Privacy policy
The good news is:
As I am waiting for hell to freeze over before I do any direct marketing; the vast majority of the data you share with me has very little to do with the new GDPR.
I will ask you for plenty of personal information, but most of this is in line with forming a safe and secure contract with you, in order to deal with whatever you have come to see me about; when I do share your data, as explained below, it is in line with the rules of Personal Interest and therefore, also falls short of the scope of GDPR.
Your medical information falls under the category of Special Category Data and will only be (rarely) shared with other medical or health professionals and I would always check with you first. The only exception to this would be if you should happen to have a medical emergency in my presence.
The information I ask you to share with me is gathered to meet my insurance and industry standards and is required to be kept for a minimum of 7 years. These are rules I have to adhere to and cannot be overridden by your desire to remove your data, but don’t worry, I have no plans to analyse, sell, or otherwise utilise your information for anything other than the efficient running of our appointment based relationship. You can of course request that I destroy your information as soon as I am able; which may be more than 7 years, if you are under the age of 18 at the time of treatment.
I will share minimal amounts of your data with 3rd parties:
With your agreement I will share your name and phone number with Elixir in order to send automated appointment reminders. If you have or would like to join Elixir’s mailing list and receive newsletters and offers, let me or them know.
I may add your name and email address to Physiotools, an online service I use to prescribe rehabilitation exercises; you will not be contacted directly from this company.
Otherwise your data will be stored under lock and key, or password protected; but mostly on the paper form you watch me fill out.