PRIVACY STATEMENT

New Data Protection Legislation is coming in to force in the UK on 25th May 2018. The General Data Protection Regulation (GDPR), is EU wide legislation, and is currently being enacted into UK law and will become the 2018 Data Protection Act.

This legislation will affect every business that handles personal data for clients, customers or staff. Personal data has been defined by the act as ‘any information relating to an identifiable person who can be directly or indirectly identified’.

I need to inform you that  I collect and keep paper records of each client. The  information that I keep on record consists of your contact details, relevant medical information and treatment plans which ensures I can provide you with the most effective service.

I will not pass your details on to any third parties except when you have consented to this, for example, when referring to another health care professional.

I will keep your records for a minimum of 7 years after your last visit and, in the case of minors, 7 years after they have turned 18.

You have Individual Rights under the Data Protection act 2018

• To be informed about the personal data I hold on you

• To access your personal data

• To object to the processing of your personal data

• Restrict the processing of your personal data

• To rectify your personal data

• To erase your personal data

You can exercise your Individual Rights at any time without charge. However, if your request is considered repetitive, unfounded or excessive a reasonable administration fee will be charged.

I will take all appropriate technical and organisational steps to protect the confidentiality, integrity, availability and authenticity of your data.