What is a Privacy Notice?
Under data protection law, you, as a patient of myChiro Clinic, have specific rights. To communicate these rights to you in a clear and concise manner, we are providing you with this privacy notice.
Who We Are?
For the purposes of processing your personal data, under data protection law, we are the data Controller. Our details are:
Unit 2 Blake House
The Personal Data We Process and What We Do with It
We record and use the following categories of personal data which include: name, address, email, telephone numbers, date of birth and health data relevant for treating you at our clinic. For those using health insurance policies, we also collect details of your policy in order to invoice your treatment and collect payment.
Our lawful basis for storing and using this data is contract, legitimate interests and to comply with our legal obligations. We are allowed to store and use your health data as we are a recognised health care provider.
We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees and processors in the proper performance of their duties.
How We Obtained Your Data
Your personal data has been collected directly from you, via our new patient registration procedure and health information given to the practitioner. Occasionally, we also collect personal data from a third-party referrer such as a consultant, GP or insurance agent.
Sharing Your Personal Data
We only share your personal data with a third party with your explicit consent, where, for example we are co-managing your case with another healthcare professional or if you would like us to advise a physical trainer on an exercise regime. As health insurance companies are co-controllers of your data, we do not ask your consent to share your information with your healthcare insurance providers.
Retaining Your Personal Data
We will retain data on adults for a period of eight years after your last treatment and for minors, until they also reach the age of 25 as this is a requirement of a registered Chiropractor in the UK.
Automated Decision Making and Profiling
We do not use any systems which use automated decision making or profiling in respect of your personal data.
As we process your personal data, you have certain rights. These are a right to be informed, the right to access, a right of rectification, a right of erasure, and a right to restrict and object to processing.
You may request a copy of your data at any time.Please make such a request in writing or by email to the clinic, whose details are shown above.Please provide the following information: your name, address, telephone number, email address and details of the information you require.
If you believe any of the personal data we hold on you is inaccurate or incomplete, please contact us directly and any necessary corrections to your data will be made without undue delay.
If you believe we should erase your data, please contact the clinic, whose details are shown above.
If you believe we are using your data in a way that you did not understand or agree to and wish to restrict such processing, please contact the clinic, whose details are shown above.
Where you have provided explicit consent for us to process your data you have a right to withdraw this consent at any time.
Should your personal data under our control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. We will give you the contact details of the Data Protection Officer who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.
Should You Wish to Complain
You can contact the Scottish Chiropractic Association if you have concerns about or wish to make a complaint about the way we are processing your data at firstname.lastname@example.org