PRIVACY POLICY May 2018
DATA Controller: Carol Robertson (registered with the ICO)
How do I hold and use your information?
Clients - I only collect relevant information from clients as required for the delivery of my professional service in line with my legal obligations to maintain a record. These records are predominantly held as hard copies and stored in a locked filing cabinet. Any electronic records are held on password and fingerprint protected apple devices.
Medical records must be kept for 8 years therefore I store paper documents and maintain an archive of electronic documents which are placed on an external hard drive held in a locked filing cabinet. After this time documents are securely disposed of and shredded. Electronic documents will be deleted.
The information which I record includes; names, addresses, contact details, medical history, assessment notes, treatment records, consent forms and reports. Clients have a right to access their records – these can be accessed by writing to me at the address above with proof of identity indicating which information is required, and if necessary which information needs to be amended.
The information I collect is confidential - information is only ever shared with relevant professionals after discussion with the client and with their consent e.g. with occupational health referring services, G.P.s. In exceptional circumstances, there may be a duty of care to report e.g. a welfare issue regarding vulnerable adults, I have a legal obligation to act on this information.
Mailing lists – I collect data (e.g. names, email addresses) via the Mailchimp service for the purpose of communication and advertising of training courses. This data is not used for any other purpose or by any other individual or company. By completing the sign-up form on my website interested individuals are opting in to this service. Mailchimp privacy policy can be accessed here https://mailchimp.com/legal/privacy/
Every email sent has an unsubscribe option at the foot of the email should people wish to withdraw from this service and erase their information. This can also be achieved by contacting me directly by email – carolacmos@live.co.uk
I do not ever sell information to third parties. My website contains links to other sites which are out-with my control and governed by their own privacy policies. In the event of a breach of data security I will notify my clients and the ICO immediately. Clients have the right to lodge a complaint with a supervisory authority if deemed necessary. If you have any other questions about how I use your information please contact me.
Carol Robertson, Holistic Physiotherapist MCSP, ACPEM & ACMOS Method Practitioner & Teacher
23 Cherry Park, Balloch, Inverness, IV2 7HG www.carolrobertson.co.uk 01463 794582