Privacy Notice for Karen Ambrose Chiropractic
This privacy policy notice sets out how Karen Ambrose, McTimoney Chiropractor, uses and protects your personal data.
The Personal Data I Process and What I Do With It
In order to provide chiropractic services, I am required to process the following categories of data, Personal data such as name, address, date of birth, contact details and details of life style, and Special categories of personal data such as health information. I am sometimes required to process receipts, invoices or reports. My lawful basis for processing your data is to meet contractual obligations.
Retaining Your Personal Data
Whilst you are receiving treatment from my clinic I will continue to store and use your personal data. I am required to retain your personal data for a minimum of 8 years after your last appointment, or for 8 years after the age of adulthood for minors, after which time it will be destroyed securely. Your personal data including medical history, will be collected and stored on hard/paper copy and will be updated upon each appointment. This is to ensure any treatment can be both safe and appropriate. If you object to the collection and use of your personal data I may be unable to provide you with my services. I am committed to ensuring that your personal data is secure and will take all appropriate technical and organisational steps to protect confidentiality, integrity, and availability of your data. Your personal records are kept at my home office under strict confidentiality. Invoices, reports and/or receipts may be sent by email, hand or post. If your personal data is shared for example with your doctor, your specific permission will be obtained first, unless there are exceptional circumstances (i.e. life or death situations), where the law requires information to be passed on.
Your Rights
You may request a copy of your data at any time. Please make such a request in writing or by email to the address above. Please provide the following information: your name, address, telephone number, email address and details of the information you require. I will need to verify your identity so I may ask for a copy of your passport, or driving license.
If you believe any of the personal data I hold on you is inaccurate or incomplete, please contact the clinic directly in writing and any necessary corrections to your data will be made promptly.
If you believe I should erase your data please contact Karen Ambrose whose details are shown above. If you wish that I stop storing or using your data, please contact me at the details shown above.
Data Breaches
Should your personal data that I control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, I will contact you without delay. I will give you the contact details of who is dealing with the breach, explain to you the nature of the breach and the steps I am taking to deal with it.
Should You Wish To Complain
If you are dissatisfied with any aspect of the way in which I process your personal data please let me know. You also have the right to complain to the UK's data protection supervisory authority, the Information Commissioners Office (ICO). You can contact the ICO via their website: www.ico.org.uk should you wish to make a complaint about the way I am processing your personal data.