Lathom Physiotherapy Centre Ltd is committed to protecting your personal information, this Privacy Policy relates to how we use your personal information collected from yourself and other professionals involved in your care. If you have any questions or concerns relating to this Privacy Policy please contact the Practice Manager at:
Lathom Physiotherapy Centre Ltd
Beechcroft
Plough Lane
Lathom
Ormskirk
Lancashire
L40 6JL
Telephone: 01695 729019
Email: Lathomphysio@gmail.com
Website: www.lathomphysiotherapy.co.uk
Definitions:
"Lathom Physiotherapy Centre Ltd" (also referred to in this Notice as “we", "us", or "our").
“You” refers to the patient.
“Personal information” means any information that is capable of identifying you.
Why we need and how we use your personal information
We only collect, process and store your information where we have a legal obligation and a legitimate reason and to ensure continuity of care
We require non-medical personal information such as name, contact details, date of birth, gender, method of payment, GP name and why you chose Lathom Physiotherapy. These will be stored on our standalone Practice Management System and will only be used to facilitate communication with yourself and others where you have given your explicit consent. We also transfer a limited number of details to spreadsheets to assist with our management processes.
During your appointments the therapist will ask for and record information regarding your: current and previous general health; activities/hobbies; employment; medication and the findings of their examination. This information will remain as a handwritten record and filed in a lockable drawer, a summary of the findings may be used in communications only with yourself and other relevant parties where you have given your explicit consent.
When appropriate, we may keep a record of other correspondence you have with us by telephone, email etc.
We may contact you in regard to your ongoing treatment including texting appointment reminders and sending exercises by e-mail via Physiotec who are our specialist third party for this service.
We take all reasonable steps to ensure that our information is kept up to date and rectified where necessary. It is also your responsibility to inform us if any relevant personal information changes.
|
Sharing information We never share your information outside our organisation for marketing purposes or financial gain. We will only supply your personal information to other parties where such a transfer is a necessary part of the activities that we undertake and where you have given us consent or where we are required to do so by law or regulation. |
|
Where information is passed on in the form of a written letter which is given to you, the letter becomes your responsibility and the protection of its contents is your responsibility. |
|
If the information is passed by email, it will be password protected and/or encrypted and we will take all reasonable precautions to transmit the information securely. Information obtained for our quality surveys and audits will be anonymised where possible. |
How long we keep information about you
|
We have a legal obligation to retain medical records for 8 years after the conclusion of treatment or 8 years after death. |
|
If the record relates to a child or young person, the records must be kept until the patient’s 25th birthday |
|
We may retain electronic records indefinitely for use if you return for another episode of care and for anonymised analytical purposes |
Once we decide that we no longer need your information it will be securely and confidentially shredded or incinerated.
How do we protect your information
In order to prevent unauthorised access or disclosure, we have put in place suitable physical, technical and managerial procedures to safeguard and secure your information.
Our website contains links to external sites, these sites have their own privacy policies and we are not responsible for their content, you should check their privacy policy prior to submitting any personal information.
The following companies may on occasions be given access to our desktop computer, under our supervision.
Rushcliff Ltd (Burton-on-Trent, Staffordshire, DE14 1DU) are the developers of the Private Practice Software (PPS) we use to assist with patient and practice administration. The version of PPS we use does not require internet access and we only record non clinical information. All data is stored on our desktop and backups are kept on physical devices locally. The only requirement for Rushcliff Ltd to have access to our data is when we supervise their remote access for problem resolution.
Physiotec, (4830 Montee St Hubert suite 101, Saint-Hubert QC J3Y 1V1, Canada) are the developers of the exercise software we use to assist with patients treatment and may have access to your email address and name. They will only have access to the data stored on our desktop when we monitor their supervised access for problem resolution.
Your data protection rights
You have certain legal rights under UK data protection law and regulations, summarised as follows:
The right to be informed about our data processing activities, including through Privacy Notices such as this.
Please inform us in writing if you wish to invoke your right to any of the following:
- Corrections to any inaccurate or incomplete data within one month of your request (The right of rectification).
- The right to erasure and to restrict processing. You have the right to have your personal data erased and to prevent processing except where we have a legal obligation to process your personal information. You should bear in mind that by exercising this right you may hinder or prevent our ability to provide treatment.
- The right to data portability, we are obliged to provide you with a copy of the personal data we hold against you in a structured format.
- You have a right to view your therapists hand written treatment records by signing a subject access request. If you require that we provide a summary or a copy of the notes, we will scan and email or post it to yourself, or your nominated professional. We will charge an administration fee for this service (currently £47:50 in 2018).
- Your specific consent to the use of personal data may be withdrawn at any time (excludes regulatory requirements).
- You may make a complaint about how we hold or use your data
If you are dissatisfied with how we deal with your information requests, you may contact the Information Commissioner's Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; Phone: 08456 30 60 60 Website: www.ico.gov.uk
Information from other sources
We may also obtain information about you from GPs, consultants, Insurance Companies and third party health providers. Some personal information may be provided to us by third parties such as insurance companies, other insurance intermediaries. This should only happen if you have previously submitted your personal information to them and given them approval to pass this information on for certain purposes.
Such information will only be obtained from reputable sources which operate in accordance with the General Data Protection Regulation.
We may amend this Privacy Policy from time to time for example, to keep it up to date or to comply with legal requirements, the latest version can be found at www.lathomphysiotherapy.co.uk
