PRIVACY POLICY
Sophie Millar Physiotherapy is committed to protecting your personal information and this document is designed to help you understand what kind of information we collect and process. It relates to how we collect, use, share, retain and safeguard personal data.
Who we are
Sophie Millar Physiotherapy is a home physiotherapy service providing physiotherapy assessment and treatment. Full details can be found on the website and we can be contacted using the following details:
Email: sophie.millar.physio@outlook.com
Phone: 07737 308166
Type of personal information we collect
Personal data is any information about an individual from which that person can be identified. Some types of data are more sensitive and are identified as a special category. Health data is one of these categories and includes but is not limited to information relating to medical history, medical conditions, clinical notes, correspondence, healthcare professional or service involvement.
​
In order for Sophie Millar Physiotherapy to be able to provide an assessment and treatment service to you we will collect and process personal data and health data about you including name, address, phone numbers, email, date of birth, next of kin details, medical history and condition, medications. This information is collected from you at the point of enquiry or booking of an appointment. It will be provided directly by you or a representative for you with the appropriate consent. Further data may be collected during your assessment appointment or at subsequent treatment sessions. We will only collect what is relevant and necessary for your assessment and treatment.
​
We may collect your personal data when you visit our website, where we may collect your unique online electronic identifier; this is commonly known as an IP address. We will also collect electronic personal data when you first visit our website where we will place a small text file that is commonly known as a cookie on your computer. Cookies are used to identify visitors and to simplify accessibility, and to monitor visitor behaviour when viewing website content, navigating our website. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
How we use your information
Data will be used inform us on the safety and suitability of physiotherapy assessment and treatment for you. The details of our assessment and any subsequent treatment sessions will be recorded electronically. Data will be stored securely and will only be accessed, seen and processed by the physiotherapist treating you.
​
Contact details may be used to contact you regarding scheduled appointments or to provide information regarding your treatment such as exercise programmes or resources. The next of kin details will only be used in the event of an adverse incident during your assessment or treatment.
​
Personal information may be shared with your knowledge and consent to other appropriate professionals who are involved in your care such and GP, healthcare professionals, insurance providers. We will share information with other professionals e.g. GP and the police if you disclose any risk to yourself or others and this may be without your consent.
Data will be used to manage and provide you with our services including appointment booking, payment arrangements, collecting and recovering any money owed to us.
​
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are that you consent and we have a legal obligation and a legitimate interest.
​
We process personal information to fulfil our legal obligation, which requires us to maintain complete records relating to the health care services we supply to you. This forms our lawful basis for the processing of your personal data in order to comply with the law. We are required by our Regulatory body, the Health & Care Professions Council (HCPC) to take and process clinical records, which are required to support safe and effective care. As our regulatory body is covered by UK law, this also demonstrates a legal requirement to record and maintain clinical records that relate to your clinical care.
​
Legitimate interest is the interest of our business in conducting and managing our service to enable us to give you the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.
Consent
Through agreeing to this privacy notice you are consenting to Sophie Millar Physiotherapy processing your personal data for the purposes outlined. You can withdraw consent at any time by using the email address or telephone number provided at the top of this Privacy Notice.
How we store and protect your personal information
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How long we retain your personal information
We will process personal data from the point of contact with our service and throughout the duration of any treatment. We will continue to store only the personal data needed for eight years after the contract has expired to meet any legal obligations such as satisfying any legal, regulatory, tax, accounting or reporting requirements.
Providing us with your personal data
You are under no statutory or contractual requirement or obligation to provide us with your personal data. But failure to do so will mean that we are unable to enter a contract with you as we are not able to comply with Chartered Society of Physiotherapy and Health and Care Professionals standards and guidance.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at sophie.millar.physio@outlook.com if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, please contact us at sophie.millar.physio@outlook.com. You can also complain to the Information Commissioners Office (ICO) if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Sophie Millar Physiotherapy keeps this privacy policy under regular review and reserves the right to update it.