​
It is important to us that your privacy is protected. Whatever information you give us, we will respect your privacy and your rights.
​
What is personal data?
Your personal data is information that identifies you, such as your date of birth or your address. It can also be information that reveals something about you, such as information about a medical diagnosis, treatment plan and medical history.
​
How and why we use your information:
We need to collect personal information about your health in order to provide you with the best possible treatment. Your requesting treatment and our agreement to provide that care constitutes a contract. We then have a legitimate interest in collecting your personal information because without it we couldn’t do our job effectively and safely.
We also use your information to contact you in order to confirm or change your appointments or to update you on matters related to your medical care.
Provided we have your consent, we may occasionally send you general health information or ask for feedback on our service. You may withdraw this consent at any time – just let us know by any convenient method.
Sharing your information:
We will never share your data with anyone who does not need access without your written consent. Only the following people/agencies will have routine access to your data:
-
The medical records service who store and process our files
-
Your practitioner(s) in order that they can provide you with treatment. If you see more than one of the osteopaths at our clinic they will share medical notes in order to provide the best treatment for you.
-
We occasionally use Mailchimp to coordinate our messages, so your name and email address may be saved on their server.
We will not share your information with any other organisations, other than:
-
With your prior consent or because you have asked us to, for example, in referring you to a GP or other medical practitioner which would provide you with additional support or treatment.
-
If we are required to by law, for example to the police if we agree it is essential to the prevention or detection of a crime.
-
If we feel it is in the vital interests of you or another person, for example in a medical emergency.
​
​
Receiving information from third parties:
We will only receive information from third parties about you in the following circumstances:
-
When you have agreed to provide information from medical practitioners which will assist us in our treatment plan for you.
-
We reach out to other agencies or practitioners that you are engaged with (with your permission)
Storing your information
We have a legal obligation to retain your records for 8 years after your most recent appointment (or age 25, if this is longer), but after this period you can ask us to delete your records if you wish. Otherwise, we will retain your records indefinitely in order that we can provide you with the best possible care should you need to see us at some future date.
Your records are stored electronically, using a specialist medical records service. This provider has given us their assurances that they are fully compliant with the General Data Protection Regulations. Access to this data is password protected.
Security and Confidentiality
We take care to make sure your information is secure when we use, store and transmit it. It is only accessed by people who have been verified and authorised to do so. Everyone who accesses your information has had training and is obliged to respect that it is confidential.
​
Your rights
We want you to be absolutely confident that we are treating your personal data responsibly. You have the right to see what personal data of yours we hold, and you can also ask us to correct any factual errors. Provided the legal minimum period has elapsed, you can also ask us to erase your records.
​
How to contact us
Please contact us if you have any questions or would like more information:
The Osteopaths
32 North Parade
Aberystwyth
SY23 2NF
01970 636 755
Complaints
If you are unhappy with how we are processing your information please contact us using the details outlined above. If you are still unhappy after receiving our response you can raise your concerns with the Information Commissioner’s Office.