Privacy Notice for Patients - Lane Physiotherapy Ltd

Lane Physiotherapy Clinic is the ‘Data Controller’ of the personal data you provide to us. To enable us to keep medical records for legal processing we require personal information from you; name, address, date of birth, email, GP name and insurance company details (if applicable). The Physiotherapist will also keep medical records regarding your condition.

Why we need your data?

We need to know your personal data in order to treat you for physiotherapy/ pilates and to keep accurate medical records on a legal basis or to contact you in reply to website contacts or email requests. We will not collect any personal data from you we do not need to carry out these tasks.   Please inform us if your personal information changes.  We also may receive the data you input via our contact form on our website.

 What we do with your data?

All the personal data we process is processed by our staff in the UK. No third parties have access to your personal data unless you have been referred by them and they will have agreed this with you. With your consent we will only share your information with your GP/ insurance company.  We may contact you by email or text to inform you of your appointment or to offer information regarding the clinics.  This will only be performed with your consent.  We have a Data Protection regime in place to oversee the effective and secure processing of your personal data.    

How long do we keep your data?

We are required under UK law to keep all medical records for eight years or until the age of 25 years if under 18 at the time of attending for your appointment.   Most of the data is now stored securely on our practice management system which is backed up externally.  Any paper notes are securely locked away and protected. 

Who has access to your information?

Lane Physiotherapy work on a need to know basis, so access to your personal details is only if essential.  All staff have access controls within their computer systems and any breaches are taken very seriously.  All data from 2018 is backed up to a cloud system to ensure it is safe in the event of fire/ flood.

What we would also like to do with your data

We would however like to use your name and email address to inform you of our future offers and similar products. This information is not shared with third parties and you can unsubscribe at any time via phone or email.  

What are your rights?

You have the right to request a copy of the information that we hold about you.  If you would like a copy, please email or write to us at your treating clinic’s address.  There is no charge for this information.  If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted (unless the law does not allow this deletion). If you wish to raise a complaint on how we have handled your personal data, you can contact us to have the matter investigated – reception@haverhillphysiotherapyclinic.co.uk

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office. https://ico.org.uk/