This policy explains the information we hold about you, how we use and store that data and your rights to view the information we hold.
Our contact details:
Contact us: Walthamstow Osteopaths Limited, 72 St Mary road, Walthamstow E17 9RE
Our Commitment to Privacy
Personal information held
In accordance with The Osteopathic Standards, Code of Practice we hold the following information:
Dates of the consultations, personal details, your problems and symptoms, relevant medical, family and social history, clinical findings, information and advice you provide, whether this is provided in person or via the telephone, diagnoses and treatment plans, records of consent, investigation or treatment and the results, any communication with, about or from you, copies of any correspondence, reports, test results (X-Ray, MRI, Blood etc.), clinical response to treatment and treatment outcomes, whether a chaperone was present or not required, whether a student or observer was present.
Records are held on computer on a secure server, on paper or a mixture of both, and we use a combination of working practices and technology to ensure that your information is kept completely confidential and secure.
Clinical notes are never shared with anyone outside of Walthamstow Osteopaths unless we have received explicit permission from you first. We may also use external companies to process personal information, such as for archiving and backup purposes. These companies are bound by contractual agreements to ensure information is kept entirely confidential and secure.
CCTV is in operation on our premises solely for the purposes of crime detection and prevention. There are no CCTV cameras in any of our treatment rooms. CCTV footage is only reviewed if a crime is known to have occurred.
We only collect the information we need to provide you with the services you require, we will never sell or broker your data.
It is important that you tell us if any of your details, such as your contact details, have changed or are incorrect so that we can amend our records. We maintain a strict “No-Spam” policy that means that we do not intend to sell, rent, or otherwise give your e-mail address to a third-party without your consent.
What we will do with the information we hold about you
In accordance with The Osteopathic Standards, Code of Practice We retain your medical records for 8 years after your last visit or if the patient is a child, until their 25th Birthday. Please be aware that this does affect your right to erasure under the GDPR guidelines, as this is the lawful basis under which we retain your records.
Personal data can be erased, such as your email address and your mobile phone number. We will always gain your explicit consent before erasing or amending this information. Contact us if you wish these details to be removed.
How to view a copy of any data we hold about you (Subject Access Request)
You have the right to see what information we hold about you. To request this information you will need to make a “Subject Access Request” or SAR. This is free of charge. Details of how to make a SAR are as follows: Your request must be made in writing and signed, send it by post, as an email attachment or bring your request into the clinic. We will normally reply sooner but we have 1 month to respond to your enquiry
You will also need to provide one of the following forms of identification: a copy of your driving license, passport or birth certificate. We may need to seek further information before your personal data can be released. All requests should be made to contact details at the end of this policy.
We may make a referral to your GP or transfer your records to another practitioner. We will never share any of your information with any third party without your explicit permission.
Who they can complain to about the way in which their personal data is being processed.
In the unlikely event that you are not satisfied following a review by the Practice, you can contact the Information Commissioners Office (ICO).
Call: 0303 123 1113