TERMINOLOGY

Personal data is any information that could identify a person (data subject).  Personal sensitive data relates to information concerning a data subject’s racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life, or details of criminal offences.

A data subject is any identified or identifiable person whose personal data is processed by the data controller.

A data controller determines the purposes for data processing and the way personal data is processed.

Processing is any action or actions performed on personal data such as collection, organisation, storage, erasure or destruction.


DATA COLLECTION
The Wells Physiotherapy & Sports Clinic collects personal data that is required for the provision of services.  This can include:
 

• Contact details such as names, addresses, telephone numbers and email addresses

• Date of birth

• National insurance number

• Insurance details

• Personal sensitive data concerning physical and mental health
   

The Wells Physiotherapy & Sports Clinic collects any additional data received by email, letter, telephone, through www.wellsphysiotherapy.co.uk or by any other means of correspondence.

The Wells Physiotherapy & Sports Clinic can obtain personal data from third parties such as doctors and other related health professionals with consent from the data subject.

The Wells Physiotherapy & Sports Clinic can store personal data obtained from social media interactions outside of social media platforms if correspondence regarding services is received; the data is then covered as outlined in this policy.


COOKIES
Data may be obtained from cookies through www.wellsphysiotherapy.co.uk.  Cookies are small text files that are placed on a device by websites when they are visited. Cookies enable delivery of more personalised content and are widely used to make websites work or work more efficiently.

Most web browsers allow some control of most cookies through the browser settings.  Please note that in a few cases some website features may not function if cookies are removed from the browser.

 

GOOGLE ANALYTICS

When www.wellsphysiotherapy.co.uk is visited, a third-party service called Google Analytics is used to collect standard internet log information and details of visitor behaviour patterns.  This is to discover factors such as the number of visitors to various parts of the site.

This information is processed in a way that does not identify anyone; The Wells Physiotherapy & Sports Clinic does not make, and does not allow Google to make, any attempt to find out the identities of those visiting www.wellsphysiotherapy.co.uk.

 

DATA PROTECTION

The Wells Physiotherapy & Sports Clinic has security measures in place to protect personal data from theft, loss and breach of privacy.  Security measures in place include encryption, password protection, and a Firewall (security software) in place to protect internal information from the internet. 

Access to personal data is restricted to figures of authority within The Wells Physiotherapy & Sports Clinic such as receptionists and physiotherapists.

The Wells Physiotherapy & Sports Clinic can share personal data with essential and relevant third parties with written consent from the data subject. These can include:

 

• Health professionals such as doctors and specialists; for example, the clinic may be required to refer a data subject

• Insurance companies and solicitors; for example, a medical note may be required for an insurance claim.

​

​

DATA RETENTION
The Wells Physiotherapy & Sports Clinic practises an eight-year retention period after which personal data is securely destroyed. Personal data is archived off-site for the final three years of this retention period.

Personal data may be kept for longer than eight years if data subjects are below eighteen years of age.

Please be aware that companies can keep personal data for longer if kept for public interest archiving or statistical purposes.

​

 

GENERAL
The Wells Physiotherapy & Sports Clinic acts as a data controller by processing personal data.  Processing is always with legitimate interest and compatible with the reason the data was originally collected.

The Wells Physiotherapy & Sports Clinic uses personal data for the provision of requested services.  The Wells Physiotherapy & Sports Clinic may contact data subjects in accordance with their plan and in response to bookings and enquiries.  The Wells Physiotherapy & Sports Clinic does not contact data subjects with marketing information.

The Wells Physiotherapy & Sports Clinic may be required to process personal data for investigating, detecting and reporting crime; to demonstrate compliance and to actively comply with industry standards and any laws and acts that may apply.

The Wells Physiotherapy & Sports Clinic may occasionally update this policy therefore data subjects and visitors to www.wellsphysiotherapy.co.uk may want to check it each time personal data is provided.

www.wellsphysiotherapy.co.uk may contain links to external websites.  The Wells Physiotherapy & Sports Clinic is not responsible for the privacy practices of such other websites and encourages visitors to read the privacy policies of every website that collects personal data.

​

 

RIGHTS
Data subjects have the following rights regarding their personal data: