Privacy Policy Summary

The purpose of this summary is to ensure you are aware of the core elements of our Privacy Policy – your rights in the collection, processing and other use of your personal data.

The full Privacy Policy can be found here.

WHAT INFORMATION WE COLLECT AND WHY

Information collected by www.mpphysiotherapy.com, Findoc booking platform, over the phone or via email

  • We will collect personal data about you that you provide to us.
  • When using our website we use analytical tools that monitor details of visits to our website.
  • When using the online booking form you are sharing your information with us, but also with Findoc (www.findoc.co.uk).

Information collected at the clinic prior to treatment

We collect your personal and health data.  It is necessary to collect this data:

  • To identify you.
  • For medical diagnosis and healthcare.
  • For communication purposes relating to appointments, payments, notifications relating to invoices settled by health insurers, and sending you your exercise programmes.

The lawful basis for processing your personal data is your consent and a vital interest necessary to protect life.

Where a data subject is physically or legally incapable of giving consent, we would collect either:

  • Vulnerable adult’s information – details of the Power of Attorney (POA).
  • Children’s information – details of parent or legal guardian, if the service user is under 16 years of age.

USE OF YOUR INFORMATION

We keep your information secure in accordance with the DPA 2018 (GDPR compliance) and use it to respond to your enquiry. When attending your appointment, you will have the option to give consent and you have the option to provide us with informed consent for treatment.

HOW INFORMATION IS OBTAINED

  • From you, it may be obtained over the phone or via email at the time of booking your initial assessment
  • Information may be obtained via online booking service provided by www.findoc.co.uk.
  • Information may be obtained by post or email when shared via another health professional such us your consultant, GP, or podiatrist.
  • Information may be provided by you verbally at the time of the initial consultation.

HOW YOUR INFORMATION IS STORED

  • On paper records; stored within a cabinet in a key locked area
  • Part of your information (mainly treatment notes) is stored on Dropbox; a secure cloud storage service which keeps information safe using features such as two-factor authentication and encryption.

HOW INFORMATION IS ACCESSED

  • Paper files are accessed directly by the treating therapist only who has the required key.
  • Electronic notes stored on Dropbox are accessed by authorised clinic staff and healthcare professionals working at the clinic. Access is protected by double passwords; personal login to the device and log in and password to account. The system can also be accessed via other devices outside of the clinic. Staff have an obligation to follow our policies regarding accessing electronic notes outside of the clinic.

HOW INFORMATION FLOWS OUT OF THE BUSINESS

  • External health professionals/ NHS
  • Solicitors
  • Health insurers
  • Online billing and secure messaging services
  • Key Performance Indicators (KPIs)
  • Statutory duty to disclose information

SECURITY

We do our best and have measures in place to safeguard your personal information. However, we cannot always guarantee the security of your data when electronically submitted or transmitted to us. If a data breach is reported we will investigate and implement the appropriate procedures to resolve the issue immediately.

THIRD-PARTY LINKS

Our website makes use of a third party link, Findoc, for the online appointment bookings. Any link you make to or from the third-party website will be at your own risk as we do not have control over it. We do not accept any responsibility for the content on the third-party website. Any use of the third-party website will be subject to and any information you provide will be governed by the terms of the third-party website, including those relating to confidentiality, data privacy and security.

USE OF COOKIES

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.

Our third-party website Findoc makes use of cookies. View their full privacy & cookie policy here

YOUR RIGHTS

In accordance with the DPA 2018 (GDPR compliance), your rights are as follows:

  • The right to request a copy of your information.
  • The right to correct any mistakes in your information.
  • The right to ask us to stop contacting you with direct marketing.
  • The right to have your personal data erased.
  • The right to restrict the processing of your data.
  • The right to object to us processing your data at the point of first communication, or at any other time.

DENIAL OR LIMITATION OF INFORMATION

We may deny or limit the scope of information we provide to you if:

  • The information released may cause serious harm to the physical or mental health or condition of the individual or any other person, or
  • The disclosure would also reveal information relating to, or provided by, a third person who has not consented to that disclosure.

Please note, we do not have the obligation to inform you why we had denied to provide you with your personal information.

CHANGES TO THIS POLICY

We may update our Privacy Policy and Privacy Policy Summary. Please check this Privacy Policy regularly to keep up-to-date with how we are protecting your personal data.

COMPLAINTS

If you wish to raise a complaint on how we have handled your data, you can contact us directly. We will respond to your request within 30 days. If the problem remains unresolved you have the right to make a complaint to the You can also seek other legal independent advice.

Last updated: 31.03.2019