Privacy Policy
At Hands On Physiotherapy we take your data protection very seriously. We are outlining here how we use your personal data. The Head Data Controller is Andrea Wright, Physiotherapy Director and all staff are data controllers and have been trained in the new (May 2018) General Data Protection Regulation (GDPR) principles.
Your personal data will be collected for specified and legitimate purposes for your physiotherapy assessment and treatment only. It will not be further processed in a manner that is incompatible with those purposes.
Your personal data will be adequate, relevant and limited to what is necessary in relation to physiotherapy treatment. It will be accurate and kept up to date by our members of staff. Any inaccurate information will be erased or rectified without delay.
We will keep your records securely in a locked filing cabinet for 8 years after the conclusion of treatment (adults). A child’s notes will be kept for 25 years or with respect to a 17 year old patient, after completion of treatment, it will be on their 26th birthday. Your personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage. This is achieved by using high level security on our PC (anti-virus / firewall security, PC lock screen and password security) and organisational measures such as a lockable filing cabinet for physiotherapy notes, security of our building with an alarm and roller shutter.
We never share your data with any organisation without your permission. We use computer systems such as a computer diary (PPS) and an exercise data base (Rehab My Patient.com) who have sent us contracts to comply with protecting your data, when it is used to book an appointment, send an appointment reminder and send an exercise programme. We will send you an appointment reminder if you wish and we will write to your GP or Consultant with your verbal consent only. You have access to your personal data if you make a written request. We also input your surname and date of birth into a Data for Impact Project at The University of Brighton. The data is anonymised to assess outcomes of treatments and patient trends.