Privacy Policy

The Wells Physiotherapy & Sports Clinic Data Privacy Policy

Terminology

Personal data is any information that could identify a person (data subject).  Personal sensitive data relates to information concerning a data subject’s racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life, or details of criminal offences.

A data subject is any identified or identifiable person whose personal data is processed by the data controller.

A data controller determines the purposes for data processing and the way personal data is processed.

Processing is any action or actions performed on personal data such as collection, organisation, storage, erasure or destruction.

Data Collection

The Wells Physiotherapy & Sports Clinic collects personal data that is required for the provision of services.  This can include:

  • Contact details such as names, addresses, telephone numbers and email addresses
  • Date of birth
  • National insurance number
  • Insurance details
  • Personal sensitive data concerning physical and mental health.

The Wells Physiotherapy & Sports Clinic collects any additional data received by email, letter, telephone, through www.wellsphysiotherapy.co.uk or by any other means of correspondence.

The Wells Physiotherapy & Sports Clinic can obtain personal data from third parties such as doctors and other related health professionals with consent from the data subject.

The Wells Physiotherapy & Sports Clinic can store personal data obtained from social media interactions outside of social media platforms if correspondence regarding services is received; the data is then covered as outlined in this policy.

Cookies

Data may be obtained from cookies through www.wellsphysiotherapy.co.uk.  Cookies are small text files that are placed on a device by websites when they are visited.  Cookies enable delivery of more personalised content and are widely used to make websites work or work more efficiently.

Most web browsers allow some control of most cookies through the browser settings.  Please note that in a few cases some website features may not function if cookies are removed from the browser.

Google Analytics

When www.wellsphysiotherapy.co.uk is visited, a third-party service called Google Analytics is used to collect standard internet log information and details of visitor behaviour patterns.  This is to discover factors such as the number of visitors to various parts of the site.

This information is processed in a way that does not identify anyone; The Wells Physiotherapy & Sports Clinic does not make, and does not allow Google to make, any attempt to find out the identities of those visiting www.wellsphysiotherapy.co.uk.

Data Protection

The Wells Physiotherapy & Sports Clinic has security measures in place to protect personal data from theft, loss and breach of privacy.  Security measures in place include encryption, password protection, and a Firewall (security software) in place to protect internal information from the internet.  Hard copy documentation containing personal data is stored in locked cabinets.

Access to personal data is restricted to figures of authority within The Wells Physiotherapy & Sports Clinic such as receptionists and physiotherapists.

The Wells Physiotherapy & Sports Clinic can share personal data with essential and relevant third parties with written consent from the data subject.  These can include:

  • Health professionals such as doctors and specialists; for example, the clinic may be required to refer a data subject
  • Insurance companies and solicitors; for example, a medical note may be required for an insurance claim.

Data Retention

The Wells Physiotherapy & Sports Clinic practises an eight-year retention period after which personal data is securely destroyed.  Personal data is archived off-site for the final three years of this retention period.

Personal data may be kept for longer than eight years if data subjects are below eighteen years of age.

Please be aware that companies can keep personal data for longer if kept for public interest archiving or statistical purposes.

General

The Wells Physiotherapy & Sports Clinic acts as a data controller by processing personal data.  Processing is always with legitimate interest and compatible with the reason the data was originally collected.

The Wells Physiotherapy & Sports Clinic uses personal data for the provision of requested services.  The Wells Physiotherapy & Sports Clinic may contact data subjects in accordance with their plan and in response to bookings and enquiries.  The Wells Physiotherapy & Sports Clinic does not contact data subjects with marketing information.

The Wells Physiotherapy & Sports Clinic may be required to process personal data for investigating, detecting and reporting crime; to demonstrate compliance and to actively comply with industry standards and any laws and acts that may apply.

The Wells Physiotherapy & Sports Clinic may occasionally update this policy therefore data subjects and visitors to www.wellsphysiotherapy.co.uk may want to check it each time personal data is provided.

www.wellsphysiotherapy.co.uk may contain links to external websites.  The Wells Physiotherapy & Sports Clinic is not responsible for the privacy practices of such other websites and encourages visitors to read the privacy policies of every website that collects personal data.

Rights

Data subjects have the following rights regarding their personal data:

The right to be informed

Data subjects have the right to clear, transparent and understandable information regarding their rights and how The Wells Physiotherapy & Sports Clinic uses their personal data.  This is the purpose of providing data subjects and visitors to www.wellsphysiotherapy.co.uk with a data privacy policy.

The right of access

Data subjects have the right to access their personal data that is being processed by The Wells Physiotherapy & Sports Clinic.

The right to rectification

Data subjects are entitled to correct their personal data if it is inaccurate.

The right to be forgotten / erasure

Data subjects are entitled to request the deletion of their personal data where there is no exigent reason for The Wells Physiotherapy & Sports Clinic to continue processing it.  There are exceptions to erasure.

The right to restrict processing

Data subjects have the right to put an end to the processing of their personal data in certain circumstances.  The Wells Physiotherapy & Sports Clinic can continue to store personal data when processing is restricted but may not further process it.

The right of data portability

Data subjects have the right to acquire and reuse their personal data as well as the right to have their personal data directly transferred to third parties in certain circumstances.

The right to object

Data subjects have the right to object to The Wells Physiotherapy & Sports Clinic processing their personal data for business interests, marketing purposes and related profiling.

The right to withdraw consent

Data subjects who have given consent to The Wells Physiotherapy & Sports Clinic to process their personal data have the right to withdraw their consent at any time.  Any processing of the data subject’s personal data up to that point is not unlawful.

The right to complain

Data subjects have the right to make a complaint to the Information Commissioner’s Office (the data protection authorities) if they believe their personal data has not been processed in compliance with data protection law.

Please contact Fleur Jackson at The Wells Physiotherapy & Sports Clinic to discuss personal data and the practise of rights.  Contact details can be found at www.wellsphysiotherapy.co.uk/contact.