(Head Officeaddress: 3 Sandygate Park, Sheffield S10 5TZ)
The White House Physiotherapy & SportsInjury Clinic will respect and protect any personal information you provide uswith. This information can be obtainedthrough making an appointment, the clinical examination or from any purchase ofproducts or services with us.
Any changesto the policy will be made by updating this page. You should check this page from time to timeto ensure that you are happy with any changes. This policy is effective from 01.05.18.
What personal information we collect
- Name, date of birth and address
- Contact information such as a telephone number and/or an email address
- History of your health, your family’s health and any related conditions you have, your medication, occupation and interests
- How your treatment is paid for e.g. self-payer– private insurance policy – referral from a third party
This information will primarily be collected from you with your permission. Where it is lawful to do so, we may collect information from other sources such as the NHS or other healthcare providers authorised to provide it. This includes parents or carers who have permission to give information on your behalf.
What we do with the information we gather
We require this information to understand your needs and provide you with the best possible service. In particular we require your information for the following reasons:
- During your appointment
- Internal record keeping
- Any referrals made to your GP or the hospital
- Providing products and services
- Responding to any queries you have
- Maintaining records for tax compliance with the laws defence of claims
- Managing and administrating insurance claims
In order to provide you with products or services described above we hold digital copies of your information securely at The White House Physiotherapy & Sports Injury Clinics.
Third Party System Software Providers and your data security
Part of our processes use third party systems software to collect and store your personal information. Under GDPR guidelines ‘we’ as Data Controllers have responsibility to ensure that your data is processed securely.
The White House Clinic uses different software providers for different elements of the business. When you provide us with information it can be in the following ways:
· By Telephone:
Our telephone system is an internet-based call system managed by Pine Media where all calls are secure and recorded for training and monitoring purposes. Recorded calls are stored for a maximum of 60 days within our password protected portal which is accessible only by senior management. After 60 days calls are deleted from the system automatically.
Any information gathered during a phone call will be input by a staff member directly into our Private Practice Software (PPS) where data is securely stored within our own multi-layered protected computer network.
· When requesting a telephone consultation via our website:
Our website contains a form field which allows our customers to send us their request for a call back. When you input your personal information into this form the information is sent directed to our encrypted email service to firstname.lastname@example.org and is collected by a receptionist/administrator or physiotherapist. All access to our emails are password protected at each stage.
· Newsletter sign-up
You can complete our online form via our website in order to receive a copy of our newsletter via email. When you input your personal information into this form the information is sent directed to our encrypted email service to email@example.com and is collected by a receptionist/administrator or physiotherapist. All access to our emails are password protected at each stage.
· Booking a physiotherapy appointment online via our website:
Via www.whitehouse-clinic.co.uk you can book an appointment straight into our PPS diary system. The data provided at this stage links directly with our securely hosted PPS system and is not accessible to anyone outside of our organisation. The PPS system is password protected at all stages with each ‘data controller or data processor’ having their own log-in secure passwords.
· When you attend your appointment:
You will be asked to complete a paper registration form. This form allows the physiotherapist to gather the relevant information from you prior to your appointment. The receptionist/administrator will input the information from this registration form into PPS and will then shred the document to ensure your security.
· After your appointment:
· Booking into a Pilates/Yoga or other group class at the clinic:
The White House Clinic uses a software programme called ‘Mindbody’ which enables our customers the ability to access our programme timetable online as well as booking in and out of classes at your convenience. In order to offer this service Mindbody provides us with a software programme which collects your personal information and stores your payment information securely within the software.
For further information about our IT policy and how we securely store your data please visit our website or ask at reception to read a full copy of our policies.
How long we store your information for
Information will be retained by us for as long as is reasonably necessary as defined under applicable healthcare laws and regulations.
Who your personal information is shared with
- We may disclose personal information to health care authorities including the NHS or equivalent bodies
- If you have been referred to us as a corporate customer, we may share your information with your employer
How to update your information
If you believe that any information we are holding on you is incorrect or incomplete, you can update your personal information by visiting our practice or in writing posted via royal mail. If you would like to do this, our head office address is:
The White House physiotherapy & Sports Injury Clinic, 3 Sandygate Park, Sheffield, S10 5TZ
Protecting personal information
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronics and managerial procedures to safeguard and secure the information we collect from you. All paper copies of your records are destroyed and electronically accessed only by our data processors.
We cannot 100% guarantee the complete security of our electronic database however we do have antivirus software in place which is maintained by our software security company Highlander Business Solutions. We also cannot 100% guarantee that the information you supply to us will not be intercepted when provided over the internet. Any online transmission of information is at your own risk.
Using our Website
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
You have certain rights under the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) including the option to:
- Access your personal information (we may charge a fee where we are permitted by law to do so)
- Rectify your personal information if it’s inaccurate or incomplete
- Erase personal data and prevent processing under certain circumstances (i.e. if there is no lawful ground to retain or process the information)
If you have any queries about our policies,please visit our practice or call 0114 2632055
The information on in this document is intended for information and reference purposes only. The medical information is general and not case specific. It should not be relied upon as a replacement for seeking advice from a registered physiotherapist, general medical practitioner or other professional person. The White House Physiotherapy & Sports Injury clinic do not accept liability whatsoever for any assumed diagnosis or treatment made from information contained within this document or on our website.
By answering any question, inquiry or providing you any information, the therapist is not treating you as a patient. Without an assessment the therapist will under no circumstances assume any liability or responsibility whatsoever for the care of an individual. Our therapist is providing you with the requested information as a professional courtesy, for general information purposes only.
If you have any concerns regarding how your personal data is held by our company, please contact our data controller by visiting our practice or in writing. Alternatively contact the ICO
Last updated 8th May 2018
Contact us for CALL US
Our team are ready and waiting to assist with your recovery.