GDPR from May 2018, requires us (Amersham Osteopathic Clinic (AOC)) to ask you to read the following and, if you agree, to sign the our explicit consent form for our processing of information when you attend our practice for Consultation or treatment
Our website Privacy Policy and use of Cookies notice remains the same (we won’t knowingly share your data with others) and is here: https://www.amershamclinic.com/privacy-policy-and-cookies
Personal Data
For the purposes of providing treatment, all Osteopaths require detailed medical and health related information. We will only collect what we consider is relevant and necessary for our assessment and your treatment. When you visit our practice, we make notes, including details concerning your medical history, medication, our osteopathic assessment, your treatment and other relevant issues affecting your health and well-being.
This data is always held securely, is not shared with anyone not involved in your treatment, although for data storage purposes it will be handled by pre-vetted staff who have signed an integrity and confidentiality agreement.
To be able to process your personal data, it is a condition of any treatment that you give your explicit consent to allow your Osteopath to document and process your personal medical / osteopathic data.
Contact details provided by you such as telephone numbers, email addresses, postal addresses are used to remind you of future appointments and provide reports or other information concerning your treatment if relevant.
As part of our obligations as primary healthcare practitioners there may be circumstances related to your treatment, on-going care or medical diagnosis that requires the sharing of part or all of your patient records with other healthcare practitioners e.g your GP, consultants and /or medical insurance companies. Where this is required we will inform you first, unless we are under a legal obligation to comply, or you have signed a consent form allowing us to share that data.
AOC will not broker or pass your data to any other party other than detailed above.
Some basic personal data may be collected about you from any patient surveys / audits you may complete at a future date, records of our written and email correspondence, phone calls and details of your visits to our website, including but not limited to, personally identifying information like Internet Protocol (IP) addresses.
The legal basis for processing your personal data is to meet our contractual obligations obtained from explicit Patient Consent and our legitimate interest to respond to enquiries concerning the services we provide.
The legitimate interests pursued by AOC is to promote treatments for patients with all types of health problems indicated for osteopathic and naturopathic care and photobiomodulation / low level laser therapy.
Consent
Agreeing to this privacy notice by signing our Explicit Consent form when you attend the practice, you consent to AOC processing your personal data for the purposes outlined. You can withdraw consent at any time by using the postal, email address or phone number at the end of this Privacy Notice, subject to our professional legal requirements
Disclosure
AOC will keep your personal information safe and secure, only those engaged in providing your treatment will read your patient records.
For data storage and administration purposes, it will be handled by our reception team so that they can manage your appointments, listen to answerphone messages, read text messages from you, manage your contact and appointment details, send invoices and any other clinic related administration.
Retention Policy
AOC keep your consultation / treatment records and any incidental personal data during the duration of your treatment with us. We will store your patient records and related personal data for eight years after your last treatment to meet our legal obligations.Records concerning minors who have received treatment will be kept until the child has reached the age of 25. After this time, we will keep these records in case you decide to return for further treatment, your records may be archived or we will delete them if requested to do so.
Data storage
AOC does not store personal data outside the EEA.
Your rights
AOC will keep your patient records as stated above to comply with our professional obligations.
We will correct any data about you that is inaccurate or incomplete.
We won’t share your data or give it to anyone else unless you give us permission or it is legally required. We will erase it if you ask, subject to our obligations.
If AOC refuses your request under rights of access, we will provide you with a reason as to why, which you can legally challenge.
At your request AOC will confirm what information it holds about you and how it is processed.
Complaints
In the event that you wish to make a complaint about how your personal data is being processed by AOC you have the right to complain to us. If you do not get a response within 30 days, you can complain to the ICO.
Details for these contacts are:
Karen Carroll, Amersham Osteopathic Clinic. Caer Sidhe, Chiltern Road, Amersham, HP6 5PH.
Tel: 01494 434 651 or email
ICO. Wycliffe House, Water Lane, Wilmslow, SK9 5AF Tel: 0303 123 1113, email: https://ico.org.uk/global/contact-us/email/