Privacy Notice

What is a Privacy Notice?

Under data protection law you, as a patient of Weybridge & Walton Physiotherapy, have specific rights. To communicate these rights to you in a clear and concise manner, we are providing you with this privacy notice.

Who are we?

Weybridge & Walton Physiotherapy is the trading name of TwoTenOFour Investments Limited, the data controller of all the personal and other information provided to us by our patients and other 3rd parties. Our contact details are:

Weybridge & Walton Physiotherapy
10 Church Street
Weybridge
KT13 8DX
01932 847 900
gdpr@weybridgephysio.co.uk

The Personal Data We Process and What We Do with It

We record and use the following categories of personal data which may include: name, address, telephone numbers, email address and the information you provide us as part of your course of treatment. This may also include information that is provided to us from other healthcare providers involved in your treatment episode. For patients using medical insurance we record insurance policy details and other information required to process the claim on your behalf.

Sharing Your Personal Data

We only share your personal data with your explicit consent, where, for example we need to contact a third party and give them your contact details and other medical information as an essential part of your treatment programme. Where third parties are used by us to store your personal data, we ensure they are compliant with the data protection law and any such data is not stored outside of the EU.

Retaining Your Personal Data

Whilst you are patient of us we will continue to store and use your personal data. We are required by law to retrain your treatment records for a period of 8 years after your most recent appointment with us. For children under the age of 17, we are required to retrain the treatment records for 20 years. Once these time periods have lapsed, medical records are destroyed. Limited information will be retained within our accounts systems indefinitely to maintain the integrity of the data.

Your Rights

As we process your personal data, you have certain rights. These are a right of access, a right of rectification, a right of erasure and a right to restrict processing.

You may request a copy of your data at any time. Please make such a request in writing or by email to us, at the address shown above. Please provide the following information: your name, address, telephone number, email address and details of the information you require.
If you believe any of the personal data we hold on you is inaccurate or incomplete, please contact us directly and any necessary corrections to your data will be made without undue delay.
If you believe we should erase your data, please contact us, at the address shown above.
If you wish us to stop storing or using your data, please contact as, at the address shown above.
Where you have provided explicit consent for us to use your data you have a right to withdraw this consent at any time.

Data Breaches

Should your personal data that we control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. We will give you the contact details of the person who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.

Should You Wish to Complain

You can contact the ICO via their website: http://www.ico.org.uk should you wish to make a complaint about the way we are processing your personal data.