This privacy policy sets out how Synthesis Rehab uses personal data we may collect and how we keep safe any information that you provide to Synthesis Rehab.
Personal information may be provided to Synthesis Rehab by this website, when you receive face-to-face treatment or over the phone contact when speaking to our team. We are committed to ensuring your privacy is protected in line with GDPR, Europe's new framework for data protection. You can be assured that our data protection policy will be used in accordance with this privacy notice to ensure your data is fully protected. This policy is effective from 25th May 2018.
What is GDPR (General date protection regulation) ?
GDPR has been set up to allow consistency throughout Europe with the handling of data and to ensure all companies and service providers handle data in an appropriate and fair way and in a way that is explicit to customers and patients. The key areas that GDPR highlight as being particular data rights for individuals are listed below:
Right to be informed - the fair processing of your data
Right to access - the data we hold on you
Right to erasure - the right to be forgotten should you wish to delete your data
Right to recertification - if we hold data that is inaccurate then you may ask for it to be rectified
Right to restrict processing - to prevent the processing of your data
Right to data portability - transferring your data elsewhere
Right to object - to processing, marketing that is direct and the use of your data for research.
Right to question automated decisions
What personal data we collect
- Full name
- Age/date of birth
- Postal address
- Email address
- History of presenting condition as well as job title, hobbies, past medical history and medication history.
- Physical examination
- Treatment performed
Why we need your data
Medical and healthcare notes must be kept in a concise and intelligible way so that is clear a clinician has collected sufficient information and that this information tells a story about an individual's problem. We must keep this information as evidence that we have treated you as this forms an important part of your medical history. We are required by law to keep this for 7 years after you have visited the clinic, if you are over 18 years of age at the time of the 1st consultation. If you are under 18 then we must keep the information for 25 years. Should you wish to reflect on your treatment some time afterwards, then having accurate and available notes would support the involved parties.
Your personal information relating to address and date of birth is essential so that we can accurately identify a patient. We may have 2 or 3 patients on our system with the same name. We may only be able to tell them apart by date of birth or address. These details are essential and must be included within your consent, so we can securely identify our patients. This information is kept as a minimum for the duration of the treatment.
How we protect your personal data
We require personal information related to your health records to help us understand your physiotherapy related problem and how we can rehabilitate your issue. We also use this data for internal record keeping. We may use demographic, not personal data to customise our website. We will also use your information to communicate with other health professionals who may be involved in your episode of care.
We are committed to treating your data with the utmost care and take all appropriate steps to store and protect it in a secure online environment. Access to your stored health records and personal data is password-protected. Access to the Contact Us section of our website which you may complete with personal information is secured by using 'https' technology. Personal information we may receive from you via our website or appointment booking system is physically secured via our hosting companies. By having their own data centres, they have built in a secure network infrastructure and do not rely on third-party solution.
How we use cookies
Cookies are tiny text files stored on your computer's hard drive when you visit certain web pages if you agree to its usage. You can choose to accept or decline cookies.
Cookies allow us to keep track of your preferences when using our website. When we analyse the data, we can identify which demographic of patients use our website and we can then tailor the website to our patients' needs. We only use this information for internal and statistical purposes and then the data is removed from the system. By accepting the use of cookies, we do not gain access to your computer.
How we use Google Analytics
We use Google Analytics to collect information about visitor behaviour on our website. Google Analytics stores information about what pages you visit, how long you are on the site, how you got here and what you click on through the use of cookies in order to provide meaningful reports about website visitors but they do not collect personal data about you. Additionally, Google Analytics only uses first-party cookies. This means that all cookies set by Google Analytics cannot be altered or retrieved by any service on any domain other than www.synthesisrehab.co.uk. Further detailed information on Google Analytics cookies can be found at https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.
How long do we keep your personal data?
We will only collect and keep your personal data for as long as it is necessary for the purposes explained above. At the end of that retention period, your data will either be deleted completely or anonymised. We abide by the guidelines set out by our governing body, The Health Care Professions Council (HCPC).
Who do we share your personal data with?
We sometimes share your personal data with your GP, consultant or health insurance provider but only in the interest of your health and wellbeing.
What are your rights regarding your personal data?
You may choose to restrict the collection or use of your personal information. You have the right to request details of personal information which we hold about you. If you believe that any information we are storing about you is incorrect or incomplete or if you have a concern about how we handle your data, please write to us as soon as possible so that we can promptly correct any information found to be incorrect.
The policy applies to The Physiotherapy Clinic's website at www.synthesisrehab.co.uk (the "Website"). We at Synthesis Rehab take your privacy seriously. This policy covers the collection, processing and other use of personal data under the Data Protection Act 1998 ("DPA") and the General Data Protection Regulations ("GDPR") May 2018.
For the purpose of the DPA and GDPR we are the data controller and any enquiry regarding the collection or processing of your data should be addressed to:
The Data Controller
At our address: Synthesis Rehab, Siop Y Groes, Carno. Powys SY17 5LL
Or
Email: reception@synthesisrehab.co.uk
Or
Tel: 07434 739798
This policy was updated on: 6th January 2021