PRIVACY POLICY

All patients are now required to consent to their personal information being used under their privacy policy guidelines. Lakeside Physiotherapy Clinic Limited recognises the importance of protecting personal and confidential information.

Our Privacy policy has been written in accordance with the new rights of the individual within the new law. It is a statement that describes how we use, retain and disclose your personal information.

Who We Are

Lakeside Physiotherapy Clinic Limited is a private physiotherapy clinic focused on providing a physiotherapy service to the general public.
Our registered Clinic is: Lakeside Physiotherapy Clinic Limited, Festival Way, Festival Park, Stoke on Trent, Staffordshire ST9 9BG.
We are registered on the Information Commissioner’s Office register, registration number Z1310820.
Our designated Data Protection Officer is Simone Copeland who can be contacted at 01782 205707 or lakesidephysioclinicltd@btconnect.co

Information that we collect

Owing to the services and treatments we offer Lakeside will need to process sensitive personal information about you (known as special category data) to ensure safe and effective treatment can take place.

Where we collect such information we will only request and process the minimum necessary for the specialised purpose and identify a legal basis for doing so.


We will obtain your explicit consent through a signature at your first consultation. You can modify or withdraw consent at any time, which we will act on immediately unless there is a legitimate or legal reason for not doing so.

Special Categories Data

Lakeside Physiotherapy Clinic processes your information to meet our legal, statutory and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than specified in this notice.

Personal data that we may collect from you includes:
Title/Name
DOB
Home Address
Personal Email / Business Email
Home, work, mobile telephone number
Special category data (i.e. health/medical information, work history, hobbies.)
Occupation
Referral source
GP/Consultant details
Consent: Signature
Insurance company: Membership number, authorisation number, financial details

We collect information about you in the following ways:
Website ‘contact us’ page
E-mail correspondence (either from you or referral from GP/Consultant or Health Insurance Company)
Third parties i.e. (clinicians, health care professionals, GP/Consultants, Health Insurance Companies)
Telephone
Face to face consultation
Social media (i.e. Facebook, Twitter, LinkedIn)
If under 18 years old we may collect information from your parent/guardian or a family member acting on your behalf.
We also use, collect and store your financial details from payments received by cheque, cash, card payments payments and third party payments.

How we use your Personal Data

Lakeside Physiotherapy Clinic Ltd takes your privacy very seriously and will never disclose or share your data without your consent; unless required to do so by law. We only retain your data for as long as necessary and for the purpose(s) specified in this notice.
We collect your personal data so we can book you an appointment and identify you when providing you with our services. Your name and contact number will be stored within our booking system – TM2 (Blue Zinc). This is secure and encrypted and governed by their data protection policy.
We collect your personal data to ensure that appointment reminders and confirmation are sent out to your preferred phone and e-mail address.
We collect and store your personal data as part of our legal obligation for physiotherapy note keeping.
We may share your data with external health care professionals who are involved in, or recommended to be involved in your care. This will always be discussed with you and consent gained.
We may share your data with your external referring company or insurer (where applicable) as part of your treatment programme. This will always be discussed with you and consent gained.
We process your personal information for the purpose set out in this privacy notice. By law we must have a lawful reason for processing your information. We process standard and specialist information in order to undertake a course of treatment, preventive or occupational medicine; insurance purposes, defend legal claims.
Your information may be used anonymously to enable continued professional development to be undertaken
Your information may be used anonymously for data analysis for research purposes.

Your Rights

You have the right to access any personal information that Lakeside processes about you and to request information about:
What personal data we hold about you
The purpose of the processing
The categories of personal data concerned
The recipients to whom the personal data has/will be disclosed
How long we intend to store your personal data for
If we did not collect the data directly form you, information about the source.
You may ask us to correct any inaccurate or incomplete information within one month.
You have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data processing laws. Where applicable, you have the right to data portability of your information.
Any request to exercise any of the above rights will require verification of your identity before acting on the request. This is to ensure that your data is protected and kept secure.

Safeguarding Measures

We take every reasonable measure and precaution to protect and secure your personal data. We have several layers of security in place including: IT authentication; firewalls, anti virus/malware e- mail encryption.
Suppliers of medical equipment will have their contact details held on file for future reference so that orders can be placed.
Referring Companies for physiotherapy will have their contact details held on file.
Medical insurance companies that fund the payment of physiotherapy services for their client will have their contact details held on file.
With reference to the above, these are kept within a locked cabinet within a locked room.

How long we keep your Data

Your personal information will not be shared except in the following circumstances: On occasions your personal information will have to be shared with other medical practitioners. Patients who have been referred via a medical co-ordination company working on their behalf will require your personal information, consent, and assessment findings to process your recovery. Patients who receive funding for their physiotherapy treatment from an insurance company will have their personal information included within the invoice sent to the insurance in order to process the payment for the treatment they have received, At no point will your personal information be transferred outside of the EU.

Sharing and disclosing your information

Physiotherapy patients’ consent, registration information, assessment and treatment notes will be kept for the period of time in which you are receiving physiotherapy treatment, after which it will be stored as stated in this privacy policy and kept for the length of time outlined in the new GDPR and current clinical guidelines set by the Chartered Society of Physiotherapists (CSP). We are required by UK CSP Physiotherapy guidelines to keep your clinical records for a minimum of 8 years from the date of last treatment for adult records, and for children until they are 25 years of age. You records may be kept indefinitely if you return for another episode of treatment. Emails will be kept for the length of time as GDPR legislation. Supplier companies, medical co-ordination companies and insurance companies data will be retained in accordance to GPDR legislation.

How your information is kept

Our Patient Data is stored within TM2 (Blue Zinc) based online, hosted system. This is secure and encrypted and governed by their data protection policy.
Some information e.g. GP letters, Acupuncture consent forms, will be kept in the form of paper notes. These notes are kept within a locked filing cabinet within a locked room within the Clinic building.
Patients who have been referred via email from a third party should have had their personal information sent through a secure method requiring password access, All outgoing emails containing personal information will be sent using a secure method requiring password access by the recipient.
All historic emails will be stored and deleted in accordance with GDPR guidelines.
All digital information will be stored on external memory storage and kept securely. The information will be destroyed after the recommended length of time in accordance with GDPR and CSP guidelines.
Patients who are receiving funding through a medical insurance company may have (depending on which company) email correspondence. All outgoing emails will be sent securely.
All copies of patient paper invoices will be stored securely within a locked filing cabinet within a locked room.
All receipts will be stored securely within a locked filing cabinet within a locked room.

Website

This part of our privacy policy applies to the Lakeside website at www.lakeside-physio-stoke.co.uk

Information we collect

We will collect personal data on this Website only if it is directly provided to us by you the user, e.g. your e-mail address, name, telephone number and any details from a written enquiry which you may write and therefore has been provided by you with your consent. Normally you will only provide such details if you are making an enquiry with us.
We also use analytical and statistical tools that monitor details of your visits to our website and the resources that you access, including, but not limited to, traffic data, location data, weblogs and other communication data (but this data will not identify you personally).

Where we store and transfer your data

We will process, disclose or share your personal data only if required to do so by law or in the good faith belief that such action is necessary to comply with legal requirements or legal process served on us or the website.

Security

The transmission of information via the Internet or email is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data while you are transmitting it to our site; any such transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.

How we dispose of your information.

Following storage of your personal information for the legally stipulated period of time stated in this privacy policy medical notes containing personal and sensitive information will be destroyed securely and confidentially in accordance with the CSP guidelines.
You might find links to third party websites on our website. These websites should have their own privacy policies. We do not accept any responsibility or liability for their policies whatsoever as we have no control over them.

Third party links

You might find links to third party websites on our website. These websites should have their own privacy policies. We do not accept any responsibility or liability for their policies whatsoever as we have no control over them.

Cookie Notice

Cookies Used

_ga - Google Analytics

_gali - Google Analytics

_gat - Google Analytics

_gid - Google Analytics

viewed_cookie_policy - Website Cookie Bar Notification

Withdrawal of consent

Where you have provided your specific consent to the use of personal information, you may withdraw that consent by contacting us at our registered address.

Lodging a Complaint

If you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information please contact us at:
Simone Copeland (Data Processing Officer),
Lakeside Physiotherapy Clinic Limited,
Festival Way,
Stoke on Trent,
Staffordshire ST9 9BG.
01782 205707
www.lakesidephysioclinicltd@btconnect.com

If you are dissatisfied with how we deal with your complaint, you may contact the Information Commissioner’s Office:
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
0303 123 1113
www.ico.gov.uk