One of the biggest changes to UK data privacy law comes into effect on the 25th May 2018 replacing the current data protection laws.
The General Data Protection Regulation (GDPR) is a positive step towards you having more control over how your data is used and how you are contacted. The changes will also help to better protect your personal data.
I want you to be confident that I am treating your personal data responsibly, and that I do everything I can to ensure that the only people who can access that data have a genuine need to do so.
What information is collected.
Personal information about you is collected including your name, address, date of birth, phone numbers, medical history and description of presenting condition. This information is essential to provide your chiropractor with details about your health and specific details about your reason for attending for chiropractic treatment to ensure you receive the best possible treatment.
How will this information be used.
The information will be accessed by your chiropractor.
Personal data is all stored on paper in the form of a record card and stored in a cabinet in the clinic room that is always locked when the chiropractor is not present in the room.
Personal data will not be stored electronically.
No information will be shared unless you have consented to this i.e referral to a GP or consultant.
You will not be contacted for marketing purposes.
You will be contacted via phone in the case of missed appointments or to book or confirm appointments.
How long will my information be held for.
Whilst you are receiving treatment you data will be stored and used and updated at each appointment.
It is a legal obligation to hold your records for a minimum 8 years after the date of your last appointment to comply with GCC guidelines. Record cards will then be destroyed in accordance with GCC guidance.
If you are a child under 16 your personal data will be stored in the same way as an adults. Parental consent will be required. Record cards will again be kept for a minimum of 8 years after your last appointment or until you are aged 25 if this is longer.
Your Rights.
As I process your data, you have certain rights.
Your right to access information – you may request a copy of your data at any time. Such a request needs to be made to the Data Controller, details are below. You will need to provide your name, address and details of the information you require.
Your right to correct and update any information held about you – if you feel any of the information held about you is incorrect please notify me and any necessary corrections will be made immediately.
Your right to erasure – provided the minimum period for retaining your records has elapsed then you can ask us to erase your records.
Your right to complain – Should you wish to complain about how your records are being used or stored please, in the first instance notify the Data Controller. If you are not satisfied with the response given you have the right to complain to the Information Commissioner’s Office. They can be contacted via their website www.ico.org.uk
Data Breaches
Should your personal data be lost, stolen or otherwise breached, where feasibly possible you will be contacted without delay to notify you of the steps being taken to deal with it and the ICO will be notified.
Contacting Morag Pine about this Privacy Policy.
Morag Pine is the Data Controller, registered with the Information Commissioners Office . Registration reference: ZA214727
Contact details are: 77 Harrow Road, Leighton Buzzard. Beds. LU7 4UG
Tel: 07803 804922
Email: morag@mpchiro.co.uk