GDPR and Privacy Policy
Camilla Lawrence Physio is a physiotherapy business owned and run by Camilla Lawrence. It is regulated by the Health and Care Professions Council (HCPC) and Treatments are carried out under guidelines set out by the chartered society of Physiotherapy (CSP) and the Pelvic, Obstetric and Gynaecological Physiotherapy Association (POGP).
What is personal data?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. Examples of personal data we may hold about you include your contact and appointment details.
​
Special category data is a sub-category of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. Examples of special category data we may hold about you include your patient notes.
Camilla Lawrence Physio is committed to ensuring your privacy and this privacy notice relates to information collected by questionnaires, in-person during your assessment and treatment, via letter, over the telephone or video conference call. It also relates to information which may be shared about you to us by another person such as a medical professional or colleague.
​
We collect and process data as we have a legal obligation to do so and we ensure that it is adequate, relevant and limited to what is necessary to provide a physiotherapy service to you. We do NOT share or pass on these personal details to any 3rd party
How do we process your personal data?
All points below relate to current patients, former patients and visitors to our clinic:
-
When you make an appointment or an enquiry, your name, phone number and email address will be used to make the appointment, send the confirmation and reminder, and to identify your appointment time in the clinic diary. When communicating via email we are unable to use encrypted emails, so you should be aware that emails that we send may not be protected in transit.
-
Should your details change, it is important that you let us know so that we can ensure your records are updated.
-
We use the information supplied in your appointment regarding the presenting complaint, symptoms, relevant history and family history to help formulate a diagnosis and treatment plan.
-
All pre-appointment questionnaires which are filled out are sent through the software we use, however it is not sent via an encrypted email service. Please be aware that if you do not wish for sensitive information to be sent via email, please let me know in person.
-
We keep a permanent record of attendance to appointments on our software for tax purposes but also to provide proof of attendance.
-
We may use your date of birth and address to help identify patients with the same name to avoid mistakes being made as to safe and appropriate treatment, for identification purposes if referring a patient to another health practitioner, and for identification purposes if writing to a registered medical practitioner so that they correctly identify the patient.
-
We record any information and advice that we have given and any decisions that have been made in conjunction with you, to help provide the best care possible and in case of insurance claim, complaint, civil litigation or criminal proceedings
-
We take record of your GP details in case of emergency and we seek consent from you to contact your GP regarding your presenting complaint.
-
Camilla Lawrence Physio uses a software called Cliniko to record all patient information. Cliniko is used as an appointment diary, production of invoices and storage for patient notes, scan results, questionnaires, forms and GP letters. Please see below for Cliniko’s privacy policy.
-
Our website may contain links to other websites/third parties which may be of interest to you. Once you have used these links to leave our site, we have no control over those sites and therefore we cannot be responsible for the protection and privacy of any information you provide to such sites.
-
We keep accident records for any patients, visitors or staff who are involved in accidents at our clinics in accordance with UK Health and Safety legislation including the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (RIDDOR) to comply with the law and to secure evidence in the event of criminal proceedings, civil litigation, an insurance claim or complaint.
-
Where relevant we maintain records of the patient’s consent to treatment, or the consent of their next-of-kin in order to be able to prove that the patient (and/or parent/guardian/next of kin) has given informed consent to treatment to secure evidence in the event of a civil claim, criminal prosecution, insurance claim or complaint.
-
You will not be sent any marketing material by the clinic unless you have consented to join a mailing list.
-
Your information will not be sold or used by any third parties. We will only share your information when we have your consent or we are required by law.
How long do we keep hold of your data?
We keep your personal data for no longer than reasonably necessary. We keep patient records for a period of 8 years (or 25 years if you have physiotherapy whilst pregnant) in line with current physiotherapy practice and with the professional policies by the Chartered Society of Physiotherapy. https://www.csp.org.uk/publications/record-keeping-guidance
​
At the end of applicable retention periods, all personal information held on a computer database will be deleted and also removed from any backup files held. You may request at any time, that changes are made to your contact details.
​​
​
Your rights and your personal data:
You are under no statutory or contractual requirement or obligation to provide me with your personal data, but failure to do so may mean we are unable to offer you physiotherapy services.
You are entitled to request a copy of your notes of the personal information held by Camilla Lawrence Physio and to have any discrepancies rectified. Requests must be made in writing with a proof of ID (passport or driving licence) and will be processed as soon as possible.
You are entitled to request that we transfer your data to another controller or to request that we erase all of your personal data where it is no longer necessary for us to retain it.
Cliniko’s Privacy Policy:
To access Cliniko’s privacy policy please see the below url: https://www.cliniko.com/policies/privacy/
Cliniko stores the data encryted, in a state-of-the-art facility. Access is restricted to those who need to know and they regularly review their technology to maintain security. If a breach in security occurs we will be informed within 72hrs and then we will inform you as soon as possible.
Complaints:
In the event that you wish to make a complaint about how your personal data is being processed by Camilla Lawrence Physio you have the right to complain to us. If you do not get a response within 30 days, you can complain to the ICO. The details for each of these contacts are:
​
Camilla Lawrence:
Telephone: 07748142351
Email: camillalawrencephysio@gmail.com
​
ICO:
Wycliffe House, Water Lane, Wilmslow, SK9 5AF Telephone +44 (0) 303 123 1113
​
