PRIVACY NOTICE
This Privacy Notice explains in detail the types of personal data I may collect about you during your treatment with me. It also explains how I will store and handle that data, and keep it safe.
What is Personal Data?
Personal data is defined as “any information which relates to a living individual who can be identified from it”. For my purposes personal data would include your name, address, contact details, date of birth etc.
There is a sub-category of personal data called special category data. For my purposes as an acupuncturist, any health information I ask of you will come under this category.
Legal Requirements
The law on data protection sets out a number of different reasons for which it is lawful to collect and process your personal data, including:
When Do I Collect Your Personal Data?
Personal data will be collected if you contact me through Facebook, email, text or telephone and also during the initial consultation and each subsequent treatment.
What Information Do I Collect About You?
The following is a guide to the information I will require:
How and why do I use your personal data?
Your personal data is required to enable me to:
Certain data (for example name, address and your date of birth) is needed to:
Data Retention
All data is securely held for a period of seven years following your last treatment for legal reasons. After this time has elapsed, all electronic data will be deleted and your paperwork will be appropriately destroyed.
Protection of Your Personal Data
Your case notes are all paper based and are kept in a lockable filing cabinet.
Some of your personal data (telephone number and/or email) will be stored on my phone and computer for communication purposes whilst undergoing your treatment. Once your course of treatment has been completed, then this data will be deleted. Both devices are password protected.
Your name and telephone number only will be shared with and stored on the reception computer at Snowdens Clinic for the purposes of appointment reminders and processing payments. The computer is password protected.
What is Personal Data?
Personal data is defined as “any information which relates to a living individual who can be identified from it”. For my purposes personal data would include your name, address, contact details, date of birth etc.
There is a sub-category of personal data called special category data. For my purposes as an acupuncturist, any health information I ask of you will come under this category.
Legal Requirements
The law on data protection sets out a number of different reasons for which it is lawful to collect and process your personal data, including:
- Consent : There are circumstances whereby it will be necessary to obtain positive consent from you before the data can be processed.
- Legal compliance : Some information must be collected to comply with the law.
- Legitimate interest : The majority of information I will collect from you will come under legitimate interests. This means that the information is required to enable me to do my work as an acupuncturist both safely and efficiently.
When Do I Collect Your Personal Data?
Personal data will be collected if you contact me through Facebook, email, text or telephone and also during the initial consultation and each subsequent treatment.
What Information Do I Collect About You?
The following is a guide to the information I will require:
- At the initial consultation I will ask for your name, date of birth, address, email and telephone number. I will also ask about your presenting complaint and symptoms, medical history and general lifestyle information.
- At the initial consultation I will ask for your consent to treatment in writing.
- I will make notes on any recommendations I may make, for example, in respect to health advice on diet and exercise.
- During follow-on appointments I will ask for information on and collect notes on how your presenting symptoms are progressing and any feedback you have in regard to your treatment.
How and why do I use your personal data?
Your personal data is required to enable me to:
- Make or rearrange appointments with you and to communicate with you about your treatment.
- Provide a register and maintain a diary to record when clients are treated.
- Make a full traditional diagnosis, treatment strategy and treatment plan.
- To review and record the progress of your treatment.
Certain data (for example name, address and your date of birth) is needed to:
- Help correctly identify clients with the same name to avoid mistakes being made.
- Refer you, if appropriate, to another health practitioner or GP. In cases of referral, this will be done with your full knowledge and consent. In cases of emergency, contact with your GP or emergency services may be necessary without your consent.
Data Retention
All data is securely held for a period of seven years following your last treatment for legal reasons. After this time has elapsed, all electronic data will be deleted and your paperwork will be appropriately destroyed.
Protection of Your Personal Data
Your case notes are all paper based and are kept in a lockable filing cabinet.
Some of your personal data (telephone number and/or email) will be stored on my phone and computer for communication purposes whilst undergoing your treatment. Once your course of treatment has been completed, then this data will be deleted. Both devices are password protected.
Your name and telephone number only will be shared with and stored on the reception computer at Snowdens Clinic for the purposes of appointment reminders and processing payments. The computer is password protected.