How is data collected?
Your initial data is collected via the information you provide on the Pre-Massage Assessment form you fill out during your first appointment. At each visit the treating therapist will make notes relating to your treatment and any information you provide; in paper form.
What data is collected, how is it used & why do we collect it?
We collect your contact details (name, address, email address & phone number) in order to be able to contact you regarding your appointments and treatment. This includes (but is not limited to) appointment reminders, if any changes need to made to your scheduled appointment time, to send you exercise or advice sheets and if we need to invoice you for any charges. We may also contact you with relevant offers, updates and information regarding the our services if you have given us permission.
We collect other personal information (DOB, occupation, medical information and treatment session notes) in order to ensure that you receive appropriate and specific treatment and advice during your visits.
How & where is data stored?
Data is stored in paper form in a locked filing cabinet behind a locked door within a secure building. Your basic details (name, address, email address, phone number(s) & D.O.B) are transferred onto an excel document and stored on a password protected laptop that is secured with a firewall and virus and spyware protection.
How long is data kept?
Patient records will be kept for 7 years following their last treatment session at the clinic. For minors records are kept for 7 years after they turn 18 years of age.
How is data deleted?
After these 7 years your data will be deleted from the laptop and your paper records destroyed.
How is consent gained?
Your consent is gained when you tick the boxes and sign the paper form given during your first appointment at the clinic. If boxes are left un-ticked this will be taken as no consent. For minors under the age of 18 consent must be from an appropriate adult.
What are your rights?
You have the right to request to access your data at any time and for any corrections to be made. You have the right to withdraw your consent at any time. You have the right to raise any issues you may have with the way we handle your data with the ICO.
NHS Track & Trace – COVID-19 Update
To support the use of the NHS Track & Trace service during the COVID-19 pandemic I will be required to share contact details of any relevant patients should I test positive for COVID-19. I will only share necessary details and with no-one other than the NHS service.