Our contact details:
Name: Sarah Macdonald, Pinewood Neuro Physio
Telephone: 07759 406 526
E-mail: sarah@pinewoodneurophysio.co.uk
The type of personal information we collect:
We currently collect and process the following information:
• Personal identifiers, contacts and characteristics (for example, name and contact details)
• Health data
How we get the personal information and why we have it:
Most of the personal information we process is provided to us directly by you for one of the following reasons:
• To contact you in relation to your management under our service
• To complete an appropriate assessment
• To inform your physiotherapy treatment plan to ensure it is safe and appropriate
• To update you regarding our services
We may also receive personal information indirectly, from the following sources in the following scenarios:
• From another health professional involved in your care e.g. your GP or Consultant, following consent from yourself, to fully inform your physiotherapy treatment plan.
We use the information that you have given us in order to:
• Complete an appropriate assessment
• Inform your physiotherapy treatment plan
• Contact you to arrange further appointments at your request
• Inform you regarding our services
We may share your information with your GP, Consultant or other Health Professional involved in your care with your prior consent. This sharing may occur via secure encrypted email or via post.
From time to time and only with your prior consent, Pinewood Neuro Physio may contact you using your contact details provided to inform and update you regarding our services. This may occur whilst you are receiving active input from us or after your active input has finished. You may opt out at any time by contacting us via our details on the first page. Please refer to our Consent Document to update your consent and contact preferences.
GDPR and Data Protection Act
For purposes of direct care:
As a provider of health care, under the UK General Data Protection Regulation (GDPR), the lawful bases we rely on for processing your information for the purpose of direct care is ‘legitimate interests’ (Article 6(1(f)).
The special category condition for processing your health data for direct care is ‘health or social care’ (Article 9(2(h)). The additional condition under Schedule 1 of the Data Protection Act 2018 for the provision of direct care is ‘Health or social care purposes’ (Schedule 1, Part 1 (2)).
For purposes other than direct care:
The lawful basis we rely on for processing your data is ‘consent’ (Article 6(1(a)).
How we store your personal information
Your information is stored securely electronically via password protection, encryption and secure back up.
As a registered Health Care Professional, we are obliged to store your health care record for a minimum of 8 years, and in some circumstances longer, from your last contact with our service. This is in line with the Records Management Code of Practice 2021. Following this retention period, your records will be securely destroyed.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
If you wish to make a request, please contact us at:
sarah@pinewoodneurophysio.co.uk
Mobile: 07759 406 526
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at sarah@pinewoodneurophysio.co.uk.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk