Privacy Policy
Under the Data Protection Act (1998) and EU General Data Protection Regulations (GDPR) 2018, we have a legal duty to protect any information we collect from you. SB360 Physiotherapy is registered with the Register of Data Controllers, ICO notification number ZA293885,
SB360 Physiotherapy is committed to protecting your personal information and this privacy policy relates to the use of your personal information collected from either you in person, via the website, or information you give us by letter, e-mail, SMS or over the telephone. The data is collected because we have a legal obligation to do so and it is adequate, relevant and limited to what is needed. We will only collect what is relevant and necessary for your care.
What information do we collect?
Without limitation, any of the following data may be collected:
• Name
• Date of birth
• Gender
• Contact information such as address, email addresses and telephone numbers
• Demographic information such as post code, preferences and interests
• Details of services and products used
• Financial information such as credit / debit card number (This data is stored by the payment system izettle)
• Medical information
We keep information on your activity with us, including your visits to our sites of service.
Data Processing
SB360 Physiotherapy will make sure that you receive the service you have requested, process any payments and send you information relating to that service. We will also ensure we keep your information up to date. Please do let us know if your details have changed.
Your data will only be accessible to the staff or contractors if they are trained and it is appropriate for them to carry out their job. This data is always held securely and is not shared with anyone not involved in your care. For data storage purposes non-medical administration staff will handle some of the data. We may use your contact details to remind you of future appointments, or other information concerning your treatment. We may also use your contact information to send you information which the practice believes may be of use to you – for which you must give us consent.
Information collected about you will not be disclosed to any third party without your prior consent. Your data will never be sold. We will only share your personal information where: We are legally required to, or because of a lawful request by a government or law enforcement authority.
To help manage the business reputable platforms are utilised, and they are subscribed to regarding their Privacy Policies and Terms of Use. Our Patient Data is stored within the Private Practice Software cloud based on line, hosted system. This is secure and encrypted and governed by their data protection policy www.rushcliff.com. Other utilised platforms include, rehab my patient www.rehabmypatient.co.uk, izettle www.izettle.com for credit and debit card payments, and Google mail for email communications.
Information collected about you will not be disclosed to any third party without your prior consent. Your data will never be sold. We will only share your personal information where: We are legally required to, or because of a lawful request by a government or law enforcement authority.
To help manage the business reputable platforms are utilised, and they are subscribed to regarding their Privacy Policies and Terms of Use. Our Patient Data is stored within the Private Practice Software cloud based on line, hosted system. This is secure and encrypted and governed by their data protection policy www.rushcliff.com. Other utilised platforms include, rehab my patient www.rehabmypatient.co.uk, izettle www.izettle.com for credit and debit card payments and Google mail for email communications.
Access to your information and contacting us
You have the right to access your information at any time to check whether it is accurate and up to date. If you wish to amend any information, please contact sarah@sb360physio.com.
How long is your data stored?
Your information, for an adult will be held for 8 years after the last treatment session and for children eight years after their 18th birthday or until the age of 25 years old. The records will be disposed of at the appropriate time in a secure manner.
Changes to this Privacy Policy
If this Privacy Policy changes in any way, we will place an updated version on the website. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.
Complaints
In the first instance, please contact SB360 Physiotherapy using the details above. If this does not resolve the complaint to your satisfaction, you have the right to complain to the Information Commissioner about the way in which we collect and use Your Personal Data: https://www.ico.org.uk/concerns or telephone 0303 123 1113.