North Cornwall Physiotherapy understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits our website www.northcornwallphysio.co.uk (“Our Site”) and will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.
Information About Us
Our site is owned and operated by Inside Out Health Limited, a company registered in England with number 06637392 whose registered address is at Bridge End, Wadebridge, Cornwall, PL27 6DA.
Our Data Protection Officer is Andrew Mooney, and can be contacted by email at email@example.com , by telephone on 01208 816666, or by post at North Cornwall Physiotherapy, Bridge End, Wadebridge, PL27 6DA.
What Does This Policy Cover?
As a data subject, you have the following rights under the GDPR, which this Policy and Our use of personal data have been designed to uphold:
The right to be informed about Our collection and use of personal data;
The right of access to the personal data We hold about you;
The right to rectification if any personal data we hold about you is inaccurate or incomplete (please contact us using details under ‘Contacting Us’);
The right to be forgotten – i.e. the right to ask Us to delete any personal data We hold about you (we only hold your personal data for a limited time, as explained under ‘How do we use your data’ but if you would like Us to delete it sooner, please contact us.
The right to restrict (i.e. prevent) the processing of your personal data;
The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);
The right to object to Us using your personal data for particular purposes; and
Rights with respect to automated decision making and profiling.
The accuracy of your information is important to us. If you change email address, or any of the other information we hold is inaccurate or out of date, please email us here, or write to us at: North Cornwall Physiotherapy, Bridge end, Wadebridge, Cornwall PL27 6DA. Alternatively, you can telephone 01208 816 666.
If you have any cause for complaint about our use of your personal data, please contact us using the details provided in this policy and we will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the information Commissioner’s Office.
For further information about your rights, please contact the information Commissioner’s Office or your local Citizens Advice Bureau.
Information we may hold about you
The information we hold about you may include the following:
Basic details such as name, date of birth, address and contact details
Details of contact we have had with you
Details of treatments you have received
Client experience feedback and treatment outcome information you provide
Information about complaints and incidents
Notes and reports about your health and any treatment and care you have received or need
Information from customer surveys, competitions and marketing activities
Other information we received from other sources including NHS, GP’s and insurance companies who have obtained your permission to share information about you.
When we collect your information
Information about you is collected when:
You use our services
You submit a query to us, for example by email, telephone, social media and through our websites.
We may also collect personal information about you from other people when:
We liaise with your family, employer, health professional or other treatment or benefit provider. We may only share information in this way where you have provided your consent or in circumstances where you are incapable of giving consent, or we are unable or it is not reasonable to seek your permission, or we are required to by law or in accordance with guidance from professional bodies
Using your information
We use your personal information to provide you with our services, and to improve and extend our services. This may include:
Responding to your queries and process a booking you have made;
Responding to requests where we have a legal or regulatory obligation to do so
Checking the accuracy of information about you, and the quality of your treatment or care, including auditing medical and billing information.
Using your contact information to send you service related information
To provide you with information on products, special offers and other services that we feel may be of interest to you in line with those you have previously expressed an interest in via our websites;
To seek your views or comments on the services we provide;
To notify you about any changes to our website, including improvements, and service or product changes;
To send you communications which you have requested and that may be of interest to you. These may include information about events, promotions, offers, job opportunities and replies to appointment bookings, enquiries/confirmations.
For our internal purposes including statistical or survey purposes, quality control, site performance and evaluation in order to improve our website; and
To administer this website.
North Cornwall Physiotherapy will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.
We may pass your personal information on to insurance companies and other health professionals for the purposes of completing treatments and providing services to you on our behalf (for example to process payments and health referrals). However, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.
As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Economic Area (EEA) in countries with different data protection laws. We will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the Data Protection Act 1998 and GDPR.
In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority.
In the event that we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer of such business or assets.
Security precautions in place to protect the loss, misuse or alteration of your information
When you give us personal information, we take steps to ensure that it’s treated securely. Any sensitive information (such as credit or debit card details) is encrypted and protected with 128 Bit encryption on SSL across the entire website. When you are on a secure page, a lock icon will appear in the address bar of modern web browsers such as Microsoft Edge and Google Chrome.
Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Those aged 16 or under
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.
We will only keep your personal information for as long as is necessary and in accordance with UK law.
Your Right to Withhold Information
You may access our site without providing any data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain data.
How can you access your data?
You have the right to ask for a copy of any of your personal data held by us (where such data is held). Under the GDPR, no fee is payable and we will provide any and all information in response to your request free of charge. Please contact us for more details at firstname.lastname@example.org , or using the contact details below.