Cornwall Children's Physiotherapy

Cornwall Children’s Physiotherapy Privacy Notice and Website Privacy Policy.

 

Who we are and what we do.

 

Cornwall Children’s Physiotherapy (hereafter referred to as we or us) is registered with the Information Commissioners Office (ICO) as a data controller, responsible for your personal data. 

 

Our ICO registration number is ZB599294 and can be viewed on the ICO Register website at https://ico.org.uk/ESDWebPages/Entry/ZB599294 

 

We respect your privacy and are committed to protecting your personal data. This privacy notice will inform you as to how we look after yours and your child(ren)’s personal data and sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. This notice also applies when you correspond with us in person, by letter, by phone or email. 

 

Information we may collect.

 

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). When you visit our Site or correspond with us in person or by phone, e-mail or otherwise you may give us information that would be classed as personal data about you and others you are acting on behalf of. We may collect, use, store and transfer various kinds of personal data about you when you do so which we have grouped together as follows:

• Identity Data which includes your (and your child(ren)’s) first name, last name, username or similar identifier, marital status, title, date of birth and gender.

• Contact Data which includes your billing address, delivery address, home address, email address and telephone numbers.

• Health Data which includes any information about yours and your child(ren)’s health including your medical history and/or current health status including but not limited to data regarding test results, diagnoses, and medications. 

• Financial Data which includes your bank account and/or payment card details.

• Transaction Data includes details about payments to and from you and other details of products and services you may have purchased from us.

 

We may collect Special Categories of Personal Data (as defined in GDPR) about you and your child(ren). This includes details about health, race, or ethnicity, religious or philosophical beliefs, sex life or sexual orientation. 

 

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with healthcare services). In this case, we may have to cancel a service you have asked us to provide, but we will notify you if this is the case at the time.

It is important that the personal data we hold about you and your child(ren) is accurate and current, therefore please keep us informed if yours or your child(ren)’s personal data changes during your relationship with us.

 

Keeping your data secure.

 

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to only those who have a need to know. They will only process your personal data on our instructions in accordance with this notice and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

 

How we will collect your data.

 

We use different methods to collect data from and about you including through:

• Your use of our website.

• Direct interactions. You may give us any of the categories of data identified above by filling in forms or by corresponding with us in person or by phone, email or otherwise. To make a request for our healthcare services or to give us some feedback.

• Contact, Financial and Transaction Data (if applicable) from providers of technical, payment and delivery services inside the EEA.

 

Why we will use your data.

 

The lawful bases for processing personal data are set out in Article 6 of the General Data Protection Regulation (GDPR). We may process your personal data on more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground, we are relying on to process your personal data where more than one ground has been set out below. At least one of these must apply whenever we process personal data:

• Consent:  you have given clear consent for us to process your personal data for a specific purpose.

• Contract:  the processing is necessary for a contract we have with you (for example, to process and deliver healthcare services to you and to manage our relationship with you), or because you have asked us to take specific steps before entering a contract.

• Legal obligation:  the processing is necessary for us to comply with a legal or regulatory obligation (not including contractual obligations).

• Vital interests:  the processing is necessary to protect someone’s life.

• Legitimate interests: the processing is necessary for our legitimate interests (for example to administer and maintain our website) or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

 

We rely on the following legitimate interests when processing your personal data:

• to manage our business and comply with our obligations to our patients, clients, staff, and suppliers.

• to protect our proprietary and commercially sensitive information.

 

We also need to satisfy specific conditions for using your health data. We rely upon the following ground in this regard:

• Healthcare provision: the processing of data concerning your health is necessary for us to provide you with a medical diagnosis and/or healthcare treatment.

• We do not rely on consent as a legal basis for processing your personal data other than as described below. However, where we do ask for your consent (for example in processing data relating to your health) we will do so to comply with the principle that any processing must be lawful, fair, and transparent.

 

Disclosing your personal data.

 

We may have to share yours or your child(ren)’s personal data with the parties below to provide our services to you. We require all third parties to respect the security of your personal data and to treat it in accordance with the law, and when they are processing personal data on our behalf we do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions and in accordance with the law. 

 

Examples of our third parties include:

• Medical practitioners who provide services to you.

• Regulators such as the General Medical Council.

• Sub-contractors for the performance of any contract we enter with them or you.

• We do not directly transfer or process your personal data outside of the European Economic Area (EEA).

 

How long we will keep your data.

 

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We are required to retain child(ren)’s records until their 25th birthday and adult’s records for 8 years after our last interaction with them.

 

Your legal rights.

 

You have certain defined rights under data protection laws in relation to your personal data. Please visit the Information Commissioner’s Office website to find out more about these rights at https://ico.org.uk/ 

If you wish to exercise any of the rights, please contact us. If you are unhappy with how we are processing your personal data, you have the right to complaint to the Information Commissioner Office. 

 

The Information Commissioner can be contacted at the below address or online at https://ico.org.uk/concerns/ 

 

Information Commissioners Office,

Wycliffe House, 

Water Lane,

Wilmslow

SK9 5AF

 

No fee usually required.

 

You will not have to pay a fee to access your personal data (or to exercise any of the other rights).

 

What we may need from you.

 

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

 

Time limit to respond.

 

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will always notify you and keep you updated.

 

Our website.

 

To provide you with the best experience while using our website, we process some data about you. This section of our Privacy Policy & Notice explains when and why we collect personal information about people who visit our website, how we use it and how we keep it secure. We take our website users’ privacy very seriously and adheres to our obligations under the General Data Protection Regulation 2018. We take all reasonable care to always comply with the Regulation and all relevant UK and EU laws.

 

This Privacy Policy is subject to change without prior notice. Care South encourages its website users to review this policy periodically. By using our website, you agree to the terms of this policy in effect at that time.

 

Information we collect.

 

We collect both personally identifiable information and non-personally identifiable information through our website to learn more about how our website users use our website and to provide users with information about us, our business, and services. Website users are not obliged to provide us with personal information to use the website however, we may obtain personal data about you, such as your name, email address, home address and telephone number when you provide it during the completion of an enquiry form, or to sign up to receive our emails or updates. If you volunteer such information, you will be consenting to our processing it for the purpose supplied.

 

We may monitor your usage of our website and use personal information to administer and expand our business activities, providing customer service and making available other products and services to customers and prospective customers. We may use the information to notify you about significant changes to the website, new services, and special updates which we think you will find valuable.

 

We may collect aggregate information from all website users. The aggregate data is used to customise our web content to deliver a better experience for its users and will in no way personally identify you.

 

Tracking information.

 

IP address – we may keep track of the pages visited by you. An IP address is a number that is automatically assigned to your computer when connecting to the internet so your computer can be identified. We may collect IP addresses for the purposes of, but not limited to system administration, aggregating information, and auditing the use of the website. This information does not identify you personally.

 

Cookies and sessions.

 

Cookies are pieces of information that are transferred from a website to an individual’s computer hard drive for record-keeping purposes. Cookies make surfing the web easier by saving your preferences and are used by most major websites. No personally identifiable information is collected or used in this process and this information does not identify you personally. Cookies show how and when visitors use our website, identifying which areas are popular and which are not and may be used by us to better understand and improve the website by making it more responsive to the needs and preferences of the website users.

 

You have the option to disallow receiving cookies or to indicate when a cookie is being sent at any time by re-setting your web browser. However, our website may not function properly, or may be slower if you refuse cookies.

 

Sessions are like cookies and are a temporary memory which stores data. This data is then cleared as soon as the website user closes the website. No personally identifiable information is collected.

 

Minors.

 

We do not knowingly collect information from children, or market our products or services to children. If you are under 13 years of age, please do not provide any personal information to us.

 

Disclosure.

 

The information obtained by us through your use of our website will not be passed on to third parties without your consent. However, we reserve the right to disclose user information in special cases where we are required to so by law or have a reason to believe that disclosing this information is necessary to identify, contact or bring legal action against anyone who may be causing injury, interference or disruption to our website, our rights or property, or where anyone else may be harmed by such activities.

 

Links to third party and other websites.

 

Our website may include links to other websites which then allows you to connect to third party websites. Such links are provided as a convenient method of accessing information that may be useful or of interest to you. These links are beyond our control, and we do not accept any responsibility for them. These sites may have their own privacy policies similar, different, or otherwise than that of our website and we are not responsible for and do not guarantee the privacy practices or the security of other sites. Upon clicking on a link, you have left our website and the privacy policy stated on our website is no longer in effect.

 

Cornwall Children’s Physiotherapy, 2024.