Under data protection law you, as a patient of Weybridge & Walton Physiotherapy, have specific rights. To communicate these rights to you in a clear and concise manner, we are providing you with this privacy notice.
Weybridge & Walton Physiotherapy is the trading name of TwoTenOFour Investments Limited, the data controller of all the personal and other information provided to us by our patients and other 3rd parties. Our contact details are:
Weybridge & Walton Physiotherapy
10 Church Street
Weybridge
KT13 8DX
01932 847 900
gdpr@weybridgephysio.co.uk
We record and use the following categories of personal data which may include: name, address, telephone numbers, email address and the information you provide us as part of your course of treatment. This may also include information that is provided to us from other healthcare providers involved in your treatment episode. For patients using medical insurance we record insurance policy details and other information required to process the claim on your behalf.
We only share your personal data with your explicit consent, where, for example we need to contact a third party and give them your contact details and other medical information as an essential part of your treatment programme. Where third parties are used by us to store your personal data, we ensure they are compliant with the data protection law and any such data is not stored outside of the EU.
Whilst you are patient of us we will continue to store and use your personal data. We are required by law to retrain your treatment records for a period of 8 years after your most recent appointment with us. For children under the age of 17, we are required to retrain the treatment records for 20 years. Once these time periods have lapsed, medical records are destroyed. Limited information will be retained within our accounts systems indefinitely to maintain the integrity of the data.
As we process your personal data, you have certain rights. These are a right of access, a right of rectification, a right of erasure and a right to restrict processing.
Should your personal data that we control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. We will give you the contact details of the person who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.
You can contact the ICO via their website: http://www.ico.org.uk should you wish to make a complaint about the way we are processing your personal data.
We do not use any system which uses automated decision making or profiling in respect of your personal data.