Privacy Policy
This is the privacy notice of HERA physiotherapy. In this document, “we”, “our”, or “us” refer to HERA physiotherapy.
Our address is Pineta, Myothill Road, Denny, FK65NB.
HERA physiotherapy is registered with the Information Commissioner’s Office.
At HERA physiotherapy we are committed to ensuring the best standards of practice. This extends beyond assuring the quality and safety of our clinical services, to ensuring high standards of quality and safety in the way we handle and manage personal data.
Individuals can be assured that the protection of privacy and confidentiality are given the highest priority, with all personal information being collected, held and used in strict compliance with the General Data Protection Regulations (GDPR) 2018.
Please see https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/ for more information.
Type of data and the legal grounds on which data is processed
As a Healthcare organisation we have a legal duty to collect and process information relating to the creation of medical records (patients) including billing information for insurance companies, personnel records (staff), as well as receiving enquiries (website) and conducting surveys. As such, we will ensure all personal data is collected, held and transferred (where required) in a lawful manner and in line with GDPR 2018.
Who Controls The Data We Hold
HERA physiotherapy will be the Data Controller for the information we gather from you, although ultimately it is the individual themselves who have control of the data, in line with an ‘Individuals Rights’ (unless exceptional legal jurisdiction applies). In the majority of cases HERA physiotherapy employees will be the ‘data processors’, who collect, store, transfer and destroy the data, in line with appropriate guidelines or individuals expressed wishes (where applicable). This will only occur in line with the purpose for which the data is collected and will not be manipulated, transferred or destroyed without legal basis or an individual’s expressed wishes.
How Long Will The Data We Hold Be Kept For
Different types of data have different legal ‘retention periods’ that we abide to, such as medical records and personnel records retention periods. Personal data will be held for no longer than is necessary and will be destroyed appropriately when the data retention period has expired. Equally individuals have the right to ask for their data to be destroyed or transferred elsewhere if they wish, at any time (providing no other laws prevent this from happening).
Information Collected Through Our Website
We do not collect any personal information from visitors to our website other than information that is knowingly or voluntarily given. Anonymous information is collected, such as the number of visitors to the website in a given period but is purely statistical and cannot be used to identify an individual user.
When you access www.heraphysiotherapy.co.uk, we use technology to collect information indirectly, such as your internet address, which is then kept in our internet access logs.
We collect information directly from you in a number of ways. One way is by using cookies. You will be asked if you agree to the use of Cookies. Cookies are small files of information that save and retrieve information about your visit to our site, such as how you entered our site, how you navigated through the site and what information was of interest to you. In addition to this, if you customise the homepage, we will store the information you give us in a cookie.
The cookies we use identify you merely as a number. (If you are uncomfortable about the use of cookies, you can disable cookies on your computer by changing the settings in the preferences or options menu in your internet browser.)
Cookies are not used to collect any other information from visitors to the website. Visitors interested in requesting more information must provide contact details and the reason for their request. Visitors will not be contacted by us, unless such information is given, and contact is specifically requested.
Third Party Disclosure
We will never pass any personal information to any third party outside of our organisation without your consent.
Data Security
We take appropriate measures to safeguard the information we hold from unauthorised access or improper use. Our data is stored in a secure, protected environment. Only users authorised by us have access to this data.
Clinical Data is stored by Cliniko – diary, accounts, clinical records, online booking: https://www.cliniko.com/policies/privacy/
We use Google workspace and send emails using Gmail: https://policies.google.com/privacy
Integrity of Data
We take all reasonable measures to ensure that the information we hold is accurate. In particular we use reliable collection methods and destroy or convert to an anonymous form, any out of date data. Individuals may request details of all personal information held by us so as to contest inaccurate or incomplete data, verify the information and have it corrected as appropriate. If you have a change in any personal information please let us know.
How You Can Complain
If you are not happy with our privacy policy or if you have any complaint then you should tell us by email. Our email address dani@heraphysiotherapy.co.uk
If you are in any way dissatisfied with how we process your personal information, you have a right to lodge a complaint with the Information Commissioner’s Office. This can be done at https://ico.org.uk/concerns/
Third Party Sites
We cannot be responsible for the privacy policies and practices of other websites even if you access them using links from our site and recommend that you check the policy of each site you visit.
Improving Our Service
If you have agreed that we can, staff from HERA physiotherapy may contact you from time to time by e-mail or by telephone in order to get your feedback on the service we provide to you.
Information About Products and Services
It is very important to us that we provide you with the highest level of service. In order to help us do this, where you have agreed to receive such information, from time to time we may send you details of products and services which we think may be of interest to you. You can unsubscribe from this at any time.
E-mail use Policy
With your consent your email address will be added to our database and may be used for contacting you in regards to your sessions, your programs, marketing campaigns, offers and other generalised information. If you do not wish to receive any of this information you can unsubscribe at any time.
Appointment Reminders
With your consent you will receive appointment reminders via email.
Lawful Disclosure
We will disclose your Personal Information where required to do so by law or in accordance with an order of a court of competent jurisdiction. We will also disclose your information if we believe that lawful disclosure is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Service.
Review of this Privacy Policy
We may update this privacy notice from time to time as necessary. The terms that apply to you are those posted here on our website on the day you use our website. We advise you to print a copy for your records.
If you have any question regarding our privacy policy, please contact us.