PRIVACY POLICY
This privacy policy sets out how Soma Wellness Chiropractic uses and protects your personal information and data. In providing chiropractic services Soma Wellness Chiropractic is required to process the following categories of data:
-
Personal data such as your name, address, date of birth, gender, contact details and details of lifestyle
-
Special categories of personal data such as health and medial history
Soma Wellness Chiropractic may at times be required to process receipts, invoices or reports. The lawful basis for processing your personal data is to meet contractual obligations.
How and why we keep personal data
Your personal data, including your health, medical history, lifestyle will be collected and stored on hard copy/paper and will be updated upon each appointment. This is to ensure any treatment can be both safe and appropriate. You have the right to object to the collection of your data, however, if you do object to the collection, sharing and use of your personal data I may be unable to provide you with chiropractic services.
Soma Wellness Chiropractic is committed to ensuring that your personal information is secure and will take all appropriate technical and organisational steps to protect the confidentiality, integrity, availability and authenticity of your data. Your personal records are kept here in the clinic under conditions of strict confidentiality. No-one else has access to your personal data unless the law allows them to do so. If we need to inform other health professionals about your condition or treatment plan, such as a GP, we will only do so only with your permission.
Soma Wellness Chiropractic will not send you any marketing emails and will not sell, rent or share your contact details with any other organisation. We have reviewed the security of our systems and our data protection practices to ensure that we are operating within the requirements of the General Data Protection Regulation (GDPR).
We are required by the General Chiropractic Council (GCC) to keep records of patient treatments for 8 years. Therefore, your details will be kept for eight years after your last treatment. In the case of children, we are required to keep their records until they are twenty-five years old. Please note that no information is kept regarding credit or debit cards that may be used for payment, as these are held only by the payment service we use.
Your rights
If at any point you believe the information we have on file about you is incorrect, you can request to see this information and have it corrected. You have a right to ask for information to be deleted, but as the Clinic is required under GCC regulation to keep information about the treatment we have provided for eight years, we may not be able to do this. If you wish to raise a complaint on how were have handled your personal data, please contact the Clinic in the first instance. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO). Please refer to www.ico.org.uk/concerns.