stored securely on our practice computer system which is backed up externally. All paper notes are securely locked away when not in use.
5.4 Your Personal Data will be retained for a period of 7 years from the date of your last attendance at Crushes Manor Clinic Limited or until the age of 25 as recommended by our governing body The CSP (Chartered Society of Physiotherapy).
5.4 If your Personal Data changes, you should notify Crushes Manor Clinic Limited as soon as possible either in writing to Crushes Manor Clinic Limited, 501 Ongar Road, Brentwood Essex CM15 9JP, or by emailing us at firstname.lastname@example.org. We will update your Personal Data within 7 working days of any new or updated personal data being provided to us, to ensure that the personal data we hold about you is as accurate and up to date as possible.
6 ACCESS TO YOU PERSONAL DATA
Crushes Manor Clinic physiotherapy and admin staff have access to your Personal Data and to clinic computer systems via secure passwords.
Access to your Personal Data will only be if it is necessary in order to provide the services for which you are attending.
Crushes Manor Clinic take any breaches very seriously.
7. YOUR RIGHTS
7.1 You have the right to request a copy of any Personal Data that we hold about you and to have any inaccuracies in your personal data corrected. If you wish to contact us for these purposes, please email us at email@example.com. In some instances the request to obtain information may be denied, in these instances you will be advised
7.2 You have the right withdraw consent from us processing Personal Data at any time. If you do withdraw consent however, Crushes Manor Clinic Limited’s ability to continue the service you are attending for may be impaired
7.3 The material over which a physiotherapist has copyright might be subject to conditions that prevent or restrict further copying or publication without the physiotherapist’ permission; in these instances, you will be advised.
7.4 If you wish to raise a complaint on how we have handled your Personal Data, you can contact us to have the matter investigated please email us at firstname.lastname@example.org.
8. DISCLOSURE OF YOUR INFORMATION
8.1 We may disclose your Personal Data information to your GP, Consultant, Health Insurance Company or other Medical Service Provider for the purpose of requesting further tests; x-rays, scans etc, in order to assist us in delivering the services which we have agreed to provide to you. You will be informed and your consent sought prior to any information disclosures being made.
8.2 We may disclose your Personal Data information and/or your billing information to your Health Insurance Company to enable us to collect remuneration for services we have provided to you.
8.3 We may need to disclose your Personal Data information if a situation arises where medical attention is required for you by an emergency service.
8.4 If remuneration is not made for services provided to you within a reasonable timescale, we reserve the right to take legal action against you or you Health Insurance Company. If this action becomes necessary, we may use your Personal Data to file a claim with www.moneyclaim.gov.uk. You will be advised should such action become necessary.
8.5 We will not disclose your Personal Data to any other person, persons or company.
9. CONTACT US
Please direct any queries about this Privacy Notice to Crushes Manor Clinic Limited, 501 Ongar Road, Brentwood Essex CM15 9JP.