GDPR PRIVACY NOTICE

Who We Are:

DW Osteopathy. Our Website Address is: dwosteopathy.com

Use Of Your Data:

When you supply your personal details to this clinic they are stored and processed for 4 reasons:

1. We need to collect personal information about your health in order to provide you with the best possible treatment. Your requesting treatment and our agreement to provide that care constitutes a contract. You can, of course, refuse to provide the information, but if you were to do that we would not be prepared to provide any treatment.
2. We have a “Legitimate Interest” in collecting that information, because without it we couldn’t do our job effectively and safely.
3. We also think that it is important that we can contact you in order to confirm and remind you of your appointments with us or to update you on matters related to your medical care. This again constitutes “Legitimate Interest”, but this time it is your legitimate interest.
4. Provided we have your explicit consent, we may occasionally send you general health information in the form of articles, advice or newsletters. You may withdraw this consent at any time – just let us know by any convenient method.

We have a legal obligation to retain your records for 8 years after your most recent appointment (or age 25, if this is longer), but after this period you can ask us to delete your records if you wish. Otherwise, we will retain your records indefinitely in order that we can provide you with the best possible medical care should you need to see us at some future date.

How we record data:

As of September 28th 2020, all patients attending the clinic after this date will have their records recorded electronically. Paper-based records of patients who attend the clinic after this date will be scanned onto the new system. Electronically collected data is stored using specialist medical records software called, Cliniko. They ensure full GDPR compliance. Access to this data is password protected with a 2-fold authentification process and passwords are changed regularly. Cliniko's privacy policies can be viewed here: Cliniko Privacy Policy.

Paper-based records recorded before 28th September 2020 will not be digitally scanned onto the new electronic system - unless the patient returns to the clinic for osteopathic attendance after specified date. Paper-based records and information are stored in locked filing cabinets, in premises which are also always securely locked out of working hours.

We do not, nor will we ever, share your data without your consent. The only exception, should you opt-in, is that we use Mailchimp to send our newsletter, so your name and email address may be saved on their server.

Contact Forms:

DW Osteopathy uses a contact form as one method of obtaining enquiries. No information is stored directly on the webserver of which the enquiry is sent. Enquiries are sent securely via email over an SSL connection. That information is stored for up to 48 hours on our secure email server whilst we respond to your enquiry. If we are unable to contact you within 48 hours then we will permanently delete your data and enquiry unless you specify otherwise in the enquiry.

We also send occasional newsletters and clinic updates via Mail Chimp as listed above. If you choose to opt in to these communications then your data will be held physically on paper files or electronically on Cliniko's servers, as previously stated for that purpose.

Rights Of Your Data:

You have the right to see what personal data of yours we hold, and you can also ask us to correct any factual errors.
Provided the legal minimum period has elapsed, you can also ask us to erase your records.

Cookies:
When you visit our website, we use anonymous cookies to prevent users from seeing the same popup repetitively in an attempt to make our users experience more pleasant while still delivering time sensitive messaging.

Analytics:

We use Google Analytics for the purposes of monitoring site traffic. You can view Google's Privacy Policy HERE

Complaints:
We want you to be absolutely confident that we are treating your personal data responsibly, and that we are doing everything we can to make sure that the only people who can access that data have a genuine need to do so.

Of course, if you feel that we are mishandling your personal data in some way, you have the right to complain.
Complaints need to be sent to what is referred to in the jargon as the “Data Controller”.

Here are the details you need
for that:
Daniel Woodward (Owner)
[email protected]
07870 492293